last executing test programs: 4m51.538232268s ago: executing program 32 (id=2847): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu<=0||!') 3m5.879993583s ago: executing program 33 (id=7159): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000004}}}}}}, 0x0) 2m55.17973388s ago: executing program 5 (id=7638): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000280)=""/153, 0x99, 0x0, &(0x7f0000000180)=""/64, 0x40}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x26) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2m55.113232111s ago: executing program 5 (id=7639): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 2m55.112007591s ago: executing program 5 (id=7640): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m55.104821012s ago: executing program 5 (id=7641): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m55.086076242s ago: executing program 5 (id=7642): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$ppp(r2, &(0x7f0000000540)='|Z', 0x2) 2m54.846159186s ago: executing program 5 (id=7646): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x4, 0x1, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x1}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m54.843663016s ago: executing program 34 (id=7646): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x4, 0x1, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2020, 0x0, {0x1}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m48.289638395s ago: executing program 6 (id=7859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) listen(0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) 2m48.272294146s ago: executing program 6 (id=7860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) 2m48.179869217s ago: executing program 6 (id=7863): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x3, 0x0, 0x83}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 2m48.097635618s ago: executing program 6 (id=7866): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 2m48.061164679s ago: executing program 6 (id=7867): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 2m47.852925302s ago: executing program 6 (id=7870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 2m47.852667902s ago: executing program 35 (id=7870): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0xffffffff}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 2m19.444715874s ago: executing program 8 (id=8725): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) sendmsg$tipc(r0, &(0x7f0000000640)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x0, 0x4}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc000}, 0x891) 2m19.426433365s ago: executing program 8 (id=8727): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 2m19.220929388s ago: executing program 8 (id=8731): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) syz_usb_disconnect(0xffffffffffffffff) 2m18.48009191s ago: executing program 8 (id=8776): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x31001, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2205080, 0x0) 2m18.420684541s ago: executing program 8 (id=8778): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0) 2m18.224736335s ago: executing program 8 (id=8784): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e000701fcfffffffedbdf25017c00000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2m18.221157455s ago: executing program 36 (id=8784): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e000701fcfffffffedbdf25017c00000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 54.128206051s ago: executing program 3 (id=11232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x0, 0x0, 0x0, 0x0, r2}) 54.092494172s ago: executing program 3 (id=11234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xd0, &(0x7f0000000080)={0x0, 0x8b48, 0x2000, 0x1, 0x3d8}, &(0x7f0000ff0000), 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 54.043245783s ago: executing program 3 (id=11237): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r1, 0x0, 0xee00) 53.969171604s ago: executing program 3 (id=11239): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2b05090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 53.968750874s ago: executing program 3 (id=11240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000053040c"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x880) 53.816642336s ago: executing program 3 (id=11245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10) 53.812733136s ago: executing program 37 (id=11245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10) 24.255617907s ago: executing program 7 (id=11857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) set_tid_address(0x0) 23.437591881s ago: executing program 7 (id=11859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4000000, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x9f) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 23.185695455s ago: executing program 7 (id=11865): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 22.994329438s ago: executing program 7 (id=11876): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2b05090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 22.939707899s ago: executing program 7 (id=11879): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x80803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005e00010200"/20, @ANYRES32=0x0, @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) recvmmsg(r0, &(0x7f0000001bc0)=[{{0x0, 0x0, 0x0}}], 0x7, 0x0, 0x0) 22.837144181s ago: executing program 7 (id=11882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x6a}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r2, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 22.836775191s ago: executing program 38 (id=11882): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x6a}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r2, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 3.459616793s ago: executing program 0 (id=12200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.193543437s ago: executing program 0 (id=12212): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) connect$pppoe(r0, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 3.121002289s ago: executing program 0 (id=12215): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000d40)="b1", 0x1}], 0x1}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997cf6", 0xffffffffffffff7f, 0x4000080, 0x0, 0xfffffffffffffff7) 2.631963297s ago: executing program 2 (id=12218): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000001940), 0x2000cc0}, 0x38) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.483561849s ago: executing program 2 (id=12220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=[0x0], 0x0, 0x5, 0x1, 0x0, r3}}, 0x40) 2.45967048s ago: executing program 2 (id=12221): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r2, 0x3) 2.341073721s ago: executing program 1 (id=12222): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 2.340732491s ago: executing program 2 (id=12223): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) 2.332300342s ago: executing program 1 (id=12224): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0xffff, 0x0, 0xfffe, 0x38f, 0x4, "a2590600a0060028"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) 2.284369252s ago: executing program 0 (id=12225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.284028382s ago: executing program 1 (id=12226): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.105841815s ago: executing program 0 (id=12228): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) ioperm(0x0, 0xf1, 0x7) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000200)="a5", 0x1}], 0x1, 0x0) 1.974832618s ago: executing program 9 (id=12232): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.967371978s ago: executing program 1 (id=12233): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x9, &(0x7f00000001c0)) 1.85311516s ago: executing program 9 (id=12235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000002500)='\f', 0x1}], 0x1) 1.79695855s ago: executing program 9 (id=12237): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) syz_io_uring_setup(0x1113, &(0x7f0000000280)={0x0, 0xb44a, 0x0, 0x0, 0x21e}, &(0x7f0000000000), &(0x7f0000000040)) 1.79651405s ago: executing program 1 (id=12238): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000d40)="b1", 0x1}], 0x1}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000000300)="09268a9234f8b358387f1f6588b94b481241ded8974895abfab7511e6e9532120200000000000086b7c4fff5575470f7385a78182eeaea563a905780232726ffbcb5e8d06ec5161ab4b4317995652dc20915e12a020fe3e2bf05b39e5c14312c2f7efc25b5575a7697a9240b578ac6971c54aec0b1ee3d84056a80e7878b37568b295a57f59a9f599bd5ccf5a12920e47c2d37f9140a41ed0ec9392f997cf6", 0xffffffffffffff7f, 0x4000080, 0x0, 0xfffffffffffffff7) 1.781862401s ago: executing program 9 (id=12239): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.553080445s ago: executing program 2 (id=12245): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) recvfrom(r0, 0x0, 0x600, 0x162, 0x0, 0x0) 1.473190856s ago: executing program 2 (id=12246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.472887666s ago: executing program 39 (id=12246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 1.104864452s ago: executing program 0 (id=12248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setuid(0x0) 1.104494892s ago: executing program 40 (id=12248): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setuid(0x0) 655.608939ms ago: executing program 1 (id=12249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 655.356459ms ago: executing program 41 (id=12249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x22400049, &(0x7f00000002c0)={[{@nombcache}, {@abort}, {@nomblk_io_submit}, {@noblock_validity}, {@nolazytime}, {@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@barrier_val={'barrier', 0x3d, 0xd95a}}, {@debug}]}, 0x84, 0x480, &(0x7f00000004c0)="$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") r2 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 649.23811ms ago: executing program 4 (id=12250): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000040)={@id={0x2, 0x0, @b}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/25, &(0x7f0000000080)=0x17) 648.45863ms ago: executing program 9 (id=12251): setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000801000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 324.018815ms ago: executing program 9 (id=12252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 321.014285ms ago: executing program 4 (id=12253): unshare(0x2c020400) r0 = msgget$private(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) msgsnd(r0, &(0x7f0000000040)=ANY=[], 0x2000, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) msgrcv(r0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 311.483755ms ago: executing program 42 (id=12252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 237.675416ms ago: executing program 4 (id=12255): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100030010651fbe347b2c2b00000c00018008000100", @ANYRES16=r0], 0x20}}, 0x0) 153.197528ms ago: executing program 4 (id=12256): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) close(r2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 42.90742ms ago: executing program 4 (id=12259): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 4 (id=12260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000300)={0x1c, r2, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) kernel console output (not intermixed with test programs): dit(1750249741.941:10647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30002 comm="syz.9.10464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 316.626394][ T29] audit: type=1326 audit(1750249741.941:10648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30002 comm="syz.9.10464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 316.650274][ T29] audit: type=1326 audit(1750249741.941:10649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30002 comm="syz.9.10464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 316.674323][ T29] audit: type=1326 audit(1750249741.941:10650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30002 comm="syz.9.10464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 316.698117][ T29] audit: type=1326 audit(1750249741.941:10651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30002 comm="syz.9.10464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 316.721837][ T29] audit: type=1326 audit(1750249741.941:10652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30002 comm="syz.9.10464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 316.745574][ T29] audit: type=1326 audit(1750249741.941:10653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30002 comm="syz.9.10464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 316.769604][ T29] audit: type=1326 audit(1750249741.941:10654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30002 comm="syz.9.10464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 316.793374][ T29] audit: type=1326 audit(1750249741.951:10655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30002 comm="syz.9.10464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 316.887582][T30017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10469'. [ 316.971603][T30029] ÿ: renamed from bond_slave_0 (while UP) [ 317.038650][T30034] ªªªªªª: renamed from vlan0 [ 317.109087][T30041] netlink: 'syz.0.10479': attribute type 1 has an invalid length. [ 317.117135][T30041] netlink: 'syz.0.10479': attribute type 2 has an invalid length. [ 317.136866][T30045] netlink: 'syz.9.10491': attribute type 21 has an invalid length. [ 317.144869][T30045] netlink: 'syz.9.10491': attribute type 1 has an invalid length. [ 317.152883][T30045] netlink: 144 bytes leftover after parsing attributes in process `syz.9.10491'. [ 317.175934][T30041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10479'. [ 317.305635][T30065] netlink: 271 bytes leftover after parsing attributes in process `syz.9.10489'. [ 317.374978][T30075] ªªªªªª: renamed from vlan0 (while UP) [ 317.490501][T30093] loop0: detected capacity change from 0 to 512 [ 317.538438][T30093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.566906][T30093] ext4 filesystem being mounted at /2132/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.601103][T30107] syz.9.10501: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 317.615878][T30107] CPU: 0 UID: 0 PID: 30107 Comm: syz.9.10501 Tainted: G W 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 317.615913][T30107] Tainted: [W]=WARN [ 317.615920][T30107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.615972][T30107] Call Trace: [ 317.615979][T30107] [ 317.615988][T30107] __dump_stack+0x1d/0x30 [ 317.616009][T30107] dump_stack_lvl+0xe8/0x140 [ 317.616027][T30107] dump_stack+0x15/0x1b [ 317.616092][T30107] warn_alloc+0x12b/0x1a0 [ 317.616180][T30107] __vmalloc_node_range_noprof+0x9c/0xe00 [ 317.616208][T30107] ? __futex_wait+0x1ff/0x260 [ 317.616238][T30107] ? __pfx_futex_wake_mark+0x10/0x10 [ 317.616331][T30107] ? __rcu_read_unlock+0x4f/0x70 [ 317.616350][T30107] ? avc_has_perm_noaudit+0x1b1/0x200 [ 317.616412][T30107] vmalloc_user_noprof+0x7d/0xb0 [ 317.616439][T30107] ? xskq_create+0x80/0xe0 [ 317.616473][T30107] xskq_create+0x80/0xe0 [ 317.616494][T30107] xsk_init_queue+0x95/0xf0 [ 317.616592][T30107] xsk_setsockopt+0x35c/0x510 [ 317.616611][T30107] ? __pfx_xsk_setsockopt+0x10/0x10 [ 317.616630][T30107] __sys_setsockopt+0x181/0x200 [ 317.616664][T30107] __x64_sys_setsockopt+0x64/0x80 [ 317.616762][T30107] x64_sys_call+0x2bd5/0x2fb0 [ 317.616787][T30107] do_syscall_64+0xd2/0x200 [ 317.616832][T30107] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 