last executing test programs: 30.722303148s ago: executing program 4 (id=2450): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 30.590359559s ago: executing program 4 (id=2455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x65, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565"}}}}, 0x73) 30.284287464s ago: executing program 4 (id=2463): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT], 0xfe, 0x677, &(0x7f0000000c00)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 30.177012033s ago: executing program 4 (id=2469): io_uring_setup(0x1a08, &(0x7f0000000c40)={0x0, 0x659c, 0x80, 0x1, 0x1ae}) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000001500)="$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") shmat(0x0, &(0x7f0000000000/0x2000)=nil, 0x5000) shmctl$SHM_LOCK(0x0, 0xb) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) 29.816177973s ago: executing program 4 (id=2479): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@bsdgroups}]}, 0xfc, 0x574, &(0x7f0000001980)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUk4gWC3qvS7INJZtuyW5KEwu2B3vxIkUQsSB69+6x+A/4VxS0UKQEPXiJzGY2XZPZNNlumm3384Fp35uZzZvvvvm+fbOzywbQt8bSfwoRL0fEN0nESMu2wcg2jq3tt/Lw+nS6JLG6+ulfSSTZuub+Sfb/oazyUkT89lXEycLmdmtLy3OlSqW8kNXH6/NXxmtLy6cuzZdmy7Ply5NTU2fempp89523uxbr6+f/+f6Tux+e+fr4yne/3D9yO4mzcTjb1hrHE7jRWhmLsew5GYqzG3ac6EJjvSTZ6wOgIwNZng9FOgaMxECW9blWR57moQG77Ms0rYE+lch/6FPNeUDz2r5L18HPjAfvr10AbY5/cO29kRhuXBsdXEn+d2WUXu+OdqH9tI1f/7xzO12i3fsQ+7vQEMAGN25GxOnBwc3jX5KNf507vY19NrbRb68/sJfupvOfN/LmP4X1+U/kzH8O5eRuJx6f/4X7XWimrXT+917u/Hf9ptXoQFZ7oTHnG0ouXqqU07HtxYg4EUP70/pERHyQfxPk88LKvdV27bfO/9Ilbb85F8yO4/7ghvnfTKleevLI1zy4GfFK7vw3We//JKf/0+fj/DbbOFa+82q7bY+Pf3et/hTxWm7/P+rMZOv7k+ON82G8eVZs9vetY7+3a3+v40/7/+DW8Y8mrfdraztv48fhf8vttnV6/u9LPmuU92XrrpXq9YWJiH3Jx5vXTz56bLPe3D+N/8Txrce/vPP/QJrY24z/1tFbrbsO7yz+3ZXGP7Oj/t954d5HX/zQrv3t9f+bjdKJbM12xr/tHuCTPHcAAAAAAADQawoRcTiSQnG9XCgUi2uf7zgaBwuVaq1+8mJ18fJMNL4rOxpDhead7pGWz0NMZJ+HbdYnN9SnIuJIRHw7cKBRL05XKzN7HTwAAAAAAAAAAAAAAAAAAAD0iEMRw3nf/0/9MZD/mDargWfRFj/5DTzn2ud/tqUbv/QE9CSv/9C/5D/0L/kP/Uv+Q/+S/9C/5D/0L/kP/Wsn+f/zuV08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAHg+nD93Ll1WVx5en07rM1eXFueqV0/NlGtzxfnF6eJ0deFKcbZana2Ui9PV+cf9vUq1emViMhavjdfLtfp4bWn5wnx18XL9wqX50mz5QnnoqUQFAAAAAAAAAAAAAAAAAAAAz5ba0vJcqVIpLygodFQY7I3D6MFCoTcOo8PCXo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDIfwEAAP//wGE62g==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42042, 0x19e) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7a680000) 29.60250521s ago: executing program 4 (id=2485): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x6, &(0x7f00000007c0)={0x0, 0x2, 0xcb4, 0x1}) 29.573654792s ago: executing program 32 (id=2485): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r0, 0x6, &(0x7f00000007c0)={0x0, 0x2, 0xcb4, 0x1}) 2.188018821s ago: executing program 5 (id=3321): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b509800000402000000012bd18ffb9f49fcdb8f080c26a04883e7fb8cd987af", "584cbf2649a50f2dbc43efa8698d45942824251d7d17b5191584cdd4fbc40a27424d00", "bcfdfe4f3a4745a8f762b96400", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.021997314s ago: executing program 5 (id=3325): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 2.001839886s ago: executing program 5 (id=3327): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 1.974635618s ago: executing program 5 (id=3329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff020500"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) 1.964183689s ago: executing program 5 (id=3331): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x0, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1.367006448s ago: executing program 0 (id=3347): iopl(0x3) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0500000000000000", @ANYRES32], 0x14) 1.320272992s ago: executing program 0 (id=3348): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 1.285584965s ago: executing program 0 (id=3350): bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b509800000402000000012bd18ffb9f49fcdb8f080c26a04883e7fb8cd987af", "584cbf2649a50f2dbc43efa8698d45942824251d7d17b5191584cdd4fbc40a27424d00", "bcfdfe4f3a4745a8f762b96400", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.274850346s ago: executing program 3 (id=3351): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 1.232706669s ago: executing program 3 (id=3353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x49, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6"}}}}, 0x57) 1.107504819s ago: executing program 0 (id=3355): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() setresuid(0x0, 0x0, 0x0) geteuid() r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(r0, 0xe, &(0x7f00000003c0)={0x6, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) getdents64(0xffffffffffffffff, 0x0, 0x0) 1.086542551s ago: executing program 5 (id=3356): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x512, &(0x7f0000000a00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x51, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf38e3590d464c4e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x2, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r5, 0x0, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000000840)={'#! ', './file0'}, 0xb) close(r6) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r7, &(0x7f0000000080)="4f1002f8839db50f6b17361b", 0xc) sendfile(r7, r2, 0x0, 0x3ffff) sendfile(r7, r2, 0x0, 0x7ffff000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) 1.046948904s ago: executing program 3 (id=3358): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000180)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000340)={r1, r2/1000+60000}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 918.103265ms ago: executing program 3 (id=3360): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 884.734117ms ago: executing program 3 (id=3361): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 653.690877ms ago: executing program 3 (id=3362): epoll_create1(0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x5}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x110000001, 0x763, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xbfa35000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlockall(0x4) 620.140049ms ago: executing program 2 (id=3364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff0205000100"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) 601.672631ms ago: executing program 2 (id=3365): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b509800000402000000012bd18ffb9f49fcdb8f080c26a04883e7fb8cd987af", "584cbf2649a50f2dbc43efa8698d45942824251d7d17b5191584cdd4fbc40a27424d00", "bcfdfe4f3a4745a8f762b96400", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 296.825666ms ago: executing program 2 (id=3367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 293.002026ms ago: executing program 1 (id=3368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x8, 0x57, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @remote, {[@end]}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x1, 0x0, 0x8}, {"ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb391"}}}}, 0x65) 222.694082ms ago: executing program 2 (id=3369): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000180)=0x1ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000340)={r1, r2/1000+60000}, 0x10) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 222.207332ms ago: executing program 0 (id=3370): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) 150.122208ms ago: executing program 2 (id=3371): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 138.733189ms ago: executing program 1 (id=3372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x40}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 130.86548ms ago: executing program 0 (id=3373): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x7, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b509800000402000000012bd18ffb9f49fcdb8f080c26a04883e7fb8cd987af", "584cbf2649a50f2dbc43efa8698d45942824251d7d17b5191584cdd4fbc40a27424d00", "bcfdfe4f3a4745a8f762b96400", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x18, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb, 0x10000}}}}}}}}, 0x52) 125.54327ms ago: executing program 2 (id=3374): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62842, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x12, r0, 0x75e7f000) wait4(0xffffffffffffffff, &(0x7f0000000300), 0x8, 0x0) 99.776862ms ago: executing program 1 (id=3375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x3c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x3c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000057c0)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x80}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000084) 83.813103ms ago: executing program 1 (id=3376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff0205000100"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) 45.874457ms ago: executing program 1 (id=3377): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000"], 0xdc}}, 0x0) 0s ago: executing program 1 (id=3378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36) kernel console output (not intermixed with test programs): batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 104.534302][ T1594] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 104.552697][ T7566] FAULT_INJECTION: forcing a failure. [ 104.552697][ T7566] name failslab, interval 1, probability 0, space 0, times 0 [ 104.565507][ T7566] CPU: 1 UID: 0 PID: 7566 Comm: syz.4.1552 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.565539][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.565556][ T7566] Call Trace: [ 104.565564][ T7566] [ 104.565574][ T7566] __dump_stack+0x1d/0x30 [ 104.565627][ T7566] dump_stack_lvl+0xe8/0x140 [ 104.565650][ T7566] dump_stack+0x15/0x1b [ 104.565716][ T7566] should_fail_ex+0x265/0x280 [ 104.565735][ T7566] should_failslab+0x8c/0xb0 [ 104.565757][ T7566] kmem_cache_alloc_noprof+0x50/0x310 [ 104.565781][ T7566] ? skb_clone+0x151/0x1f0 [ 104.565803][ T7566] skb_clone+0x151/0x1f0 [ 104.565859][ T7566] __netlink_deliver_tap+0x2c9/0x500 [ 104.565885][ T7566] netlink_unicast+0x66b/0x690 [ 104.565918][ T7566] netlink_sendmsg+0x58b/0x6b0 [ 104.566015][ T7566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.566036][ T7566] __sock_sendmsg+0x145/0x180 [ 104.566080][ T7566] ____sys_sendmsg+0x31e/0x4e0 [ 104.566103][ T7566] ___sys_sendmsg+0x17b/0x1d0 [ 104.566166][ T7566] __x64_sys_sendmsg+0xd4/0x160 [ 104.566272][ T7566] x64_sys_call+0x191e/0x2ff0 [ 104.566292][ T7566] do_syscall_64+0xd2/0x200 [ 104.566317][ T7566] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 104.566339][ T7566] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 104.566391][ T7566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.566410][ T7566] RIP: 0033:0x7fceed48ebe9 [ 104.566424][ T7566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.566440][ T7566] RSP: 002b:00007fceebeef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.566458][ T7566] RAX: ffffffffffffffda RBX: 00007fceed6b5fa0 RCX: 00007fceed48ebe9 [ 104.566470][ T7566] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 104.566516][ T7566] RBP: 00007fceebeef090 R08: 0000000000000000 R09: 0000000000000000 [ 104.566527][ T7566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.566538][ T7566] R13: 00007fceed6b6038 R14: 00007fceed6b5fa0 R15: 00007ffd099ecbf8 [ 104.566612][ T7566] [ 104.833794][ T7576] bridge0: port 3(batadv0) entered blocking state [ 104.840356][ T7576] bridge0: port 3(batadv0) entered disabled state [ 104.846980][ T7576] batadv0: entered allmulticast mode [ 104.853185][ T7576] batadv0: entered promiscuous mode [ 105.045782][ T7592] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.097230][ T7595] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 105.117138][ T7598] loop2: detected capacity change from 0 to 512 [ 105.130031][ T7592] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.147875][ T7600] tipc: Enabling of bearer rejected, failed to enable media [ 105.170559][ T7592] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.189652][ T7602] netlink: '+}[@': attribute type 10 has an invalid length. [ 105.199131][ T7602] bond0: (slave dummy0): Releasing backup interface [ 105.209055][ T7602] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 105.217794][ T7602] team0: Failed to send options change via netlink (err -105) [ 105.225332][ T7602] team0: Port device dummy0 added [ 105.235952][ T7592] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.296146][ T4016] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.307555][ T4016] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.319481][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.330738][ T4016] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.343956][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 105.353352][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 105.370161][ T7604] loop2: detected capacity change from 0 to 512 [ 105.378200][ T7604] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.385198][ T7604] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1568: bg 0: block 248: padding at end of block bitmap is not set [ 105.399894][ T7604] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1568: Failed to acquire dquot type 1 [ 105.411952][ T7604] EXT4-fs (loop2): 1 truncate cleaned up [ 105.418471][ T7604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.433734][ T7604] FAULT_INJECTION: forcing a failure. [ 105.433734][ T7604] name failslab, interval 1, probability 0, space 0, times 0 [ 105.446548][ T7604] CPU: 0 UID: 0 PID: 7604 Comm: syz.2.1568 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.446576][ T7604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.446588][ T7604] Call Trace: [ 105.446596][ T7604] [ 105.446606][ T7604] __dump_stack+0x1d/0x30 [ 105.446631][ T7604] dump_stack_lvl+0xe8/0x140 [ 105.446703][ T7604] dump_stack+0x15/0x1b [ 105.446723][ T7604] should_fail_ex+0x265/0x280 [ 105.446748][ T7604] ? audit_log_d_path+0x8d/0x150 [ 105.446826][ T7604] should_failslab+0x8c/0xb0 [ 105.446880][ T7604] __kmalloc_cache_noprof+0x4c/0x320 [ 105.446960][ T7604] audit_log_d_path+0x8d/0x150 [ 105.446997][ T7604] audit_log_d_path_exe+0x42/0x70 [ 105.447036][ T7604] audit_log_task+0x1e9/0x250 [ 105.447145][ T7604] audit_seccomp+0x61/0x100 [ 105.447182][ T7604] ? __seccomp_filter+0x68c/0x10d0 [ 105.447211][ T7604] __seccomp_filter+0x69d/0x10d0 [ 105.447240][ T7604] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 105.447275][ T7604] ? vfs_write+0x7e8/0x960 [ 105.447337][ T7604] ? kmem_cache_free+0xdf/0x300 [ 105.447380][ T7604] __secure_computing+0x82/0x150 [ 105.447408][ T7604] syscall_trace_enter+0xcf/0x1e0 [ 105.447515][ T7604] do_syscall_64+0xac/0x200 [ 105.447542][ T7604] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.447569][ T7604] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.447602][ T7604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.447657][ T7604] RIP: 0033:0x7f6219a6ebe9 [ 105.447671][ T7604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.447689][ T7604] RSP: 002b:00007f62184cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 105.447790][ T7604] RAX: ffffffffffffffda RBX: 00007f6219c95fa0 RCX: 00007f6219a6ebe9 [ 105.447806][ T7604] RDX: 0000000000000000 RSI: 0000200000001040 RDI: 0000200000002000 [ 105.447822][ T7604] RBP: 00007f62184cf090 R08: 0000000000000000 R09: 0000000000000000 [ 105.447837][ T7604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.447912][ T7604] R13: 00007f6219c96038 R14: 00007f6219c95fa0 R15: 00007fff0fd981c8 [ 105.447938][ T7604] [ 105.719013][ T7604] syz.2.1568 (7604) used greatest stack depth: 9280 bytes left [ 105.726997][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.812418][ T7622] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7622 comm=syz.1.1574 [ 105.824925][ T7622] FAULT_INJECTION: forcing a failure. [ 105.824925][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 105.837614][ T7622] CPU: 1 UID: 0 PID: 7622 Comm: syz.1.1574 Not tainted syzkaller #0 PREEMPT(voluntary) [ 105.837650][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.837666][ T7622] Call Trace: [ 105.837675][ T7622] [ 105.837688][ T7622] __dump_stack+0x1d/0x30 [ 105.837710][ T7622] dump_stack_lvl+0xe8/0x140 [ 105.837800][ T7622] dump_stack+0x15/0x1b [ 105.837820][ T7622] should_fail_ex+0x265/0x280 [ 105.837846][ T7622] should_failslab+0x8c/0xb0 [ 105.837876][ T7622] kmem_cache_alloc_noprof+0x50/0x310 [ 105.837910][ T7622] ? skb_clone+0x151/0x1f0 [ 105.837985][ T7622] skb_clone+0x151/0x1f0 [ 105.838012][ T7622] __netlink_deliver_tap+0x2c9/0x500 [ 105.838040][ T7622] netlink_unicast+0x66b/0x690 [ 105.838222][ T7622] netlink_sendmsg+0x58b/0x6b0 [ 105.838292][ T7622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.838323][ T7622] __sock_sendmsg+0x145/0x180 [ 105.838355][ T7622] ____sys_sendmsg+0x31e/0x4e0 [ 105.838381][ T7622] ___sys_sendmsg+0x17b/0x1d0 [ 105.838422][ T7622] __x64_sys_sendmsg+0xd4/0x160 [ 105.838450][ T7622] x64_sys_call+0x191e/0x2ff0 [ 105.838472][ T7622] do_syscall_64+0xd2/0x200 [ 105.838518][ T7622] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.838543][ T7622] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.838632][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.838654][ T7622] RIP: 0033:0x7f6fc425ebe9 [ 105.838670][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.838690][ T7622] RSP: 002b:00007f6fc2cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 105.838710][ T7622] RAX: ffffffffffffffda RBX: 00007f6fc4485fa0 RCX: 00007f6fc425ebe9 [ 105.838842][ T7622] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 105.838855][ T7622] RBP: 00007f6fc2cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 105.838868][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.838881][ T7622] R13: 00007f6fc4486038 R14: 00007f6fc4485fa0 R15: 00007ffd875bb758 [ 105.838901][ T7622] [ 106.086036][ T7626] wireguard0: entered promiscuous mode [ 106.091882][ T7626] wireguard0: entered allmulticast mode [ 106.113200][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.125676][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.147581][ T7634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.156504][ T7634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.231213][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 106.231228][ T29] audit: type=1400 audit(1756423344.447:3916): avc: denied { setopt } for pid=7638 comm="syz.3.1581" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.232586][ T7639] msdos: Unknown parameter 'quota' [ 106.237570][ T29] audit: type=1400 audit(1756423344.447:3917): avc: denied { connect } for pid=7638 comm="syz.3.1581" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.283477][ T29] audit: type=1400 audit(1756423344.447:3918): avc: denied { create } for pid=7638 comm="syz.3.1581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 106.317089][ T7641] FAULT_INJECTION: forcing a failure. [ 106.317089][ T7641] name failslab, interval 1, probability 0, space 0, times 0 [ 106.329886][ T7641] CPU: 1 UID: 0 PID: 7641 Comm: syz.1.1582 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.330009][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.330025][ T7641] Call Trace: [ 106.330033][ T7641] [ 106.330043][ T7641] __dump_stack+0x1d/0x30 [ 106.330069][ T7641] dump_stack_lvl+0xe8/0x140 [ 106.330096][ T7641] dump_stack+0x15/0x1b [ 106.330171][ T7641] should_fail_ex+0x265/0x280 [ 106.330192][ T7641] ? alloc_fdtable+0x8c/0x1d0 [ 106.330234][ T7641] should_failslab+0x8c/0xb0 [ 106.330265][ T7641] __kmalloc_cache_noprof+0x4c/0x320 [ 106.330354][ T7641] alloc_fdtable+0x8c/0x1d0 [ 106.330376][ T7641] dup_fd+0x4c7/0x540 [ 106.330400][ T7641] copy_files+0x98/0xf0 [ 106.330473][ T7641] copy_process+0xc5b/0x2000 [ 106.330512][ T7641] kernel_clone+0x16c/0x5c0 [ 106.330540][ T7641] ? vfs_write+0x7e8/0x960 [ 106.330634][ T7641] __x64_sys_clone+0xe6/0x120 [ 106.330677][ T7641] x64_sys_call+0x119c/0x2ff0 [ 106.330700][ T7641] do_syscall_64+0xd2/0x200 [ 106.330726][ T7641] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.330808][ T7641] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.330832][ T7641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.330920][ T7641] RIP: 0033:0x7f6fc425ebe9 [ 106.330935][ T7641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.330987][ T7641] RSP: 002b:00007f6fc2cc6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 106.331011][ T7641] RAX: ffffffffffffffda RBX: 00007f6fc4485fa0 RCX: 00007f6fc425ebe9 [ 106.331026][ T7641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a000000 [ 106.331053][ T7641] RBP: 00007f6fc2cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.331102][ T7641] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 106.331115][ T7641] R13: 00007f6fc4486038 R14: 00007f6fc4485fa0 R15: 00007ffd875bb758 [ 106.331138][ T7641] [ 106.605874][ T7654] program syz.3.1583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.670630][ T7664] netlink: 'syz.1.1590': attribute type 10 has an invalid length. [ 106.725547][ T29] audit: type=1400 audit(1756423344.937:3919): avc: denied { kexec_image_load } for pid=7663 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 107.043538][ T7664] team0 (unregistering): Port device team_slave_0 removed [ 107.066801][ T7664] team0 (unregistering): Port device team_slave_1 removed [ 107.097108][ T29] audit: type=1400 audit(1756423344.967:3920): avc: denied { sqpoll } for pid=7663 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 107.138100][ T29] audit: type=1400 audit(1756423345.347:3921): avc: denied { append } for pid=7668 comm="syz.2.1591" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 107.203685][ T7681] __nla_validate_parse: 14 callbacks suppressed [ 107.203705][ T7681] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 107.407509][ T29] audit: type=1400 audit(1756423345.617:3922): avc: denied { prog_load } for pid=7692 comm="syz.3.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.426889][ T29] audit: type=1400 audit(1756423345.617:3923): avc: denied { bpf } for pid=7692 comm="syz.3.1599" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.451004][ T29] audit: type=1400 audit(1756423345.667:3924): avc: denied { perfmon } for pid=7684 comm="syz.1.1596" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.472021][ T29] audit: type=1400 audit(1756423345.667:3925): avc: denied { prog_run } for pid=7684 comm="syz.1.1596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.573340][ T7699] dns_resolver: Unsupported server list version (0) [ 107.596536][ T7705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.605370][ T7705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.612667][ T7707] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1604'. [ 107.663806][ T7714] netlink: '+}[@': attribute type 10 has an invalid length. [ 107.673238][ T7716] netlink: '+}[@': attribute type 10 has an invalid length. [ 107.681383][ T7714] bond0: (slave dummy0): Releasing backup interface [ 107.690959][ T7714] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 107.699937][ T7714] team0: Failed to send options change via netlink (err -105) [ 107.707533][ T7714] team0: Port device dummy0 added [ 107.971414][ T7730] netlink: 48 bytes leftover after parsing attributes in process `'. [ 108.024058][ T7731] block device autoloading is deprecated and will be removed. [ 108.227466][ T7736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1615'. [ 108.293258][ T7747] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1619'. [ 108.568372][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1620'. [ 108.785612][ T7767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.801564][ T7767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.827336][ T7771] netlink: 'syz.3.1628': attribute type 10 has an invalid length. [ 108.835296][ T7771] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1628'. [ 108.851296][ T7771] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 108.856000][ T7769] netlink: 48 bytes leftover after parsing attributes in process `'. [ 108.914518][ T7778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1630'. [ 108.955121][ T7781] loop0: detected capacity change from 0 to 2048 [ 108.999038][ T7781] loop0: p1 < > p4 [ 109.008570][ T7781] loop0: p4 size 8388608 extends beyond EOD, truncated [ 109.092717][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1634'. [ 109.360327][ T7809] netlink: 'syz.3.1640': attribute type 10 has an invalid length. [ 109.376000][ T7809] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 109.988766][ T7833] program syz.4.1648 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.513585][ T7862] tmpfs: Unknown parameter 'quota' [ 110.628369][ T7872] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 110.634954][ T7872] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 110.643209][ T7872] vhci_hcd vhci_hcd.0: Device attached [ 110.972346][ T7873] vhci_hcd: connection closed [ 110.983481][ T4016] vhci_hcd: stop threads [ 110.992549][ T4016] vhci_hcd: release socket [ 110.997079][ T4016] vhci_hcd: disconnect device [ 111.063050][ T7896] team0: Port device dummy0 removed [ 111.138690][ T7896] bond0: (slave bond_slave_0): Releasing backup interface [ 111.242608][ T7896] bond0: (slave bond_slave_1): Releasing backup interface [ 111.268951][ T7896] team0: Port device team_slave_0 removed [ 111.277919][ T7896] team0: Port device team_slave_1 removed [ 111.284957][ T7896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.292479][ T7896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.304651][ T7896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.312169][ T7896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.345573][ T7897] team0: Mode changed to "activebackup" [ 111.558763][ T7907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.608472][ T7907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.642542][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 111.642560][ T29] audit: type=1326 audit(1756423349.857:4073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7914 comm="syz.0.1680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09d2bcebe9 code=0x0 [ 111.706888][ T29] audit: type=1400 audit(1756423349.917:4074): avc: denied { nlmsg_read } for pid=7918 comm="syz.4.