317.616855][T30107] ? clear_bhb_loop+0x40/0x90 [ 317.616916][T30107] ? clear_bhb_loop+0x40/0x90 [ 317.616941][T30107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.616964][T30107] RIP: 0033:0x7f6f6793e929 [ 317.617034][T30107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.617053][T30107] RSP: 002b:00007f6f65fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 317.617077][T30107] RAX: ffffffffffffffda RBX: 00007f6f67b65fa0 RCX: 00007f6f6793e929 [ 317.617092][T30107] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 317.617107][T30107] RBP: 00007f6f679c0b39 R08: 0000000000000004 R09: 0000000000000000 [ 317.617122][T30107] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.617173][T30107] R13: 0000000000000000 R14: 00007f6f67b65fa0 R15: 00007ffe9eab74e8 [ 317.617195][T30107] [ 317.839235][T30107] Mem-Info: [ 317.842373][T30107] active_anon:39970 inactive_anon:47 isolated_anon:0 [ 317.842373][T30107] active_file:12776 inactive_file:15641 isolated_file:0 [ 317.842373][T30107] unevictable:0 dirty:290 writeback:0 [ 317.842373][T30107] slab_reclaimable:3500 slab_unreclaimable:24548 [ 317.842373][T30107] mapped:28929 shmem:35722 pagetables:1654 [ 317.842373][T30107] sec_pagetables:0 bounce:0 [ 317.842373][T30107] kernel_misc_reclaimable:0 [ 317.842373][T30107] free:1816055 free_pcp:19308 free_cma:0 [ 317.888069][T30107] Node 0 active_anon:159880kB inactive_anon:188kB active_file:51104kB inactive_file:62564kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115716kB dirty:1160kB writeback:0kB shmem:142888kB writeback_tmp:0kB kernel_stack:5600kB pagetables:6616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 317.917584][T30107] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.946394][T30107] lowmem_reserve[]: 0 2882 7860 7860 [ 317.951808][T30107] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 317.982837][T30107] lowmem_reserve[]: 0 0 4978 4978 [ 317.988004][T30107] Node 0 Normal free:4293252kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:164984kB inactive_anon:188kB active_file:51104kB inactive_file:62564kB unevictable:0kB writepending:1160kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:76408kB local_pcp:22632kB free_cma:0kB [ 318.020678][T30107] lowmem_reserve[]: 0 0 0 0 [ 318.025243][T30107] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 318.038293][T30107] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 318.050638][T30093] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #4: comm syz.0.10497: corrupted inode contents [ 318.054763][T30107] Node 0 Normal: 183*4kB (UE) 37*8kB (UME) 7*16kB (U) 6*32kB (UME) 3*64kB (UE) 38*128kB (UME) 89*256kB (UME) 28*512kB (UME) 58*1024kB (UM) 42*2048kB (UM) 1002*4096kB (UME) = 4293108kB [ 318.069295][T30093] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #4: comm syz.0.10497: mark_inode_dirty error [ 318.085415][T30107] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 318.085442][T30107] 65487 total pagecache pages [ 318.085450][T30107] 75 pages in swap cache [ 318.099532][T30093] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #4: comm syz.0.10497: corrupted inode contents [ 318.106042][T30107] Free swap = 124696kB [ 318.106054][T30107] Total swap = 124996kB [ 318.106063][T30107] 2097051 pages RAM [ 318.111024][T30093] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.10497: mark_inode_dirty error [ 318.115004][T30107] 0 pages HighMem/MovableOnly [ 318.115018][T30107] 80812 pages reserved [ 318.163361][T30111] loop3: detected capacity change from 0 to 256 [ 318.170422][T30093] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.10497: Failed to acquire dquot type 1 [ 318.270432][T30112] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #4: comm syz.0.10497: corrupted inode contents [ 318.277665][T30129] block device autoloading is deprecated and will be removed. [ 318.305668][T30112] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #4: comm syz.0.10497: mark_inode_dirty error [ 318.359010][T30112] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #4: comm syz.0.10497: corrupted inode contents [ 318.409718][T30112] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.10497: mark_inode_dirty error [ 318.439501][T30112] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.10497: Failed to acquire dquot type 1 [ 318.485330][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.570961][T30166] syzkaller1: entered promiscuous mode [ 318.576499][T30166] syzkaller1: entered allmulticast mode [ 318.999124][T30207] ÿ: renamed from bond_slave_0 [ 319.664939][T30269] ÿ: renamed from bond_slave_0 [ 319.752980][T30273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.772693][T30273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.078082][T30300] vlan2: entered allmulticast mode [ 320.419217][T30330] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 320.535082][T30339] loop1: detected capacity change from 0 to 256 [ 320.944158][T30370] netlink: 'syz.3.10584': attribute type 1 has an invalid length. [ 320.959149][T30368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10583'. [ 321.011551][T30374] pimreg: entered allmulticast mode [ 321.023411][T30374] pimreg: left allmulticast mode [ 321.250604][T30402] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.259042][T30402] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.267377][T30402] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.275605][T30402] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.326657][T30402] geneve2: entered promiscuous mode [ 321.571533][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 321.571550][ T29] audit: type=1400 audit(1750249746.951:10828): avc: denied { create } for pid=30419 comm="syz.3.10601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 321.666442][ T29] audit: type=1326 audit(1750249746.961:10829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30413 comm="syz.9.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 321.690208][ T29] audit: type=1326 audit(1750249746.961:10830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30413 comm="syz.9.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 321.714013][ T29] audit: type=1326 audit(1750249746.961:10831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30413 comm="syz.9.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 321.737789][ T29] audit: type=1326 audit(1750249746.961:10832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30413 comm="syz.9.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 321.761494][ T29] audit: type=1326 audit(1750249746.961:10833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30413 comm="syz.9.10599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 321.785228][ T29] audit: type=1400 audit(1750249746.981:10834): avc: denied { read } for pid=30416 comm="syz.0.10600" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 321.809831][ T29] audit: type=1400 audit(1750249746.981:10835): avc: denied { open } for pid=30416 comm="syz.0.10600" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 321.834822][ T29] audit: type=1400 audit(1750249746.981:10836): avc: denied { ioctl } for pid=30416 comm="syz.0.10600" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 321.861278][ T29] audit: type=1400 audit(1750249746.981:10837): avc: denied { bind } for pid=30419 comm="syz.3.10601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 322.132118][T30451] macvlan1: entered promiscuous mode [ 322.150816][T30451] ipvlan0: entered promiscuous mode [ 322.174000][T30451] ipvlan0: left promiscuous mode [ 322.193102][T30451] macvlan1: left promiscuous mode [ 322.210489][T30461] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.10608'. [ 322.238161][T30452] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.10608'. [ 322.352782][T30475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10617'. [ 322.400989][T30482] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 322.427356][T30486] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10620'. [ 322.501265][T30486] 8021q: adding VLAN 0 to HW filter on device bond4 [ 322.533660][T30528] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 322.656681][T30537] netem: change failed [ 322.773307][T30546] netlink: 96 bytes leftover after parsing attributes in process `syz.7.10633'. [ 322.787320][T30548] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10635'. [ 323.289998][T30587] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 323.313893][T30587] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 324.315276][T30671] macvlan2: entered promiscuous mode [ 324.320697][T30671] bridge0: entered promiscuous mode [ 324.329507][T30671] bridge0: left promiscuous mode [ 324.539782][T30695] bond3: entered promiscuous mode [ 324.544922][T30695] bond3: entered allmulticast mode [ 324.556348][T30737] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10690'. [ 324.568979][T30695] 8021q: adding VLAN 0 to HW filter on device bond3 [ 324.595958][T30695] bond3 (unregistering): Released all slaves [ 325.166855][T30830] smc: net device bond0 applied user defined pnetid SYZ2 [ 325.194978][T30830] smc: net device bond0 erased user defined pnetid SYZ2 [ 325.689197][T30877] netlink: 'syz.1.10724': attribute type 13 has an invalid length. [ 325.709223][T30877] gretap0: refused to change device tx_queue_len [ 325.715685][T30877] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 325.771656][T30893] loop1: detected capacity change from 0 to 1024 [ 325.780896][T30893] EXT4-fs: Ignoring removed orlov option [ 325.787528][T30893] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 325.820284][T30893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.889486][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.629903][T30958] loop3: detected capacity change from 0 to 164 [ 326.645736][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 326.645753][ T29] audit: type=1400 audit(1750249752.021:11206): avc: denied { add_name } for pid=30957 comm="syz.0.10749" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 326.676971][ T29] audit: type=1400 audit(1750249752.021:11207): avc: denied { create } for pid=30957 comm="syz.0.10749" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 326.697570][ T29] audit: type=1400 audit(1750249752.021:11208): avc: denied { associate } for pid=30957 comm="syz.0.10749" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 326.778884][ T29] audit: type=1400 audit(1750249752.131:11209): avc: denied { mount } for pid=30956 comm="syz.3.10748" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 326.801667][ T29] audit: type=1400 audit(1750249752.141:11210): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 326.902856][ T29] audit: type=1400 audit(1750249752.281:11211): avc: denied { read } for pid=30980 comm="syz.7.10758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 326.922464][ T29] audit: type=1400 audit(1750249752.281:11212): avc: denied { create } for pid=30980 comm="syz.7.10758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 326.959039][ T29] audit: type=1400 audit(1750249752.281:11213): avc: denied { bind } for pid=30980 comm="syz.7.10758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 326.978894][ T29] audit: type=1400 audit(1750249752.281:11214): avc: denied { write } for pid=30980 comm="syz.7.10758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 326.998522][ T29] audit: type=1326 audit(1750249752.331:11215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30983 comm="syz.1.10759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 327.819137][T31014] loop3: detected capacity change from 0 to 256 [ 327.835235][T31017] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.843537][T31017] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.851940][T31017] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.860184][T31017] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.888372][T31017] geneve2: entered promiscuous mode [ 327.980913][T31029] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 328.006465][T31032] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.10774'. [ 328.043962][T31026] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.10774'. [ 328.391006][T31078] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 328.411273][T31082] SELinux: syz.0.10790 (31082) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 328.463254][T31085] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10794'. [ 328.481161][T31081] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10794'. [ 328.701928][T31105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10802'. [ 328.782354][T31112] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10805'. [ 329.163689][T31140] loop7: detected capacity change from 0 to 8192 [ 329.187928][T31140] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 329.205162][T31147] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10820'. [ 329.337928][T31186] loop3: detected capacity change from 0 to 512 [ 329.377715][T31186] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 329.386930][T31186] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 329.407370][T31186] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 329.456234][T31186] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 329.483898][T31186] System zones: 0-2, 18-18, 34-35 [ 329.496301][T31186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.604776][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.720571][T31222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31222 comm=syz.1.10833 [ 329.845226][T31231] loop3: detected capacity change from 0 to 2048 [ 329.899269][T31231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.949906][T31231] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.10838: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 330.022862][T31231] EXT4-fs (loop3): Remounting filesystem read-only [ 330.092282][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.106680][T31257] all: renamed from lo [ 331.065026][T31350] netlink: 268 bytes leftover after parsing attributes in process `syz.1.10885'. [ 331.133573][T31356] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 331.287723][T31374] netlink: 'syz.1.10894': attribute type 3 has an invalid length. [ 331.330515][T31384] loop3: detected capacity change from 0 to 512 [ 331.362345][T31372] loop7: detected capacity change from 0 to 8192 [ 331.368916][T31392] program syz.1.10896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.378993][T31384] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 331.431879][T31384] EXT4-fs (loop3): 1 truncate cleaned up [ 331.455423][T31384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.480399][T31384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.677880][T31323] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10874'. [ 331.745226][T31334] netlink: 'syz.0.10874': attribute type 4 has an invalid length. [ 331.778419][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 331.778438][ T29] audit: type=1400 audit(1750249757.161:11355): avc: denied { write } for pid=31416 comm="syz.1.10904" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 331.872815][ T29] audit: type=1400 audit(1750249757.251:11356): avc: denied { write } for pid=27677 comm="kworker/1:16" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=94601 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 332.135477][T31432] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 332.135477][T31432] The task syz.7.10907 (31432) triggered the difference, watch for misbehavior. [ 332.148080][T31437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10912'. [ 332.181112][ T29] audit: type=1326 audit(1750249757.561:11357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31440 comm="syz.9.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 332.211280][ T29] audit: type=1326 audit(1750249757.561:11358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31440 comm="syz.9.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 332.235119][ T29] audit: type=1326 audit(1750249757.591:11359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31440 comm="syz.9.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 332.258896][ T29] audit: type=1326 audit(1750249757.591:11360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31440 comm="syz.9.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 332.282585][ T29] audit: type=1326 audit(1750249757.591:11361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31440 comm="syz.9.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 332.306291][ T29] audit: type=1326 audit(1750249757.591:11362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31440 comm="syz.9.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 332.337177][ T29] audit: type=1326 audit(1750249757.591:11363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31440 comm="syz.9.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 332.360977][ T29] audit: type=1326 audit(1750249757.591:11364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31440 comm="syz.9.10910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 332.996325][T31477] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 333.328959][T31504] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 333.448735][T31512] atomic_op ffff88811a989128 conn xmit_atomic 0000000000000000 [ 333.524816][T31514] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 333.881057][T31538] syzkaller0: entered promiscuous mode [ 333.886638][T31538] syzkaller0: entered allmulticast mode [ 333.944589][ T7935] syzkaller0: tun_net_xmit 48 [ 333.970237][T31546] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 333.976192][T31546] syzkaller0: Linktype set failed because interface is up [ 334.202953][T31566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.235797][T31566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.379737][T31549] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10946'. [ 334.394309][T31549] netlink: 'syz.3.10946': attribute type 4 has an invalid length. [ 334.631213][T31614] bridge0: port 5(macsec0) entered blocking state [ 334.637755][T31614] bridge0: port 5(macsec0) entered disabled state [ 334.665121][T31614] macsec0: entered allmulticast mode [ 334.670591][T31614] bridge0: entered allmulticast mode [ 334.683768][T31614] macsec0: left allmulticast mode [ 334.688963][T31614] bridge0: left allmulticast mode [ 334.717822][T31618] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 334.779327][T31624] netlink: 228 bytes leftover after parsing attributes in process `syz.3.10966'. [ 334.874275][T31636] netlink: 100 bytes leftover after parsing attributes in process `syz.7.10968'. [ 335.015192][T31664] netlink: 'syz.0.10972': attribute type 280 has an invalid length. [ 336.024006][T31717] loop7: detected capacity change from 0 to 512 [ 336.047799][T31717] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 336.101271][T31723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10992'. [ 336.104603][T31717] EXT4-fs (loop7): 1 truncate cleaned up [ 336.120492][T31717] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 336.135283][T31717] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.149953][T31723] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10992'. [ 336.247087][T31735] random: crng reseeded on system resumption [ 336.297866][T31738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.324344][T31738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.532727][T31758] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 336.916918][T31794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 336.940452][T31796] netlink: 332 bytes leftover after parsing attributes in process `syz.9.11019'. [ 336.966320][T31796] netlink: 'syz.9.11019': attribute type 9 has an invalid length. [ 336.974233][T31796] netlink: 108 bytes leftover after parsing attributes in process `syz.9.11019'. [ 336.983409][T31796] netlink: 32 bytes leftover after parsing attributes in process `syz.9.11019'. [ 337.085023][T31807] netlink: 576 bytes leftover after parsing attributes in process `syz.0.11024'. [ 337.155998][ T29] kauditd_printk_skb: 456 callbacks suppressed [ 337.156038][ T29] audit: type=1400 audit(1750250530.589:11821): avc: denied { read } for pid=31816 comm="syz.0.11029" path="socket:[95320]" dev="sockfs" ino=95320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 337.335468][T31839] netlink: 240 bytes leftover after parsing attributes in process `syz.0.11029'. [ 337.633127][T31875] xt_hashlimit: size too large, truncated to 1048576 [ 337.970301][T31913] netlink: 'syz.9.11058': attribute type 10 has an invalid length. [ 337.998026][T31913] dummy0: entered promiscuous mode [ 338.003782][T31913] bridge0: port 3(dummy0) entered blocking state [ 338.010252][T31913] bridge0: port 3(dummy0) entered disabled state [ 338.055858][T31913] dummy0: entered allmulticast mode [ 338.076191][T31913] bridge0: port 3(dummy0) entered blocking state [ 338.082735][T31913] bridge0: port 3(dummy0) entered forwarding state [ 338.138490][ T29] audit: type=1326 audit(1750250531.625:11822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31917 comm="syz.1.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 338.267042][T31924] wireguard0: entered promiscuous mode [ 338.269933][ T29] audit: type=1326 audit(1750250531.657:11823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31917 comm="syz.1.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 338.272627][T31924] wireguard0: entered allmulticast mode [ 338.296221][ T29] audit: type=1326 audit(1750250531.668:11824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31917 comm="syz.1.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 338.325691][ T29] audit: type=1326 audit(1750250531.668:11825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31917 comm="syz.1.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 338.349438][ T29] audit: type=1326 audit(1750250531.668:11826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31917 comm="syz.1.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 338.373664][ T29] audit: type=1326 audit(1750250531.668:11827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31917 comm="syz.1.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 338.397361][ T29] audit: type=1326 audit(1750250531.668:11828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31917 comm="syz.1.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 338.421169][ T29] audit: type=1326 audit(1750250531.668:11829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31917 comm="syz.1.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 338.445033][ T29] audit: type=1326 audit(1750250531.668:11830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31917 comm="syz.1.11059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 338.661077][ T10] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 338.668607][ T10] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 338.676243][ T10] hid-generic 0003:0004:0000.0013: unknown main item tag 0x0 [ 338.692164][T31940] loop7: detected capacity change from 0 to 1024 [ 338.717085][ T10] hid-generic 0003:0004:0000.0013: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 338.738243][T31946] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31946 comm=syz.9.11067 [ 338.750924][T31946] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31946 comm=syz.9.11067 [ 338.768704][T31940] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.815643][T31940] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.272882][T31980] __nla_validate_parse: 2 callbacks suppressed [ 339.272899][T31980] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11077'. [ 339.586088][T31990] netlink: 'syz.0.11079': attribute type 1 has an invalid length. [ 339.639707][T31990] 8021q: adding VLAN 0 to HW filter on device bond3 [ 339.663430][T32006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11079'. [ 339.687992][T32006] bond3 (unregistering): Released all slaves [ 339.885030][T31935] syz.7.11064 (31935) used greatest stack depth: 5880 bytes left [ 340.019420][T32078] loop7: detected capacity change from 0 to 128 [ 340.266251][T32073] syz.7.11085: attempt to access beyond end of device [ 340.266251][T32073] loop7: rw=0, sector=121, nr_sectors = 120 limit=128 [ 340.340609][ T7867] kworker/u8:10: attempt to access beyond end of device [ 340.340609][ T7867] loop7: rw=1, sector=241, nr_sectors = 800 limit=128 [ 340.468953][T32125] netlink: 'syz.7.11109': attribute type 21 has an invalid length. [ 340.574860][T32138] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32138 comm=syz.3.11114 [ 340.797171][T32164] loop7: detected capacity change from 0 to 2048 [ 340.843385][T32164] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.912021][T32183] netdevsim netdevsim9: Direct firmware load for @ failed with error -2 [ 341.312531][T32196] vhci_hcd: default hub control req: 2317 v0040 i0002 l0 [ 341.331618][T32192] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 341.377605][T32192] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 341.389955][T32192] EXT4-fs (loop7): This should not happen!! Data will be lost [ 341.389955][T32192] [ 341.399768][T32192] EXT4-fs (loop7): Total free blocks count 0 [ 341.405881][T32192] EXT4-fs (loop7): Free/Dirty block details [ 341.411879][T32192] EXT4-fs (loop7): free_blocks=2415919504 [ 341.417622][T32192] EXT4-fs (loop7): dirty_blocks=2432 [ 341.423035][T32192] EXT4-fs (loop7): Block reservation details [ 341.429067][T32192] EXT4-fs (loop7): i_reserved_data_blocks=152 [ 341.493269][T32192] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 341.802884][T32209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.829329][T32209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.845651][ T1038] kernel read not supported for file /vga_arbiter (pid: 1038 comm: kworker/0:2) [ 341.953965][T32221] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11148'. [ 342.058685][T32226] netlink: 332 bytes leftover after parsing attributes in process `syz.3.11152'. [ 342.137882][T32226] netlink: 'syz.3.11152': attribute type 9 has an invalid length. [ 342.145807][T32226] netlink: 108 bytes leftover after parsing attributes in process `syz.3.11152'. [ 342.154978][T32226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11152'. [ 342.550648][T32238] netlink: 'syz.0.11156': attribute type 1 has an invalid length. [ 342.558627][T32238] netlink: 'syz.0.11156': attribute type 2 has an invalid length. [ 342.587563][T32236] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11150'. [ 342.617540][T32236] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11150'. [ 342.626750][T32238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11156'. [ 342.720661][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 342.720679][ T29] audit: type=1400 audit(1750250536.467:11873): avc: denied { bind } for pid=32246 comm="syz.3.11160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 342.827501][T32261] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11166'. [ 342.830780][ T29] audit: type=1400 audit(1750250536.499:11874): avc: denied { create } for pid=32251 comm="syz.0.11163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 342.856348][ T29] audit: type=1400 audit(1750250536.499:11875): avc: denied { setopt } for pid=32251 comm="syz.0.11163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 342.859880][T32261] ÿ: entered promiscuous mode [ 342.876152][ T29] audit: type=1400 audit(1750250536.520:11876): avc: denied { ioctl } for pid=32250 comm="syz.9.11162" path="socket:[95949]" dev="sockfs" ino=95949 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.904419][T32261] macvlan2: entered promiscuous mode [ 342.911185][T32261] bond0: entered promiscuous mode [ 342.916660][T32261] bond_slave_1: entered promiscuous mode [ 342.958281][T32261] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 343.077417][ T29] audit: type=1400 audit(1750250536.848:11877): avc: denied { setopt } for pid=32283 comm="syz.0.11172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.132065][T32285] hub 8-0:1.0: USB hub found [ 343.142224][T32285] hub 8-0:1.0: 8 ports detected [ 343.217158][T32302] bond_slave_1: mtu less than device minimum [ 343.633309][ T29] audit: type=1400 audit(1750250537.440:11878): avc: denied { ioctl } for pid=32346 comm="syz.3.11195" path="socket:[96062]" dev="sockfs" ino=96062 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 343.853757][ T29] audit: type=1107 audit(1750250537.662:11879): pid=32379 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='11a' [ 343.887453][T32378] hub 6-0:1.0: USB hub found [ 343.921002][T32378] hub 6-0:1.0: 8 ports detected [ 343.947687][T32383] loop7: detected capacity change from 0 to 256 [ 344.076602][ T29] audit: type=1326 audit(1750250537.894:11880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32401 comm="syz.0.11213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949976e929 code=0x7ffc0000 [ 344.114783][ T29] audit: type=1326 audit(1750250537.936:11881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32401 comm="syz.0.11213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f949976e929 code=0x7ffc0000 [ 344.139000][ T29] audit: type=1326 audit(1750250537.936:11882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32401 comm="syz.0.11213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f949976e929 code=0x7ffc0000 [ 344.368755][T32426] tipc: Started in network mode [ 344.373758][T32426] tipc: Node identity ac14140f, cluster identity 4711 [ 344.413841][T32426] tipc: New replicast peer: 255.255.255.255 [ 344.420159][T32426] tipc: Enabled bearer , priority 10 [ 345.169793][T32518] __nla_validate_parse: 5 callbacks suppressed [ 345.169810][T32518] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11251'. [ 345.185119][T32518] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11251'. [ 345.194160][T32518] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11251'. [ 345.204699][T32518] netlink: 28 bytes leftover after parsing attributes in process `syz.9.11251'. [ 345.213902][T32518] netlink: 'syz.9.11251': attribute type 6 has an invalid length. [ 345.363534][T32533] netlink: 132 bytes leftover after parsing attributes in process `syz.9.11255'. [ 345.497253][T27677] tipc: Node number set to 2886997007 [ 345.629654][T32505] chnl_net:caif_netlink_parms(): no params data found [ 345.715638][T32505] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.722935][T32505] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.767405][T32505] bridge_slave_0: entered allmulticast mode [ 345.816609][T32505] bridge_slave_0: entered promiscuous mode [ 345.833012][T32715] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11269'. [ 345.847317][T32505] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.854447][T32505] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.905956][T32505] bridge_slave_1: entered allmulticast mode [ 345.921198][T32725] xt_hashlimit: size too large, truncated to 1048576 [ 345.930414][T32505] bridge_slave_1: entered promiscuous mode [ 346.061989][T32726] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11273'. [ 346.082572][T32505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 346.148890][T32505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 346.160579][T32654] netlink: 'syz.1.11265': attribute type 2 has an invalid length. [ 346.260898][T32505] team0: Port device team_slave_0 added [ 346.295510][ T345] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.11281'. [ 