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.735080][ T29] audit: type=1400 audit(1756423349.917:4075): avc: denied { read } for pid=7918 comm="syz.4.1682" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.797298][ T29] audit: type=1400 audit(1756423350.007:4076): avc: denied { read } for pid=7921 comm="syz.2.1683" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 111.820269][ T29] audit: type=1400 audit(1756423350.007:4077): avc: denied { open } for pid=7921 comm="syz.2.1683" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 111.990966][ T7923] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.159384][ T29] audit: type=1400 audit(1756423350.377:4078): avc: denied { create } for pid=7914 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 112.230282][ T29] audit: type=1400 audit(1756423350.427:4079): avc: denied { connect } for pid=7914 comm="syz.0.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 112.250409][ T29] audit: type=1400 audit(1756423350.427:4080): avc: denied { write } for pid=7914 comm="syz.0.1680" path="socket:[24456]" dev="sockfs" ino=24456 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 112.444268][ T7939] __nla_validate_parse: 4 callbacks suppressed [ 112.444285][ T7939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1684'. [ 112.904278][ T7948] program syz.2.1690 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.965143][ T7950] syzkaller1: entered promiscuous mode [ 112.970751][ T7950] syzkaller1: entered allmulticast mode [ 113.219235][ T7954] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 113.225815][ T7954] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 113.233979][ T7954] vhci_hcd vhci_hcd.0: Device attached [ 113.383738][ T29] audit: type=1400 audit(1756423351.597:4081): avc: denied { create } for pid=7959 comm="syz.2.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 113.407152][ T7961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1693'. [ 113.468335][ T29] audit: type=1400 audit(1756423351.617:4082): avc: denied { connect } for pid=7957 comm="syz.0.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 113.548341][ T5847] usb 10-1: SetAddress Request (3) to port 0 [ 113.554490][ T5847] usb 10-1: new SuperSpeed USB device number 3 using vhci_hcd [ 113.609474][ T7955] vhci_hcd: connection reset by peer [ 113.635477][ T7968] bridge0: entered allmulticast mode [ 113.644714][ T7968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1696'. [ 113.705764][ T1594] vhci_hcd: stop threads [ 113.710099][ T1594] vhci_hcd: release socket [ 113.711584][ T7968] batadv6: left allmulticast mode [ 113.714594][ T1594] vhci_hcd: disconnect device [ 113.724382][ T7968] batadv6: left promiscuous mode [ 113.729512][ T7968] bridge0: port 8(batadv6) entered disabled state [ 113.746375][ T7968] batadv5: left allmulticast mode [ 113.751533][ T7968] batadv5: left promiscuous mode [ 113.756672][ T7968] bridge0: port 7(batadv5) entered disabled state [ 113.764974][ T7968] batadv4: left allmulticast mode [ 113.770093][ T7968] batadv4: left promiscuous mode [ 113.775222][ T7968] bridge0: port 6(batadv4) entered disabled state [ 113.808912][ T7968] batadv3: left allmulticast mode [ 113.814014][ T7968] batadv3: left promiscuous mode [ 113.819261][ T7968] bridge0: port 5(batadv3) entered disabled state [ 113.832126][ T7968] batadv2: left allmulticast mode [ 113.837235][ T7968] batadv2: left promiscuous mode [ 113.842403][ T7968] bridge0: port 4(batadv2) entered disabled state [ 113.863010][ T7968] batadv1: left allmulticast mode [ 113.868120][ T7968] batadv1: left promiscuous mode [ 113.873226][ T7968] bridge0: port 3(batadv1) entered disabled state [ 113.895048][ T7968] bridge_slave_1: left allmulticast mode [ 113.900843][ T7968] bridge_slave_1: left promiscuous mode [ 113.906497][ T7968] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.932038][ T7968] bridge_slave_0: left promiscuous mode [ 113.937753][ T7968] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.994036][ T7968] bridge0 (unregistering): left allmulticast mode [ 114.235835][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.296314][ T7984] 9pnet_virtio: no channels available for device syz [ 114.329906][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.084358][ T7998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.146567][ T7998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.260010][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.323843][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.362797][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.371502][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.908369][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 116.908386][ T29] audit: type=1400 audit(1756423355.117:4102): avc: denied { name_connect } for pid=8061 comm="syz.3.1725" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 118.047044][ T29] audit: type=1400 audit(1756423356.157:4103): avc: denied { read write } for pid=8068 comm="syz.3.1727" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 118.070698][ T29] audit: type=1400 audit(1756423356.157:4104): avc: denied { open } for pid=8068 comm="syz.3.1727" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 118.319010][ T8077] batman_adv: batadv0: Adding interface: dummy0 [ 118.325330][ T8077] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.350692][ T8077] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 118.367626][ T29] audit: type=1400 audit(1756423356.577:4105): avc: denied { ioctl } for pid=8074 comm="syz.0.1730" path="socket:[25195]" dev="sockfs" ino=25195 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 118.376911][ T8077] netlink: 'syz.0.1730': attribute type 10 has an invalid length. [ 118.416812][ T8085] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1732'. [ 118.429512][ T8077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.461217][ T8077] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 118.493794][ T29] audit: type=1400 audit(1756423356.707:4106): avc: denied { bind } for pid=8087 comm="syz.1.