346.295751][T32505] team0: Port device team_slave_1 added [ 346.336427][ T345] netlink: zone id is out of range [ 346.342379][ T347] random: crng reseeded on system resumption [ 346.354201][ T345] netlink: zone id is out of range [ 346.373765][ T345] netlink: del zone limit has 8 unknown bytes [ 346.408972][T32505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.416212][T32505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.442458][T32505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.480239][ T380] netlink: 'syz.0.11286': attribute type 1 has an invalid length. [ 346.488295][ T380] netlink: 'syz.0.11286': attribute type 1 has an invalid length. [ 346.502171][T32505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.509209][T32505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.535507][T32505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.579254][ T387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11289'. [ 346.721720][T32505] hsr_slave_0: entered promiscuous mode [ 346.741019][T32505] hsr_slave_1: entered promiscuous mode [ 346.754082][T32505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.762337][T32505] Cannot create hsr debugfs directory [ 346.985012][ T513] Invalid ELF header magic: != ELF [ 347.096366][ T529] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=529 comm=syz.1.11304 [ 347.178545][T32505] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 347.199168][ T547] netlink: 'syz.7.11307': attribute type 3 has an invalid length. [ 347.212125][T32505] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 347.226838][T32505] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 347.282724][T32505] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 347.348509][ T565] loop7: detected capacity change from 0 to 512 [ 347.379626][ T565] ext4: Unknown parameter 'permit_directio' [ 347.425306][ T579] syzkaller1: entered promiscuous mode [ 347.430948][ T579] syzkaller1: entered allmulticast mode [ 347.455126][T32505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.486952][T32505] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.508955][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 347.508972][ T29] audit: type=1400 audit(1750250541.529:11943): avc: denied { create } for pid=590 comm="syz.9.11318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 347.539824][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.546960][ T7899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.565976][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.573225][ T7899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.644975][ T29] audit: type=1400 audit(1750250541.613:11944): avc: denied { write } for pid=590 comm="syz.9.11318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 347.665091][ T29] audit: type=1400 audit(1750250541.613:11945): avc: denied { read } for pid=590 comm="syz.9.11318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 347.685194][ T29] audit: type=1400 audit(1750250541.645:11946): avc: denied { create } for pid=595 comm="syz.9.11320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 347.705962][ T29] audit: type=1400 audit(1750250541.666:11947): avc: denied { bind } for pid=595 comm="syz.9.11320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 347.755278][T32505] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.765753][T32505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.831862][ T29] audit: type=1326 audit(1750250541.708:11948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 347.855526][ T29] audit: type=1326 audit(1750250541.708:11949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 347.879096][ T29] audit: type=1326 audit(1750250541.719:11950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0de6f6d290 code=0x7ffc0000 [ 347.902692][ T29] audit: type=1326 audit(1750250541.719:11951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 347.904777][T32505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.926257][ T29] audit: type=1326 audit(1750250541.719:11952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=591 comm="syz.7.11319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 348.056970][ T645] netlink: 'syz.0.11329': attribute type 21 has an invalid length. [ 348.065143][ T645] IPv6: NLM_F_CREATE should be specified when creating new route [ 348.172735][ T657] C: renamed from team_slave_0 [ 348.199564][ T657] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11333'. [ 348.268376][ T667] atomic_op ffff8881298aa128 conn xmit_atomic 0000000000000000 [ 348.281587][T32505] veth0_vlan: entered promiscuous mode [ 348.301267][T32505] veth1_vlan: entered promiscuous mode [ 348.350621][T32505] veth0_macvtap: entered promiscuous mode [ 348.405762][T32505] veth1_macvtap: entered promiscuous mode [ 348.445326][T32505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.463709][T32505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.474023][T32505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.482853][T32505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.491734][T32505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.500540][T32505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.620511][ T693] netlink: 'syz.9.11343': attribute type 280 has an invalid length. [ 348.675876][ T698] siw: device registration error -23 [ 348.694107][ T702] netlink: 'syz.9.11346': attribute type 1 has an invalid length. [ 348.769522][ T709] atomic_op ffff88810b496128 conn xmit_atomic 0000000000000000 [ 348.942532][ T728] netlink: 'syz.1.11357': attribute type 280 has an invalid length. [ 349.119243][ T7876] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.129180][ T7876] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.170975][ T759] openvswitch: netlink: Message has 6 unknown bytes. [ 349.219691][ T7876] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.229638][ T7876] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.287876][ T768] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 349.305865][ T770] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 349.340334][ T772] SELinux: security_context_str_to_sid (÷ÿ) failed with errno=-22 [ 349.350461][ T7876] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.360464][ T7876] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.437011][ T7876] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 349.446840][ T7876] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.495336][ T780] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 349.588952][ T7876] bridge_slave_1: left allmulticast mode [ 349.594753][ T7876] bridge_slave_1: left promiscuous mode [ 349.600729][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.640612][ T7876] bridge_slave_0: left promiscuous mode [ 349.646358][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.662158][ T801] netlink: 'syz.7.11384': attribute type 3 has an invalid length. [ 349.920811][ T7876] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 349.964061][ T7876] bridge1 (unregistering): left promiscuous mode [ 349.998565][ T819] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 350.039427][ T7876] team0: Port device bridge2 removed [ 350.108492][ T7876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.141162][ T7876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.163028][ T7876] bond0 (unregistering): Released all slaves [ 350.185869][ T7876] bond1 (unregistering): Released all slaves [ 350.210120][ T7876] bond2 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 350.236226][ T7876] bond2 (unregistering): Released all slaves [ 350.491916][ T7876] hsr_slave_0: left promiscuous mode [ 350.499152][ T7876] hsr_slave_1: left promiscuous mode [ 350.514604][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.522093][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.546667][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.554173][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.565730][ T7876] veth1_vlan: left promiscuous mode [ 350.669781][ T859] random: crng reseeded on system resumption [ 350.730348][ T7876] team0 (unregistering): Port device team_slave_1 removed [ 350.756799][ T7876] team0 (unregistering): Port device team_slave_0 removed [ 350.845744][ T866] netlink: 96 bytes leftover after parsing attributes in process `syz.9.11401'. [ 350.939801][ T878] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 351.098873][ T7876] IPVS: stop unused estimator thread 0... [ 351.162219][ T917] SELinux: security_context_str_to_sid (÷ÿ) failed with errno=-22 [ 351.176416][ T910] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 351.192028][ T918] xt_CT: You must specify a L4 protocol and not use inversions on it [ 351.293637][ T926] netlink: 'syz.9.11423': attribute type 3 has an invalid length. [ 351.667780][ T950] bridge0: entered promiscuous mode [ 351.672043][ T952] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11433'. [ 351.690351][ T950] bridge0: port 4(macsec0) entered blocking state [ 351.696843][ T950] bridge0: port 4(macsec0) entered disabled state [ 351.729583][ T950] macsec0: entered allmulticast mode [ 351.734971][ T950] bridge0: entered allmulticast mode [ 351.763037][ T950] macsec0: left allmulticast mode [ 351.768183][ T950] bridge0: left allmulticast mode [ 351.793724][ T950] bridge0: left promiscuous mode [ 352.154441][ T1000] bridge0: entered promiscuous mode [ 352.160975][ T1000] bridge0: port 3(macsec1) entered blocking state [ 352.167545][ T1000] bridge0: port 3(macsec1) entered disabled state [ 352.181772][ T1000] macsec1: entered allmulticast mode [ 352.187142][ T1000] bridge0: entered allmulticast mode [ 352.201103][ T1000] macsec1: left allmulticast mode [ 352.206194][ T1000] bridge0: left allmulticast mode [ 352.224519][ T1000] bridge0: left promiscuous mode [ 352.290148][ T3405] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 352.297671][ T3405] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 352.306131][ T3405] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 352.345515][ T3405] hid-generic 0003:0004:0000.0014: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 352.445552][ T1029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 352.637214][ T1044] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=1044 comm=syz.1.11466 [ 352.649907][ T1044] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=1044 comm=syz.1.11466 [ 352.883638][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 352.883657][ T29] audit: type=1326 audit(1750250547.210:12007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1055 comm="syz.7.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 352.889086][ T1054] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 352.915907][ T29] audit: type=1326 audit(1750250547.210:12008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1055 comm="syz.7.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 352.978688][ T29] audit: type=1326 audit(1750250547.253:12009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1055 comm="syz.7.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 353.003052][ T29] audit: type=1326 audit(1750250547.253:12010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1055 comm="syz.7.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 353.026761][ T29] audit: type=1326 audit(1750250547.253:12011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1055 comm="syz.7.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 353.050473][ T29] audit: type=1326 audit(1750250547.284:12012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1055 comm="syz.7.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 353.074070][ T29] audit: type=1326 audit(1750250547.284:12013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1055 comm="syz.7.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 353.097840][ T29] audit: type=1326 audit(1750250547.284:12014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1055 comm="syz.7.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 353.121481][ T29] audit: type=1326 audit(1750250547.295:12015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1055 comm="syz.7.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 353.145143][ T29] audit: type=1326 audit(1750250547.295:12016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1055 comm="syz.7.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 353.588839][ T1088] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 353.653319][ T1098] netlink: 'syz.7.11488': attribute type 1 has an invalid length. [ 353.674031][ T1098] 8021q: adding VLAN 0 to HW filter on device bond5 [ 353.710182][ T1098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11488'. [ 353.720958][ T1098] bond5 (unregistering): Released all slaves [ 353.827035][ T1169] bridge0: port 1(macsec0) entered blocking state [ 353.834023][ T1169] bridge0: port 1(macsec0) entered disabled state [ 353.857954][ T1169] macsec0: entered allmulticast mode [ 353.864611][ T1169] macsec0: left allmulticast mode [ 354.276922][ T1230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.296844][ T1230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.533499][ T7884] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.581293][ T7884] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.627307][ T7884] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.673708][ T7884] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.756135][ T7884] bridge_slave_1: left allmulticast mode [ 354.761895][ T7884] bridge_slave_1: left promiscuous mode [ 354.767615][ T7884] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.782425][ T7884] bridge_slave_0: left promiscuous mode [ 354.788179][ T7884] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.042858][ T7884] team0: Port device bridge1 removed [ 355.086661][ T7884] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.290769][ T7884] bond_slave_0: left promiscuous mode [ 355.309539][ T7884] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.329422][ T7884] bond_slave_1: left promiscuous mode [ 355.337921][ T7884] $Hÿ (unregistering): (slave batadv0): Releasing backup interface [ 355.364426][ T7884] batadv0: left promiscuous mode [ 355.371962][ T7884] $Hÿ (unregistering): Released all slaves [ 355.577792][ T7884] hsr_slave_0: left promiscuous mode [ 355.616822][ T7884] hsr_slave_1: left promiscuous mode [ 355.647507][ T7884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.655031][ T7884] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.687385][ T7884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.694870][ T7884] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.740780][ T7884] veth1_vlan: left promiscuous mode [ 355.763090][ T7884] veth0_vlan: left promiscuous mode [ 356.015285][ T7884] team0 (unregistering): Port device team_slave_1 removed [ 356.056508][ T7884] team0 (unregistering): Port device team_slave_0 removed [ 356.458436][ T7884] IPVS: stop unused estimator thread 0... [ 357.148148][ T1449] netlink: 'syz.1.11539': attribute type 21 has an invalid length. [ 359.363837][ T1673] netlink: 332 bytes leftover after parsing attributes in process `syz.1.11589'. [ 359.399948][ T1673] netlink: 'syz.1.11589': attribute type 9 has an invalid length. [ 359.408012][ T1673] netlink: 108 bytes leftover after parsing attributes in process `syz.1.11589'. [ 359.417408][ T1673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11589'. [ 359.511119][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 359.511136][ T29] audit: type=1400 audit(1750250554.198:12073): avc: denied { relabelto } for pid=1683 comm="syz.1.11580" name="NETLINK" dev="sockfs" ino=99927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 359.802912][ T1714] netlink: 332 bytes leftover after parsing attributes in process `syz.7.11596'. [ 359.822943][ T1714] netlink: 'syz.7.11596': attribute type 9 has an invalid length. [ 359.830871][ T1714] netlink: 108 bytes leftover after parsing attributes in process `syz.7.11596'. [ 359.840093][ T1714] netlink: 32 bytes leftover after parsing attributes in process `syz.7.11596'. [ 360.096297][T27677] kernel read not supported for file /vga_arbiter (pid: 27677 comm: kworker/1:16) [ 360.161587][ T1739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11604'. [ 360.179429][ T1742] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11606'. [ 360.221286][ T1742] macvlan2: entered promiscuous mode [ 360.226726][ T1742] bond0: entered promiscuous mode [ 360.231855][ T1742] ÿ: entered promiscuous mode [ 360.236911][ T1742] bond_slave_1: entered promiscuous mode [ 360.303828][ T1742] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 360.428931][ T29] audit: type=1400 audit(1750250555.158:12074): avc: denied { setopt } for pid=1752 comm="syz.2.11610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 360.730448][ T1772] netlink: 332 bytes leftover after parsing attributes in process `syz.2.11616'. [ 360.754662][ T1772] netlink: 'syz.2.11616': attribute type 9 has an invalid length. [ 360.762707][ T1772] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11616'. [ 360.803392][ T3402] kernel read not supported for file /vga_arbiter (pid: 3402 comm: kworker/0:4) [ 360.874712][ T1784] hub 8-0:1.0: USB hub found [ 360.885041][ T1784] hub 8-0:1.0: 8 ports detected [ 360.952369][ T1793] bond_slave_1: mtu less than device minimum [ 361.445299][ T1851] netlink: 'syz.1.11628': attribute type 1 has an invalid length. [ 361.453409][ T1851] netlink: 'syz.1.11628': attribute type 2 has an invalid length. [ 361.667557][ T29] audit: type=1107 audit(1750250556.477:12075): pid=1864 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 362.060742][ T1900] bond_slave_0: entered promiscuous mode [ 362.066617][ T1900] bond_slave_1: entered promiscuous mode [ 362.082451][ T1900] macvlan2: entered promiscuous mode [ 362.087841][ T1900] bond0: entered promiscuous mode [ 362.104195][ T1900] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 362.289712][ T29] audit: type=1107 audit(1750250557.131:12076): pid=1930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 362.402388][ T3405] kernel read not supported for file /vga_arbiter (pid: 3405 comm: kworker/1:4) [ 363.247777][ T2019] macvlan2: entered promiscuous mode [ 363.253205][ T2019] bond0: entered promiscuous mode [ 363.258376][ T2019] bond_slave_0: entered promiscuous mode [ 363.264273][ T2019] bond_slave_1: entered promiscuous mode [ 363.307187][ T2019] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 363.328903][ T2024] hub 8-0:1.0: USB hub found [ 363.353146][ T2024] hub 8-0:1.0: 8 ports detected [ 363.552948][ T29] audit: type=1107 audit(1750250558.460:12077): pid=2043 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 363.586563][ T2052] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2052 comm=syz.2.11663 [ 363.599225][ T2052] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=2052 comm=syz.2.11663 [ 363.623279][ T2054] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=2054 comm=syz.1.11664 [ 363.635921][ T2054] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=2054 comm=syz.1.11664 [ 364.311066][ T2083] __nla_validate_parse: 15 callbacks suppressed [ 364.311085][ T2083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11673'. [ 364.390171][ T2083] bond_slave_1: entered promiscuous mode [ 364.413317][ T2083] macvlan2: entered promiscuous mode [ 364.418772][ T2083] bond0: entered promiscuous mode [ 364.424017][ T2083] ÿ: entered promiscuous mode [ 364.469594][ T2083] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 364.585537][ T29] audit: type=1400 audit(1750250559.546:12078): avc: denied { read } for pid=2088 comm="syz.9.11686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 364.620844][ T2094] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11676'. [ 364.663956][ T29] audit: type=1400 audit(1750250559.620:12079): avc: denied { bind } for pid=2095 comm="syz.2.11677" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 364.665136][ T2094] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11676'. [ 364.684632][ T29] audit: type=1400 audit(1750250559.620:12080): avc: denied { node_bind } for pid=2095 comm="syz.2.11677" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 364.717643][ T2092] hub 8-0:1.0: USB hub found [ 364.732234][ T2092] hub 8-0:1.0: 8 ports detected [ 365.134225][ T2127] netlink: 'syz.1.11697': attribute type 10 has an invalid length. [ 365.150215][ T2127] dummy0: left allmulticast mode [ 365.174878][ T2127] dummy0: left promiscuous mode [ 365.180058][ T2127] bridge0: port 4(dummy0) entered disabled state [ 365.229699][ T2127] dummy0: entered promiscuous mode [ 365.425902][ T2137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.454659][ T2137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.095110][ T29] audit: type=1400 audit(1750250562.193:12081): avc: denied { getopt } for pid=2278 comm="syz.9.11701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 367.330039][ T2308] netlink: 100 bytes leftover after parsing attributes in process `syz.2.11708'. [ 367.456378][ T2316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.490392][ T2316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.286524][ T2328] Cannot find del_set index 0 as target [ 368.339690][ T29] audit: type=1326 audit(1750250563.512:12082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.1.11721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 368.371642][ T29] audit: type=1326 audit(1750250563.543:12083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.1.11721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 368.395390][ T29] audit: type=1326 audit(1750250563.543:12084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.1.11721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 368.419059][ T29] audit: type=1326 audit(1750250563.543:12085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.1.11721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 368.442795][ T29] audit: type=1326 audit(1750250563.543:12086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.1.11721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 368.466502][ T29] audit: type=1326 audit(1750250563.543:12087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2338 comm="syz.1.11721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 368.585470][ T2337] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 368.670892][ T2377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.698702][ T2377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.867253][ T2396] netlink: 'syz.9.11739': attribute type 3 has an invalid length. [ 369.088498][ T2405] netlink: zone id is out of range [ 369.093767][ T2405] netlink: zone id is out of range [ 369.099062][ T2405] netlink: zone id is out of range [ 369.104207][ T2405] netlink: zone id is out of range [ 369.109388][ T2405] netlink: zone id is out of range [ 369.114705][ T2405] netlink: zone id is out of range [ 369.119861][ T2405] netlink: zone id is out of range [ 369.124994][ T2405] netlink: zone id is out of range [ 369.130164][ T2405] netlink: zone id is out of range [ 369.135348][ T2405] netlink: zone id is out of range [ 369.485959][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 369.485977][ T29] audit: type=1107 audit(1750250564.714:12100): pid=2417 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='11a' [ 369.651821][ T2432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.686991][ T2432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.910295][ T29] audit: type=1400 audit(1750250565.167:12101): avc: denied { map } for pid=2449 comm="syz.1.11760" path="socket:[101877]" dev="sockfs" ino=101877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 369.933850][ T29] audit: type=1400 audit(1750250565.167:12102): avc: denied { read accept } for pid=2449 comm="syz.1.11760" path="socket:[101877]" dev="sockfs" ino=101877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 369.987397][ T2452] hub 6-0:1.0: USB hub found [ 369.992163][ T2452] hub 6-0:1.0: 8 ports detected [ 370.091842][ T2475] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11766'. [ 370.208942][ T2485] hub 6-0:1.0: USB hub found [ 370.223743][ T2485] hub 6-0:1.0: 8 ports detected [ 371.310155][ T2551] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11787'. [ 371.589404][ T2557] vhci_hcd: default hub control req: 2317 v0040 i0002 l0 [ 371.622124][ T2562] hub 6-0:1.0: USB hub found [ 371.639560][ T2568] bridge0: entered promiscuous mode [ 371.645292][ T2562] hub 6-0:1.0: 8 ports detected [ 371.657868][ T29] audit: type=1326 audit(1750250567.012:12103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2556 comm="syz.7.11799" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x0 [ 371.766458][ T2566] bridge0: left promiscuous mode [ 371.840912][ T29] audit: type=1326 audit(1750250567.202:12104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2594 comm="syz.1.11808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 371.864704][ T29] audit: type=1326 audit(1750250567.202:12105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2594 comm="syz.1.11808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 371.913034][ T29] audit: type=1326 audit(1750250567.265:12106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2594 comm="syz.1.11808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 371.936755][ T29] audit: type=1326 audit(1750250567.265:12107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2594 comm="syz.1.11808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 371.960462][ T29] audit: type=1326 audit(1750250567.265:12108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2594 comm="syz.1.11808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 371.984160][ T29] audit: type=1326 audit(1750250567.275:12109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2594 comm="syz.1.11808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99a7c7e929 code=0x7ffc0000 [ 373.099161][ T2657] hub 6-0:1.0: USB hub found [ 373.106648][ T2657] hub 6-0:1.0: 8 ports detected [ 373.300373][ T2685] vhci_hcd: default hub control req: 2317 v0040 i0002 l0 [ 373.642264][ T2711] hub 6-0:1.0: USB hub found [ 373.650723][ T2711] hub 6-0:1.0: 8 ports detected [ 373.711896][ T2726] tipc: Started in network mode [ 373.716863][ T2726] tipc: Node identity ac14140f, cluster identity 4711 [ 373.743462][ T2726] tipc: New replicast peer: 255.255.255.255 [ 373.749582][ T2726] tipc: Enabled bearer , priority 10 [ 373.932676][ T2734] hub 6-0:1.0: USB hub found [ 373.959146][ T2734] hub 6-0:1.0: 8 ports detected [ 374.085722][ T2754] random: crng reseeded on system resumption [ 374.267190][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 374.267233][ T29] audit: type=1400 audit(1750250569.753:12206): avc: denied { validate_trans } for pid=2774 comm="syz.1.11850" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 374.298955][ T2773] tipc: Started in network mode [ 374.303873][ T2773] tipc: Node identity ac14140f, cluster identity 4711 [ 374.326018][ T2773] tipc: New replicast peer: 255.255.255.255 [ 374.332146][ T2773] tipc: Enabled bearer , priority 10 [ 374.599518][ T2788] vhci_hcd: default hub control req: 2317 v0040 i0002 l0 [ 374.615867][ T29] audit: type=1326 audit(1750250570.122:12207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2786 comm="syz.1.11856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99a7c7e929 code=0x0 [ 374.695651][ T3405] tipc: Node number set to 2886997007 [ 374.789394][ T29] audit: type=1326 audit(1750250570.311:12208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2787 comm="syz.7.11857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 374.813056][ T29] audit: type=1326 audit(1750250570.311:12209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2787 comm="syz.7.11857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 374.896877][ T29] audit: type=1326 audit(1750250570.311:12210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2787 comm="syz.7.11857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 374.920551][ T29] audit: type=1326 audit(1750250570.311:12211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2787 comm="syz.7.11857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 374.944320][ T29] audit: type=1326 audit(1750250570.311:12212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2787 comm="syz.7.11857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de6f6e929 code=0x7ffc0000 [ 375.388486][ T3402] tipc: Node number set to 2886997007 [ 375.401751][ T29] audit: type=1326 audit(1750250570.954:12213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.9.11861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 375.466884][ T29] audit: type=1326 audit(1750250570.986:12214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.9.11861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 375.490497][ T29] audit: type=1326 audit(1750250570.986:12215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2793 comm="syz.9.11861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 375.585115][ T2800] hub 6-0:1.0: USB hub found [ 375.600508][ T2800] hub 6-0:1.0: 8 ports detected [ 375.622336][ T2824] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11863'. [ 375.657453][ T2830] tipc: Started in network mode [ 375.662390][ T2830] tipc: Node identity ac14140f, cluster identity 4711 [ 375.677747][ T2830] tipc: New replicast peer: 255.255.255.255 [ 375.684100][ T2830] tipc: Enabled bearer , priority 10 [ 375.793087][ T2845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11875'. [ 375.802321][ T2845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11875'. [ 375.811431][ T2845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11875'. [ 375.854765][ T2845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11875'. [ 375.864109][ T2845] netlink: 'syz.0.11875': attribute type 6 has an invalid length. [ 376.459629][ T2872] chnl_net:caif_netlink_parms(): no params data found [ 376.570571][ T2872] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.577800][ T2872] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.599843][ T2872] bridge_slave_0: entered allmulticast mode [ 376.606511][ T2872] bridge_slave_0: entered promiscuous mode [ 376.613587][ T2872] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.620750][ T2872] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.627922][ T2872] bridge_slave_1: entered allmulticast mode [ 376.634638][ T2872] bridge_slave_1: entered promiscuous mode [ 376.669148][ T2872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.689910][ T2872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.727484][ T2872] team0: Port device team_slave_0 added [ 376.744128][ T2872] team0: Port device team_slave_1 added [ 376.750036][ T3402] tipc: Node number set to 2886997007 [ 376.791371][ T2872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.798418][ T2872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.824556][ T2872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.840790][ T2872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.847790][ T2872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.873896][ T2872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.945059][ T2872] hsr_slave_0: entered promiscuous mode [ 376.950682][ T3183] xt_hashlimit: size too large, truncated to 1048576 [ 376.951480][ T2872] hsr_slave_1: entered promiscuous mode [ 377.097684][ T3224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11896'. [ 377.182503][ T3243] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11899'. [ 377.404974][ T2872] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 377.426059][ T2872] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 377.442799][ T2872] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 377.461200][ T2872] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 377.546310][ T2872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.573238][ T2872] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.593285][ T7918] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.600394][ T7918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.640672][ T2872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 377.651226][ T2872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 377.686903][ T7918] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.694021][ T7918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.759354][ T2872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.896015][ T2872] veth0_vlan: entered promiscuous mode [ 377.907036][ T2872] veth1_vlan: entered promiscuous mode [ 377.925733][ T2872] veth0_macvtap: entered promiscuous mode [ 377.933774][ T2872] veth1_macvtap: entered promiscuous mode [ 377.946807][ T2872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.959326][ T2872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.972395][ T2872] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.981278][ T2872] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.990128][ T2872] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.998874][ T2872] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.163901][ T3338] bridge0: entered promiscuous mode [ 378.187049][ T3338] bridge0: port 3(macsec1) entered blocking state [ 378.193701][ T3338] bridge0: port 3(macsec1) entered disabled state [ 378.206690][ T3338] macsec1: entered allmulticast mode [ 378.212453][ T3338] bridge0: entered allmulticast mode [ 378.228933][ T3338] macsec1: left allmulticast mode [ 378.234031][ T3338] bridge0: left allmulticast mode [ 378.276474][ T3338] bridge0: left promiscuous mode [ 378.455133][ T3358] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3358 comm=syz.4.11905 [ 378.829396][ T3424] bridge0: entered promiscuous mode [ 378.874380][ T3424] bridge0: port 3(macsec1) entered blocking state [ 378.881052][ T3424] bridge0: port 3(macsec1) entered disabled state [ 378.894622][ T3430] xt_hashlimit: size too large, truncated to 1048576 [ 378.904536][ T3424] macsec1: entered allmulticast mode [ 378.910041][ T3424] bridge0: entered allmulticast mode [ 378.916514][ T3334] netlink: 'syz.0.11910': attribute type 2 has an invalid length. [ 378.987628][ T3424] macsec1: left allmulticast mode [ 378.992760][ T3424] bridge0: left allmulticast mode [ 379.003762][ T3434] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11921'. [ 379.033675][ T3424] bridge0: left promiscuous mode [ 379.226824][ T3449] vhci_hcd: default hub control req: 2317 v0040 i0002 l0 [ 379.257846][ T29] kauditd_printk_skb: 1715 callbacks suppressed [ 379.257862][ T29] audit: type=1326 audit(1750250575.022:13931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3447 comm="syz.0.11924" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f949976e929 code=0x0 [ 379.909409][ T3448] syz.4.11922 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 379.923706][ T3448] CPU: 0 UID: 0 PID: 3448 Comm: syz.4.11922 Tainted: G W 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 379.923826][ T3448] Tainted: [W]=WARN [ 379.923834][ T3448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.923848][ T3448] Call Trace: [ 379.923855][ T3448] [ 379.923865][ T3448] __dump_stack+0x1d/0x30 [ 379.923912][ T3448] dump_stack_lvl+0xe8/0x140 [ 379.923931][ T3448] dump_stack+0x15/0x1b [ 379.923947][ T3448] dump_header+0x81/0x220 [ 379.924006][ T3448] oom_kill_process+0x334/0x3f0 [ 379.924091][ T3448] out_of_memory+0x979/0xb80 [ 379.924124][ T3448] try_charge_memcg+0x5e6/0x9e0 [ 379.924153][ T3448] obj_cgroup_charge_pages+0xa6/0x150 [ 379.924261][ T3448] __memcg_kmem_charge_page+0x9f/0x170 [ 379.924295][ T3448] __alloc_frozen_pages_noprof+0x188/0x360 [ 379.924346][ T3448] alloc_pages_mpol+0xb3/0x250 [ 379.924378][ T3448] alloc_pages_noprof+0x90/0x130 [ 379.924409][ T3448] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 379.924519][ T3448] __kvmalloc_node_noprof+0x30f/0x4e0 [ 379.924550][ T3448] ? ip_set_alloc+0x1f/0x30 [ 379.924575][ T3448] ? ip_set_alloc+0x1f/0x30 [ 379.924600][ T3448] ip_set_alloc+0x1f/0x30 [ 379.924699][ T3448] hash_netiface_create+0x282/0x740 [ 379.924735][ T3448] ? __pfx_hash_netiface_create+0x10/0x10 [ 379.924771][ T3448] ip_set_create+0x3cc/0x960 [ 379.924886][ T3448] ? __nla_parse+0x40/0x60 [ 379.924957][ T3448] nfnetlink_rcv_msg+0x4c3/0x590 [ 379.925000][ T3448] ? selinux_capable+0x1f9/0x270 [ 379.925037][ T3448] netlink_rcv_skb+0x123/0x220 [ 379.925073][ T3448] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 379.925142][ T3448] nfnetlink_rcv+0x16b/0x1690 [ 379.925168][ T3448] ? __kfree_skb+0x109/0x150 [ 379.925226][ T3448] ? nlmon_xmit+0x4f/0x60 [ 379.925259][ T3448] ? consume_skb+0x49/0x150 [ 379.925288][ T3448] ? nlmon_xmit+0x4f/0x60 [ 379.925306][ T3448] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 379.925369][ T3448] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 379.925406][ T3448] ? __dev_queue_xmit+0x182/0x1fb0 [ 379.925441][ T3448] ? ref_tracker_free+0x37d/0x3e0 [ 379.925490][ T3448] ? __netlink_deliver_tap+0x4dc/0x500 [ 379.925553][ T3448] netlink_unicast+0x59e/0x670 [ 379.925589][ T3448] netlink_sendmsg+0x58b/0x6b0 [ 379.925661][ T3448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.925685][ T3448] __sock_sendmsg+0x142/0x180 [ 379.925736][ T3448] ____sys_sendmsg+0x31e/0x4e0 [ 379.925837][ T3448] ___sys_sendmsg+0x17b/0x1d0 [ 379.925952][ T3448] __x64_sys_sendmsg+0xd4/0x160 [ 379.926000][ T3448] x64_sys_call+0x2999/0x2fb0 [ 379.926026][ T3448] do_syscall_64+0xd2/0x200 [ 379.926045][ T3448] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 379.926135][ T3448] ? clear_bhb_loop+0x40/0x90 [ 379.926207][ T3448] ? clear_bhb_loop+0x40/0x90 [ 379.926257][ T3448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.926276][ T3448] RIP: 0033:0x7f14ef38e929 [ 379.926292][ T3448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.926431][ T3448] RSP: 002b:00007f14ed9f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.926455][ T3448] RAX: ffffffffffffffda RBX: 00007f14ef5b5fa0 RCX: 00007f14ef38e929 [ 379.926471][ T3448] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000004 [ 379.926487][ T3448] RBP: 00007f14ef410b39 R08: 0000000000000000 R09: 0000000000000000 [ 379.926501][ T3448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.926559][ T3448] R13: 0000000000000000 R14: 00007f14ef5b5fa0 R15: 00007ffc31c7fac8 [ 379.926579][ T3448] [ 380.273289][ T3448] memory: usage 307200kB, limit 307200kB, failcnt 98 [ 380.280340][ T3448] memory+swap: usage 307352kB, limit 9007199254740988kB, failcnt 0 [ 380.288296][ T3448] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 380.296044][ T3448] Memory cgroup stats for /syz4: [ 380.325214][ T3448] cache 0 [ 380.333205][ T3448] rss 0 [ 380.336056][ T3448] shmem 0 [ 380.339006][ T3448] mapped_file 0 [ 380.342680][ T3448] dirty 0 [ 380.345634][ T3448] writeback 32768 [ 380.349275][ T3448] workingset_refault_anon 1 [ 380.353809][ T3448] workingset_refault_file 0 [ 380.358317][ T3448] swap 155648 [ 380.361666][ T3448] swapcached 32768 [ 380.365401][ T3448] pgpgin 198474 [ 380.368876][ T3448] pgpgout 198466 [ 380.372475][ T3448] pgfault 264270 [ 380.376087][ T3448] pgmajfault 6 [ 380.379466][ T3448] inactive_anon 32768 [ 380.383490][ T3448] active_anon 0 [ 380.386952][ T3448] inactive_file 0 [ 380.390651][ T3448] active_file 0 [ 380.394124][ T3448] unevictable 0 [ 380.397594][ T3448] hierarchical_memory_limit 314572800 [ 380.403006][ T3448] hierarchical_memsw_limit 9223372036854771712 [ 380.409372][ T3448] total_cache 0 [ 380.412860][ T3448] total_rss 0 [ 380.416161][ T3448] total_shmem 0 [ 380.419680][ T3448] total_mapped_file 0 [ 380.423673][ T3448] total_dirty 0 [ 380.427154][ T3448] total_writeback 32768 [ 380.431351][ T3448] total_workingset_refault_anon 1 [ 380.436404][ T3448] total_workingset_refault_file 0 [ 380.441470][ T3448] total_swap 155648 [ 380.445354][ T3448] total_swapcached 32768 [ 380.449667][ T3448] total_pgpgin 198474 [ 380.453666][ T3448] total_pgpgout 198466 [ 380.457788][ T3448] total_pgfault 264274 [ 380.461863][ T3448] total_pgmajfault 6 [ 380.465792][ T3448] total_inactive_anon 32768 [ 380.470382][ T3448] total_active_anon 0 [ 380.474373][ T3448] total_inactive_file 0 [ 380.478572][ T3448] total_active_file 0 [ 380.482564][ T3448] total_unevictable 0 [ 380.486674][ T3448] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.11922,pid=3446,uid=0 [ 380.501407][ T3448] Memory cgroup out of memory: Killed process 3446 (syz.4.11922) total-vm:95728kB, anon-rss:1060kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 380.690508][ T29] audit: type=1326 audit(1750250576.529:13932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3455 comm="syz.2.11937" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff7257ae929 code=0x0 [ 380.867047][ T3483] net_ratelimit: 40 callbacks suppressed [ 380.867067][ T3483] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 380.887350][ T3481] hub 6-0:1.0: USB hub found [ 380.898861][ T3481] hub 6-0:1.0: 8 ports detected [ 380.935034][ T3497] tipc: Started in network mode [ 380.940103][ T3497] tipc: Node identity ac14140f, cluster identity 4711 [ 380.962788][ T3497] tipc: New replicast peer: 255.255.255.255 [ 380.969088][ T3497] tipc: Enabled bearer , priority 10 [ 381.107813][ T29] audit: type=1326 audit(1750250576.971:13933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.11932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef38e929 code=0x7ffc0000 [ 381.136905][ T3513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11934'. [ 381.146668][ T29] audit: type=1326 audit(1750250576.971:13934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.11932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f14ef38e929 code=0x7ffc0000 [ 381.170359][ T29] audit: type=1326 audit(1750250576.971:13935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.11932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef38e929 code=0x7ffc0000 [ 381.194016][ T29] audit: type=1326 audit(1750250576.971:13936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.11932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef38e929 code=0x7ffc0000 [ 381.218093][ T29] audit: type=1326 audit(1750250576.971:13937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.11932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f14ef38e929 code=0x7ffc0000 [ 381.242086][ T29] audit: type=1326 audit(1750250576.971:13938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.11932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef38e929 code=0x7ffc0000 [ 381.265810][ T29] audit: type=1326 audit(1750250576.971:13939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.11932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef38e929 code=0x7ffc0000 [ 381.289609][ T29] audit: type=1326 audit(1750250576.971:13940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3506 comm="syz.4.11932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f14ef38e929 code=0x7ffc0000 [ 381.371176][ T3526] xt_hashlimit: size too large, truncated to 1048576 [ 381.452101][ T3529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11939'. [ 381.993740][ T3581] tipc: Started in network mode [ 381.998765][ T3581] tipc: Node identity ac14140f, cluster identity 4711 [ 382.023852][ T3581] tipc: New replicast peer: 255.255.255.255 [ 382.030124][ T3581] tipc: Enabled bearer , priority 10 [ 382.031582][ T10] tipc: Node number set to 2886997007 [ 382.046463][ T3584] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11963'. [ 382.150636][ T3532] netlink: 'syz.2.11943': attribute type 2 has an invalid length. [ 382.693430][ T3644] xt_hashlimit: size too large, truncated to 1048576 [ 382.703122][ T1567] syz_tun (unregistering): left allmulticast mode [ 382.709750][ T1567] syz_tun (unregistering): left promiscuous mode [ 382.716253][ T1567] bridge0: port 3(syz_tun) entered disabled state [ 382.742040][ T3650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11960'. [ 382.851299][ T7918] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.883797][ T3589] chnl_net:caif_netlink_parms(): no params data found [ 382.906814][ T7918] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.964709][ T7918] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.974746][ T3405] tipc: Node number set to 2886997007 [ 383.039534][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.046663][ T3589] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.069900][ T3589] bridge_slave_0: entered allmulticast mode [ 383.078124][ T3589] bridge_slave_0: entered promiscuous mode [ 383.085294][ T7918] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.119270][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.126513][ T3589] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.167203][ T3589] bridge_slave_1: entered allmulticast mode [ 383.177518][ T3589] bridge_slave_1: entered promiscuous mode [ 383.214353][ T3589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.248313][ T3589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.295887][ T3589] team0: Port device team_slave_0 added [ 383.315755][ T3589] team0: Port device team_slave_1 added [ 383.379626][ T7918] bridge_slave_1: left allmulticast mode [ 383.385391][ T7918] bridge_slave_1: left promiscuous mode [ 383.391147][ T7918] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.417461][ T7918] bridge_slave_0: left promiscuous mode [ 383.423214][ T7918] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.509170][ T7918] bond2 (unregistering): (slave gretap1): Releasing active interface [ 383.550081][ T7918] team0: Port device geneve1 removed [ 383.637625][ T7918] bond0 (unregistering): left promiscuous mode [ 383.643907][ T7918] bond_slave_0: left promiscuous mode [ 383.649544][ T7918] bond_slave_1: left promiscuous mode [ 383.679037][ T7918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.696042][ T7918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.717878][ T7918] bond0 (unregistering): Released all slaves [ 383.741200][ T7918] bond1 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 383.757873][ T7918] bond1 (unregistering): Released all slaves [ 383.772206][ T7918] bond2 (unregistering): Released all slaves [ 383.807342][ T3589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 383.814336][ T3589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.840387][ T3589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 383.904424][ T7918] tipc: Disabling bearer [ 383.909683][ T7918] tipc: Left network mode [ 383.915546][ T3589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 383.922633][ T3589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.949112][ T3589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.032637][ T3589] hsr_slave_0: entered promiscuous mode [ 384.064079][ T3589] hsr_slave_1: entered promiscuous mode [ 384.084010][ T3589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.101237][ T3589] Cannot create hsr debugfs directory [ 384.133269][ T7918] hsr_slave_0: left promiscuous mode [ 384.139845][ T7918] hsr_slave_1: left promiscuous mode [ 384.153206][ T7918] batman_adv: batadv0: Removing interface: team0 [ 384.169929][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.185482][ T7918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.290730][ T7918] team0 (unregistering): Port device team_slave_1 removed [ 384.313743][ T7918] team0 (unregistering): Port device C removed [ 384.333310][ T7870] smc: removing ib device syz0 [ 384.555089][ T3935] netlink: 'syz.9.11968': attribute type 2 has an invalid length. [ 384.797379][ T3589] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.807317][ T3589] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.924522][ T3772] chnl_net:caif_netlink_parms(): no params data found [ 384.988249][ T3589] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.998157][ T3589] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.074492][ T7918] IPVS: stop unused estimator thread 0... [ 385.092891][ T3589] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.102794][ T3589] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.196027][ T3589] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 385.206003][ T3589] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.249937][ T3772] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.257125][ T3772] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.282941][ T3772] bridge_slave_0: entered allmulticast mode [ 385.316576][ T3772] bridge_slave_0: entered promiscuous mode [ 385.354555][ T3772] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.361803][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.384975][ T3772] bridge_slave_1: entered allmulticast mode [ 385.398101][ T3772] bridge_slave_1: entered promiscuous mode [ 385.481997][ T3589] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 385.515933][ T3772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.535120][ T3589] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 385.557199][ T3772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.568606][ T3589] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 385.624463][ T3589] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 385.660547][ T3772] team0: Port device team_slave_0 added [ 385.671907][ T3772] team0: Port device team_slave_1 added [ 385.708772][ T3772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.715946][ T3772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.741928][ T3772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.754009][ T3772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.761063][ T3772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.787263][ T3772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.832861][ T3772] hsr_slave_0: entered promiscuous mode [ 385.839857][ T3772] hsr_slave_1: entered promiscuous mode [ 385.845875][ T3772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 385.856373][ T3772] Cannot create hsr debugfs directory [ 385.941207][ T3589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.959640][ T3589] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.979115][ T7890] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.986318][ T7890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.006577][ T3589] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 386.017129][ T3589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.035194][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.042384][ T7890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.119773][ T3589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.198858][ T3772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 386.220905][ T3772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 386.236299][ T3772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 386.260037][ T3589] veth0_vlan: entered promiscuous mode [ 386.266017][ T3772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 386.277154][ T3589] veth1_vlan: entered promiscuous mode [ 386.302279][ T3589] veth0_macvtap: entered promiscuous mode [ 386.315926][ T3589] veth1_macvtap: entered promiscuous mode [ 386.335433][ T3589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.357675][ T3589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.368874][ T3772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.379034][ T3589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.387925][ T3589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.396774][ T3589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.405672][ T3589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.427119][ T3772] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.444025][ T7921] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.451096][ T7921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.462630][ T7890] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.469801][ T7890] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.492555][ T3772] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 386.503089][ T3772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.563341][ T29] kauditd_printk_skb: 525 callbacks suppressed [ 386.563409][ T29] audit: type=1400 audit(1750250582.712:14466): avc: denied { write } for pid=4417 comm="syz.2.11985" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 386.616843][ T4420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11955'. [ 386.638416][ T3772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.694711][ T29] audit: type=1326 audit(1750250582.849:14467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.2.11988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7257ae929 code=0x7ffc0000 [ 386.719013][ T4433] xt_hashlimit: size too large, truncated to 1048576 [ 386.742501][ T29] audit: type=1326 audit(1750250582.849:14468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.2.11988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7257ae929 code=0x7ffc0000 [ 386.746615][ T4430] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11988'. [ 386.766371][ T29] audit: type=1326 audit(1750250582.859:14469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.2.11988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7257ae929 code=0x7ffc0000 [ 386.799134][ T29] audit: type=1326 audit(1750250582.859:14470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.2.11988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7257ae929 code=0x7ffc0000 [ 386.822870][ T29] audit: type=1326 audit(1750250582.859:14471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.2.11988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7257ae929 code=0x7ffc0000 [ 386.846543][ T29] audit: type=1326 audit(1750250582.859:14472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.2.11988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7257ae929 code=0x7ffc0000 [ 386.870844][ T29] audit: type=1326 audit(1750250582.902:14473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.2.11988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7257ae929 code=0x7ffc0000 [ 386.894591][ T29] audit: type=1326 audit(1750250582.912:14474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.2.11988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7257ae929 code=0x7ffc0000 [ 386.918309][ T29] audit: type=1326 audit(1750250582.912:14475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4429 comm="syz.2.11988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7257ae929 code=0x7ffc0000 [ 386.951035][ T4439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11974'. [ 387.072560][ T3772] veth0_vlan: entered promiscuous mode [ 387.084299][ T3772] veth1_vlan: entered promiscuous mode [ 387.097639][ T3772] veth0_macvtap: entered promiscuous mode [ 387.108668][ T3772] veth1_macvtap: entered promiscuous mode [ 387.122065][ T3772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.133500][ T3772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.162017][ T3772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.170944][ T3772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.179709][ T3772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.188446][ T3772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.127077][ T4482] netlink: 'syz.4.11979': attribute type 2 has an invalid length. [ 388.272248][ T4543] xt_hashlimit: size too large, truncated to 1048576 [ 388.595302][ T4543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12008'. [ 388.773862][ T4562] netlink: 'syz.2.12005': attribute type 1 has an invalid length. [ 388.781898][ T4562] netlink: 'syz.2.12005': attribute type 1 has an invalid length. [ 389.345951][ T4627] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 389.625748][ T4648] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12024'. [ 389.659872][ T4648] netlink: zone id is out of range [ 389.703688][ T4648] netlink: zone id is out of range [ 389.729111][ T4648] netlink: del zone limit has 8 unknown bytes [ 389.750201][ T4581] netlink: 'syz.2.12011': attribute type 2 has an invalid length. [ 389.980974][ T4686] netlink: 576 bytes leftover after parsing attributes in process `syz.1.12035'. [ 390.123053][ T4706] Invalid ELF header magic: != ELF [ 390.242915][ T4726] netlink: 'syz.1.12048': attribute type 21 has an invalid length. [ 390.250937][ T4726] IPv6: NLM_F_CREATE should be specified when creating new route [ 390.326217][ T4738] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.12050'. [ 390.366025][ T4738] netlink: zone id is out of range [ 390.400784][ T4738] netlink: zone id is out of range [ 390.423002][ T4738] netlink: del zone limit has 8 unknown bytes [ 390.627677][ T4779] xt_hashlimit: size too large, truncated to 1048576 [ 391.027536][ T4819] netlink: 'syz.4.12069': attribute type 3 has an invalid length. [ 391.055320][ T4733] netlink: 'syz.0.12049': attribute type 2 has an invalid length. [ 391.430371][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 391.430389][ T29] audit: type=1326 audit(1750250587.841:14576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.4.12079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef38e929 code=0x7ffc0000 [ 391.507741][ T4847] xt_hashlimit: size too large, truncated to 1048576 [ 391.522638][ T29] audit: type=1326 audit(1750250587.872:14577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.4.12079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f14ef38e929 code=0x7ffc0000 [ 391.546605][ T29] audit: type=1326 audit(1750250587.872:14578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.4.12079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef38e929 code=0x7ffc0000 [ 391.570288][ T29] audit: type=1326 audit(1750250587.872:14579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.4.12079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f14ef38e929 code=0x7ffc0000 [ 391.593944][ T29] audit: type=1326 audit(1750250587.872:14580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.4.12079" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14ef38e929 code=0x7ffc0000 [ 392.098338][ T4862] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=4862 comm=syz.0.12087 [ 392.229673][ T4873] tipc: Failed to remove unknown binding: 66,1,1/0:1751538561/1751538563 [ 392.238179][ T4873] tipc: Failed to remove unknown binding: 66,1,1/0:1751538561/1751538563 [ 392.316307][ T4885] xt_hashlimit: size too large, truncated to 1048576 [ 392.442210][ T4898] pimreg: entered allmulticast mode [ 392.447768][ T4898] pimreg: left allmulticast mode [ 392.560569][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12101'. [ 392.620902][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.628549][ T4920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.653818][ T4920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.661342][ T4920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.789959][ T4945] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 392.805632][ T4857] netlink: 'syz.4.12086': attribute type 2 has an invalid length. [ 393.032261][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12112'. [ 393.194940][ T29] audit: type=1400 audit(1750250589.694:14581): avc: denied { create } for pid=4986 comm="syz.2.12121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 393.255427][ T29] audit: type=1400 audit(1750250589.704:14582): avc: denied { write } for pid=4986 comm="syz.2.12121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 393.276090][ T29] audit: type=1400 audit(1750250589.704:14583): avc: denied { read } for pid=4986 comm="syz.2.12121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 393.297121][ T29] audit: type=1400 audit(1750250589.704:14584): avc: denied { map_create } for pid=4986 comm="syz.2.12121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 393.316559][ T29] audit: type=1400 audit(1750250589.704:14585): avc: denied { map_read map_write } for pid=4986 comm="syz.2.12121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 393.679274][ T5047] C: renamed from team_slave_0 (while UP) [ 393.693252][ T5047] netlink: 152 bytes leftover after parsing attributes in process `syz.9.12142'. [ 393.820635][ T5070] SELinux: syz.2.12149 (5070) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 394.628287][ T5110] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12161'. [ 394.815718][ T5140] netlink: 'syz.9.12176': attribute type 2 has an invalid length. [ 394.823659][ T5140] netlink: 16 bytes leftover after parsing attributes in process `syz.9.12176'. [ 395.175733][ T5182] openvswitch: netlink: Message has 6 unknown bytes. [ 395.263342][ T5192] netlink: 'syz.0.12195': attribute type 1 has an invalid length. [ 395.366835][ T5203] random: crng reseeded on system resumption [ 395.741570][ T5224] openvswitch: netlink: Message has 6 unknown bytes. [ 395.818919][ T5237] netlink: 'syz.4.12209': attribute type 1 has an invalid length. [ 395.831708][ T5235] netlink: 'syz.2.12208': attribute type 13 has an invalid length. [ 395.901814][ T5241] random: crng reseeded on system resumption [ 395.957896][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.965231][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.071606][ T5235] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.080760][ T5235] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.089782][ T5235] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.098801][ T5235] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.116037][ T5235] bond0: left promiscuous mode [ 396.120873][ T5235] bond_slave_0: left promiscuous mode [ 396.126662][ T5235] bond_slave_1: left promiscuous mode [ 396.266430][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 396.266448][ T29] audit: type=1400 audit(1750250592.936:14721): avc: denied { mounton } for pid=5263 comm="syz.1.12219" path="/52/file0" dev="tmpfs" ino=279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 396.373551][ T29] audit: type=1400 audit(1750250593.042:14722): avc: denied { read } for pid=5271 comm="syz.2.12221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 396.445192][ T29] audit: type=1400 audit(1750250593.115:14723): avc: denied { setopt } for pid=5273 comm="syz.2.12223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 396.472029][ T5276] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 396.548451][ T29] audit: type=1400 audit(1750250593.231:14724): avc: denied { read } for pid=5273 comm="syz.2.12223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 396.603604][ T29] audit: type=1400 audit(1750250593.284:14725): avc: denied { create } for pid=5282 comm="syz.0.12225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 396.628247][ T5284] siw: device registration error -23 [ 396.634604][ T29] audit: type=1400 audit(1750250593.315:14726): avc: denied { write } for pid=5282 comm="syz.0.12225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 396.804343][ T29] audit: type=1326 audit(1750250593.494:14727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.9.12231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 396.877125][ T29] audit: type=1326 audit(1750250593.526:14728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.9.12231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 396.900911][ T29] audit: type=1326 audit(1750250593.526:14729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.9.12231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 396.924607][ T29] audit: type=1326 audit(1750250593.526:14730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5295 comm="syz.9.12231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6793e929 code=0x7ffc0000 [ 397.067355][ T5314] random: crng reseeded on system resumption [ 397.079906][ T5316] siw: device registration error -23 [ 397.153230][ T5322] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 397.165423][ T5322] SELinux: failed to load policy [ 397.683391][ T7897] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.752193][ T7897] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.809030][ T7897] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.874996][ T7897] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.981363][ T7897] bridge_slave_1: left allmulticast mode [ 397.987176][ T7897] bridge_slave_1: left promiscuous mode [ 397.992875][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.026882][ T7897] bridge_slave_0: left allmulticast mode [ 398.032603][ T7897] bridge_slave_0: left promiscuous mode [ 398.038389][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.248393][ T7897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.282591][ T7897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.316423][ T7897] bond0 (unregistering): Released all slaves [ 398.430942][ T7897] hsr_slave_0: left promiscuous mode [ 398.438237][ T7897] hsr_slave_1: left promiscuous mode [ 398.444279][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.451822][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.460131][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.467614][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.478026][ T7897] veth1_macvtap: left promiscuous mode [ 398.483563][ T7897] veth0_macvtap: left promiscuous mode [ 398.489545][ T7897] veth1_vlan: left promiscuous mode [ 398.495143][ T7897] veth0_vlan: left promiscuous mode [ 398.657511][ T7897] team0 (unregistering): Port device team_slave_1 removed [ 398.671926][ T7897] team0 (unregistering): Port device team_slave_0 removed [ 398.717092][ T5399] @: renamed from vlan0 (while UP) [ 399.030108][ T5364] chnl_net:caif_netlink_parms(): no params data found [ 399.130803][ T7897] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.170446][ T5363] chnl_net:caif_netlink_parms(): no params data found [ 399.185970][ T5364] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.193120][ T5364] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.200341][ T5364] bridge_slave_0: entered allmulticast mode [ 399.207111][ T5364] bridge_slave_0: entered promiscuous mode [ 399.221727][ T7897] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.238875][ T5364] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.246054][ T5364] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.254378][ T5364] bridge_slave_1: entered allmulticast mode [ 399.261047][ T5364] bridge_slave_1: entered promiscuous mode [ 399.307800][ T7897] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.333785][ T5368] chnl_net:caif_netlink_parms(): no params data found [ 399.371422][ T5364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.384273][ T7897] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.401345][ T5363] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.408444][ T5363] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.415753][ T5363] bridge_slave_0: entered allmulticast mode [ 399.422420][ T5363] bridge_slave_0: entered promiscuous mode [ 399.451768][ T5364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.461710][ T5363] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.468811][ T5363] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.476115][ T5363] bridge_slave_1: entered allmulticast mode [ 399.483088][ T5363] bridge_slave_1: entered promiscuous mode [ 399.522871][ T5363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.548239][ T5363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.558215][ T5364] team0: Port device team_slave_0 added [ 399.575390][ T5394] chnl_net:caif_netlink_parms(): no params data found [ 399.603401][ T5364] team0: Port device team_slave_1 added [ 399.624957][ T5363] team0: Port device team_slave_0 added [ 399.633579][ T5363] team0: Port device team_slave_1 added [ 399.688794][ T7897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.701218][ T5364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.708264][ T5364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.734308][ T5364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.769356][ T5364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.776378][ T5364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.802384][ T5364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.813862][ T5368] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.821036][ T5368] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.828308][ T5368] bridge_slave_0: entered allmulticast mode [ 399.834860][ T5368] bridge_slave_0: entered promiscuous mode [ 399.841646][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.848679][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.874860][ T5363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.888501][ T5363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.895547][ T5363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.921573][ T5363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.935023][ T7897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.957330][ T5368] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.964643][ T5368] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.972241][ T5368] bridge_slave_1: entered allmulticast mode [ 399.978852][ T5368] bridge_slave_1: entered promiscuous mode [ 400.005898][ T5364] hsr_slave_0: entered promiscuous mode [ 400.012161][ T5364] hsr_slave_1: entered promiscuous mode [ 400.018060][ T5364] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.025676][ T5364] Cannot create hsr debugfs directory [ 400.045532][ T7897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.074823][T15482] ================================================================== [ 400.082993][T15482] BUG: KCSAN: data-race in alloc_pid / copy_process [ 400.089608][T15482] [ 400.091938][T15482] read-write to 0xffffffff86860860 of 4 bytes by task 7890 on cpu 0: [ 400.100014][T15482] alloc_pid+0x539/0x720 [ 400.104267][T15482] copy_process+0xe0e/0x1fe0 [ 400.108864][T15482] kernel_clone+0x16c/0x5b0 [ 400.113375][T15482] user_mode_thread+0x7d/0xb0 [ 400.118240][T15482] call_usermodehelper_exec_work+0x41/0x160 [ 400.124148][T15482] process_scheduled_works+0x4ce/0x9d0 [ 400.129626][T15482] worker_thread+0x582/0x770 [ 400.134231][T15482] kthread+0x486/0x510 [ 400.138303][T15482] ret_from_fork+0xdd/0x150 [ 400.142811][T15482] ret_from_fork_asm+0x1a/0x30 [ 400.147585][T15482] [ 400.149908][T15482] read to 0xffffffff86860860 of 4 bytes by task 15482 on cpu 1: [ 400.157629][T15482] copy_process+0x148f/0x1fe0 [ 400.162343][T15482] kernel_clone+0x16c/0x5b0 [ 400.166855][T15482] user_mode_thread+0x7d/0xb0 [ 400.171542][T15482] call_usermodehelper_exec_work+0x41/0x160 [ 400.177446][T15482] process_scheduled_works+0x4ce/0x9d0 [ 400.182921][T15482] worker_thread+0x582/0x770 [ 400.187527][T15482] kthread+0x486/0x510 [ 400.191602][T15482] ret_from_fork+0xdd/0x150 [ 400.196111][T15482] ret_from_fork_asm+0x1a/0x30 [ 400.200971][T15482] [ 400.203296][T15482] value changed: 0x80000151 -> 0x80000152 [ 400.209015][T15482] [ 400.211340][T15482] Reported by Kernel Concurrency Sanitizer on: [ 400.217495][T15482] CPU: 1 UID: 0 PID: 15482 Comm: kworker/u8:68 Tainted: G W 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 400.231829][T15482] Tainted: [W]=WARN [ 400.235633][T15482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 400.245694][T15482] Workqueue: events_unbound call_usermodehelper_exec_work [ 400.252860][T15482] ================================================================== [ 400.263250][ T5394] bridge0: port 1(bridge_slave_0) entered blocking state SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 400.270478][ T5394] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.294379][ T5394] bridge_slave_0: entered allmulticast mode [ 400.300873][ T5394] bridge_slave_0: entered promiscuous mode [ 400.342976][ T5368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.405980][ T7897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.503833][ T7897] dummy0: left allmulticast mode [ 400.509034][ T7897] bridge0: port 3(dummy0) entered disabled state [ 400.518501][ T7897] bridge_slave_1: left allmulticast mode [ 400.524303][ T7897] bridge_slave_1: left promiscuous mode [ 400.530008][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.560892][ T7897] bridge_slave_0: left allmulticast mode [ 400.566634][ T7897] bridge_slave_0: left promiscuous mode [ 400.572434][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.595737][ T7897] bridge_slave_1: left allmulticast mode [ 400.601477][ T7897] bridge_slave_1: left promiscuous mode [ 400.607120][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.634767][ T7897] bridge_slave_0: left allmulticast mode [ 400.640678][ T7897] bridge_slave_0: left promiscuous mode [ 400.646475][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.836615][ T7897] bond0 (unregistering): left promiscuous mode [ 400.842867][ T7897] ÿ: left promiscuous mode [ 400.847510][ T7897] bond_slave_1: left promiscuous mode [ 400.860391][ T7897] bond0 (unregistering): (slave 77ÿ): Releasing backup interface [ 400.871311][ T7897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.882604][ T7897] bond0 (unregistering): Released all slaves [ 400.894336][ T7897] bond1 (unregistering): Released all slaves [ 400.971497][ T7897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.983729][ T7897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.993459][ T7897] bond0 (unregistering): Released all slaves [ 401.052552][ T7897] tipc: Disabling bearer [ 401.057889][ T7897] tipc: Left network mode [ 401.110681][ T7897] hsr_slave_0: left promiscuous mode [ 401.119024][ T7897] hsr_slave_1: left promiscuous mode [ 401.126011][ T7897] batman_adv: batadv0: Removing interface: team0 [ 401.135264][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.142794][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.152852][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.160365][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.173206][ T7897] hsr_slave_0: left promiscuous mode [ 401.178910][ T7897] hsr_slave_1: left promiscuous mode [ 401.184693][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.192199][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.201896][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.209354][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.225539][ T7897] veth1_vlan: left promiscuous mode [ 401.230865][ T7897] veth0_vlan: left promiscuous mode [ 401.239198][ T7897] veth1_macvtap: left promiscuous mode [ 401.244862][ T7897] veth0_macvtap: left promiscuous mode [ 401.250361][ T7897] veth1_vlan: left promiscuous mode [ 401.258209][ T7897] veth0_vlan: left promiscuous mode [ 401.372869][ T7897] team0 (unregistering): Port device team_slave_1 removed [ 401.384086][ T7897] team0 (unregistering): Port device C removed [ 401.455477][ T7897] team0 (unregistering): Port device team_slave_1 removed [ 401.467629][ T7897] team0 (unregistering): Port device team_slave_0 removed [ 401.943400][ T7897] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.997525][ T7897] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.054687][ T7897] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.111652][ T7897] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.186225][ T7897] bridge_slave_1: left allmulticast mode [ 402.191983][ T7897] bridge_slave_1: left promiscuous mode [ 402.197838][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.207635][ T7897] bridge_slave_0: left allmulticast mode [ 402.213466][ T7897] bridge_slave_0: left promiscuous mode [ 402.219370][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.229662][ T7897] bridge_slave_1: left allmulticast mode [ 402.235354][ T7897] bridge_slave_1: left promiscuous mode [ 402.241081][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.250732][ T7897] bridge_slave_0: left allmulticast mode [ 402.256511][ T7897] bridge_slave_0: left promiscuous mode [ 402.262249][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.273206][ T7897] bridge_slave_1: left allmulticast mode [ 402.278875][ T7897] bridge_slave_1: left promiscuous mode [ 402.284910][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.295284][ T7897] bridge_slave_0: left allmulticast mode [ 402.301105][ T7897] bridge_slave_0: left promiscuous mode [ 402.306837][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.317352][ T7897] bridge_slave_0: left allmulticast mode [ 402.323135][ T7897] bridge_slave_0: left promiscuous mode [ 402.328990][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.340110][ T7897] bridge_slave_1: left allmulticast mode [ 402.345793][ T7897] bridge_slave_1: left promiscuous mode [ 402.351508][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.361540][ T7897] bridge_slave_0: left allmulticast mode [ 402.367321][ T7897] bridge_slave_0: left promiscuous mode [ 402.373018][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.444637][ T7897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.456082][ T7897] bond0 (unregistering): Released all slaves [ 402.500136][ T7897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.511622][ T7897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.521052][ T7897] bond0 (unregistering): Released all slaves [ 402.586910][ T7897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.599125][ T7897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.609229][ T7897] bond0 (unregistering): Released all slaves [ 402.661509][ T7897] bond0 (unregistering): Released all slaves [ 402.719083][ T7897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.730543][ T7897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.739870][ T7897] bond0 (unregistering): Released all slaves [ 402.788765][ T7897] tipc: Disabling bearer [ 402.794081][ T7897] tipc: Left network mode [ 402.900365][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.909749][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.921136][ T7897] hsr_slave_0: left promiscuous mode [ 402.929304][ T7897] hsr_slave_1: left promiscuous mode [ 402.935020][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.942566][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.952990][ T7897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.960496][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.969783][ T7897] hsr_slave_0: left promiscuous mode [ 402.975898][ T7897] hsr_slave_1: left promiscuous mode [ 402.981531][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.991226][ T7897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.003720][ T7897] veth1_macvtap: left promiscuous mode [ 403.009235][ T7897] veth0_macvtap: left promiscuous mode [ 403.015087][ T7897] veth1_vlan: left promiscuous mode [ 403.020394][ T7897] veth0_vlan: left promiscuous mode [ 403.110819][ T7897] team0 (unregistering): Port device team_slave_1 removed [ 403.122002][ T7897] team0 (unregistering): Port device team_slave_0 removed [ 403.190710][ T7897] team0 (unregistering): Port device team_slave_1 removed [ 403.203832][ T7897] team0 (unregistering): Port device team_slave_0 removed [ 403.275046][ T7897] team0 (unregistering): Port device team_slave_1 removed [ 403.287871][ T7897] team0 (unregistering): Port device team_slave_0 removed