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.515094][ T29] audit: type=1400 audit(1756423356.737:4107): avc: denied { write } for pid=8087 comm="syz.1.1735" path="socket:[25958]" dev="sockfs" ino=25958 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.546184][ T8093] loop2: detected capacity change from 0 to 512 [ 118.557796][ T8093] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 118.578832][ T29] audit: type=1400 audit(1756423356.757:4108): avc: denied { read write } for pid=8092 comm="syz.2.1737" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 118.603195][ T29] audit: type=1400 audit(1756423356.757:4109): avc: denied { open } for pid=8092 comm="syz.2.1737" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 118.605672][ T8093] EXT4-fs (loop2): 1 truncate cleaned up [ 118.636508][ T8093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.654502][ T5847] usb 10-1: device descriptor read/8, error -110 [ 118.662973][ T29] audit: type=1400 audit(1756423356.867:4110): avc: denied { mount } for pid=8092 comm="syz.2.1737" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 118.713985][ T29] audit: type=1400 audit(1756423356.927:4111): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 118.715264][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.854046][ T8120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1747'. [ 118.863319][ T5847] usb 10-1: new SuperSpeed USB device number 3 using vhci_hcd [ 118.888332][ T5847] usb 10-1: enqueue for inactive port 0 [ 118.893962][ T5847] usb 10-1: enqueue for inactive port 0 [ 118.918309][ T5847] usb 10-1: enqueue for inactive port 0 [ 119.180827][ T8136] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 119.187384][ T8136] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 119.195568][ T8136] vhci_hcd vhci_hcd.0: Device attached [ 119.387538][ T8137] vhci_hcd: connection closed [ 119.387858][ T3451] vhci_hcd: stop threads [ 119.396890][ T3451] vhci_hcd: release socket [ 119.401399][ T3451] vhci_hcd: disconnect device [ 120.057076][ T8156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1758'. [ 120.078556][ T5847] usb usb10-port1: attempt power cycle [ 120.166022][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.184337][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.291921][ T8170] usb usb7: usbfs: process 8170 (syz.3.1762) did not claim interface 0 before use [ 120.634424][ T8187] netlink: 'syz.1.1768': attribute type 10 has an invalid length. [ 120.663046][ T8187] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 120.747076][ T8190] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1769'. [ 120.859907][ T8203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.880773][ T8203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.206614][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1786'. [ 121.298559][ T8241] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 121.305137][ T8241] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 121.313305][ T8241] vhci_hcd vhci_hcd.0: Device attached [ 121.629161][ T8256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.653105][ T8256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.868818][ T8242] vhci_hcd: connection closed [ 121.869347][ T311] vhci_hcd: stop threads [ 121.878504][ T311] vhci_hcd: release socket [ 121.883069][ T311] vhci_hcd: disconnect device [ 121.913198][ T5847] usb usb10-port1: unable to enumerate USB device [ 121.958834][ T8264] syzkaller0: entered promiscuous mode [ 121.964452][ T8264] syzkaller0: entered allmulticast mode [ 122.215711][ T8276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1800'. [ 122.597046][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 122.597066][ T29] audit: type=1400 audit(1756423360.807:4141): avc: denied { create } for pid=8290 comm="syz.1.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.622736][ T29] audit: type=1400 audit(1756423360.807:4142): avc: denied { setopt } for pid=8290 comm="syz.1.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 122.642174][ T29] audit: type=1400 audit(1756423360.807:4143): avc: denied { write } for pid=8290 comm="syz.1.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 122.877893][ T8300] lo speed is unknown, defaulting to 1000 [ 122.883781][ T8300] lo speed is unknown, defaulting to 1000 [ 122.890080][ T8300] lo speed is unknown, defaulting to 1000 [ 122.896473][ T8300] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.904473][ T8300] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 122.920752][ T8300] lo speed is unknown, defaulting to 1000 [ 122.927004][ T8300] lo speed is unknown, defaulting to 1000 [ 122.933179][ T8300] lo speed is unknown, defaulting to 1000 [ 122.939350][ T8300] lo speed is unknown, defaulting to 1000 [ 122.945301][ T8300] lo speed is unknown, defaulting to 1000 [ 122.951679][ T8300] lo speed is unknown, defaulting to 1000 [ 122.996530][ T29] audit: type=1400 audit(1756423360.887:4144): avc: denied { connect } for pid=8290 comm="syz.1.1805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 123.016183][ T29] audit: type=1400 audit(1756423360.937:4145): avc: denied { read } for pid=8290 comm="syz.1.1805" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 123.078114][ T8307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.166326][ T8307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.322362][ T8316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.342641][ T29] audit: type=1400 audit(1756423361.557:4146): avc: denied { create } for pid=8317 comm="syz.1.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.347552][ T8318] syz_tun: entered allmulticast mode [ 123.376250][ T8316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.384223][ T29] audit: type=1400 audit(1756423361.557:4147): avc: denied { bind } for pid=8317 comm="syz.1.1813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.403743][ T29] audit: type=1326 audit(1756423361.557:4148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8317 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc425ebe9 code=0x7ffc0000 [ 123.427255][ T29] audit: type=1326 audit(1756423361.557:4149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8317 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6fc4260b07 code=0x7ffc0000 [ 123.450772][ T29] audit: type=1326 audit(1756423361.557:4150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8317 comm="syz.1.1813" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc425ebe9 code=0x7ffc0000 [ 123.610903][ T8327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1816'. [ 123.625695][ T8327] smc: net device bond0 applied user defined pnetid SYZ0 [ 123.688084][ T8335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1820'. [ 123.970214][ T8352] syzkaller1: entered promiscuous mode [ 123.975865][ T8352] syzkaller1: entered allmulticast mode [ 124.158204][ T8354] futex_wake_op: syz.0.1827 tries to shift op by -1; fix this program [ 124.391604][ T8384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1837'. [ 124.648594][ T8397] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 124.655387][ T8397] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 124.663529][ T8397] vhci_hcd vhci_hcd.0: Device attached [ 125.304416][ T8398] vhci_hcd: connection closed [ 125.308476][ T4016] vhci_hcd: stop threads [ 125.317475][ T4016] vhci_hcd: release socket [ 125.322021][ T4016] vhci_hcd: disconnect device [ 125.368324][ T5847] usb 6-1: enqueue for inactive port 0 [ 125.578363][ T5847] usb 6-1: enqueue for inactive port 0 [ 125.634510][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1849'. [ 126.576017][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1862'. [ 126.585161][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1862'. [ 126.709084][ T5847] usb usb6-port1: attempt power cycle [ 126.714913][ T8461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.760506][ T8461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1864'. [ 126.769541][ T8461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1864'. [ 126.867254][ T8483] netlink: 'syz.4.1873': attribute type 4 has an invalid length. [ 127.060189][ T8490] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.1875' sets config #2 [ 127.229909][ T8507] tipc: Enabling of bearer rejected, failed to enable media [ 127.244730][ T8509] netlink: 'syz.0.1883': attribute type 10 has an invalid length. [ 127.252724][ T8509] batman_adv: batadv0: Removing interface: dummy0 [ 127.270706][ T8509] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 127.272231][ T8510] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1871'. [ 127.359722][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1885'. [ 127.385057][ T8521] IPVS: Error joining to the multicast group [ 128.249979][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 128.249997][ T29] audit: type=1400 audit(1756423366.467:4349): avc: denied { listen } for pid=8554 comm="syz.2.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.275977][ T29] audit: type=1400 audit(1756423366.467:4350): avc: denied { accept } for pid=8554 comm="syz.2.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.391426][ T29] audit: type=1400 audit(1756423366.557:4351): avc: denied { connect } for pid=8554 comm="syz.2.1896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.947478][ T8565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1897'. [ 128.947725][ T5847] usb usb6-port1: unable to enumerate USB device [ 128.956546][ T8565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1897'. [ 129.102390][ T8579] netlink: 'syz.4.1902': attribute type 4 has an invalid length. [ 129.359814][ T8577] wireguard0: entered promiscuous mode [ 129.365339][ T8577] wireguard0: entered allmulticast mode [ 129.412736][ T29] audit: type=1400 audit(1756423367.627:4352): avc: denied { read } for pid=8584 comm="syz.4.1905" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 129.435972][ T29] audit: type=1400 audit(1756423367.627:4353): avc: denied { open } for pid=8584 comm="syz.4.1905" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 129.938896][ T8593] serio: Serial port ptm0 [ 130.005913][ T8596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.094950][ T8601] tipc: Started in network mode [ 130.098382][ T29] audit: type=1400 audit(1756423368.307:4354): avc: denied { bind } for pid=8599 comm="syz.0.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 130.099900][ T8601] tipc: Node identity 7, cluster identity 4711 [ 130.125402][ T8601] tipc: Node number set to 7 [ 130.195572][ T8602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1908'. [ 130.204737][ T8602] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1908'. [ 130.301543][ T29] audit: type=1400 audit(1756423368.517:4355): avc: denied { create } for pid=8620 comm="syz.0.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 130.326327][ T8622] 9pnet_virtio: no channels available for device syz [ 130.423948][ T8627] random: crng reseeded on system resumption [ 130.430547][ T29] audit: type=1400 audit(1756423368.637:4356): avc: denied { append } for pid=8626 comm="syz.1.1919" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.453982][ T29] audit: type=1400 audit(1756423368.637:4357): avc: denied { open } for pid=8626 comm="syz.1.1919" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.494813][ T8625] syzkaller0: entered promiscuous mode [ 131.001105][ T29] audit: type=1400 audit(1756423369.207:4358): avc: denied { mount } for pid=8644 comm="syz.1.1925" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 131.423199][ T8657] netlink: 'syz.0.1929': attribute type 5 has an invalid length. [ 131.700059][ T8666] serio: Serial port ptm0 [ 132.399890][ T8691] hub 2-0:1.0: USB hub found [ 132.489930][ T8691] hub 2-0:1.0: 8 ports detected [ 133.113831][ T8702] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1941'. [ 133.123089][ T8702] bond_slave_0: entered promiscuous mode [ 133.128822][ T8702] bond_slave_1: entered promiscuous mode [ 133.615404][ T8711] netlink: 'syz.1.1944': attribute type 5 has an invalid length. [ 133.827826][ T8720] loop0: detected capacity change from 0 to 1024 [ 133.869498][ T8720] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.886767][ T8720] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.928235][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 133.934373][ T29] audit: type=1400 audit(1756423372.137:4365): avc: denied { add_name } for pid=8718 comm="syz.0.1948" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.955324][ T29] audit: type=1400 audit(1756423372.137:4366): avc: denied { create } for pid=8718 comm="syz.0.1948" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 133.981745][ T29] audit: type=1400 audit(1756423372.197:4367): avc: denied { read write } for pid=8718 comm="syz.0.1948" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.004514][ T29] audit: type=1400 audit(1756423372.197:4368): avc: denied { open } for pid=8718 comm="syz.0.1948" path="/403/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.042233][ T8720] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 134.060757][ T8720] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 134.073242][ T8720] EXT4-fs (loop0): This should not happen!! Data will be lost [ 134.073242][ T8720] [ 134.083126][ T8720] EXT4-fs (loop0): Total free blocks count 0 [ 134.089207][ T8720] EXT4-fs (loop0): Free/Dirty block details [ 134.095145][ T8720] EXT4-fs (loop0): free_blocks=4293918720 [ 134.101090][ T8720] EXT4-fs (loop0): dirty_blocks=64 [ 134.106269][ T8720] EXT4-fs (loop0): Block reservation details [ 134.112340][ T8720] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 134.120810][ T8736] block device autoloading is deprecated and will be removed. [ 134.133669][ T29] audit: type=1400 audit(1756423372.347:4369): avc: denied { write } for pid=8734 comm="syz.2.1953" path="socket:[27864]" dev="sockfs" ino=27864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 134.192074][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.313848][ T8749] loop0: detected capacity change from 0 to 1024 [ 134.321322][ T8749] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.340421][ T8749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.385562][ T29] audit: type=1400 audit(1756423372.587:4370): avc: denied { map } for pid=8748 comm="syz.0.1958" path="/405/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.408754][ T29] audit: type=1400 audit(1756423372.587:4371): avc: denied { execute } for pid=8748 comm="syz.0.1958" path="/405/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.612688][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.655245][ T8757] netlink: 'syz.4.1960': attribute type 5 has an invalid length. [ 134.827048][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.861667][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.884217][ T8321] syz_tun: left allmulticast mode [ 134.939111][ T8769] loop0: detected capacity change from 0 to 2048 [ 134.967082][ T8769] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.988171][ T29] audit: type=1400 audit(1756423373.197:4372): avc: denied { write open } for pid=8768 comm="syz.0.1965" path="/408/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 135.028598][ T29] audit: type=1400 audit(1756423373.237:4373): avc: denied { mounton } for pid=8768 comm="syz.0.1965" path="/408/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 135.075279][ T29] audit: type=1400 audit(1756423373.287:4374): avc: denied { create } for pid=8778 comm="syz.2.1969" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_socket permissive=1 [ 135.164747][ T8787] loop2: detected capacity change from 0 to 256 [ 135.267939][ T8805] loop2: detected capacity change from 0 to 256 [ 135.275472][ T8805] vfat: Bad value for 'fmask' [ 135.310322][ T8788] lo speed is unknown, defaulting to 1000 [ 135.511683][ T8812] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1980'. [ 135.520719][ T8812] netlink: 'syz.2.1980': attribute type 1 has an invalid length. [ 135.998995][ T3307] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 136.005304][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.487112][ T8788] chnl_net:caif_netlink_parms(): no params data found [ 136.555475][ T8829] loop4: detected capacity change from 0 to 512 [ 136.568592][ T8829] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.581535][ T8829] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.1986: bad orphan inode 16 [ 136.581729][ T8829] ext4_test_bit(bit=15, block=4) = 0 [ 136.581743][ T8829] EXT4-fs (loop4): 1 orphan inode deleted [ 136.582097][ T8829] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.603348][ T52] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.615114][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.615186][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.615276][ T8788] bridge_slave_0: entered allmulticast mode [ 136.615906][ T8788] bridge_slave_0: entered promiscuous mode [ 136.629975][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.630057][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.630219][ T8788] bridge_slave_1: entered allmulticast mode [ 136.630846][ T8788] bridge_slave_1: entered promiscuous mode [ 136.637621][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.688753][ T52] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.692724][ T8788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.694193][ T8788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.729067][ T8788] team0: Port device team_slave_0 added [ 136.924604][ T52] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.288784][ T52] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.377582][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1993'. [ 138.094482][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.116049][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.126308][ T52] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 138.138519][ T52] bond0 (unregistering): Released all slaves [ 138.151840][ T8788] team0: Port device team_slave_1 added [ 138.165625][ T8852] netlink: 'syz.4.1993': attribute type 12 has an invalid length. [ 138.266315][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.273487][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.299601][ T8788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.314651][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.321696][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.347823][ T8788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.383439][ T52] hsr_slave_0: left promiscuous mode [ 138.424069][ T52] hsr_slave_1: left promiscuous mode [ 138.429747][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.437176][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.491416][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.499005][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.570750][ T52] veth1_macvtap: left promiscuous mode [ 138.580156][ T52] veth0_macvtap: left promiscuous mode [ 139.556341][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 139.556362][ T29] audit: type=1400 audit(1756423377.467:4394): avc: denied { getopt } for pid=8895 comm="syz.3.2005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 140.043146][ T8788] hsr_slave_0: entered promiscuous mode [ 140.049113][ T8911] loop2: detected capacity change from 0 to 7 [ 140.058214][ T8788] hsr_slave_1: entered promiscuous mode [ 140.067411][ T8788] debugfs: 'hsr0' already exists in 'hsr' [ 140.073283][ T8788] Cannot create hsr debugfs directory [ 140.078919][ T3382] lo speed is unknown, defaulting to 1000 [ 140.084720][ T3382] infiniband syz0: ib_query_port failed (-19) [ 140.122891][ T8914] netlink: '+}[@': attribute type 10 has an invalid length. [ 140.154349][ T8914] netlink: '+}[@': attribute type 10 has an invalid length. [ 140.172193][ T8914] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 140.183140][ T8914] team0: Port device dummy0 removed [ 140.190019][ T8914] dummy0: entered promiscuous mode [ 140.195253][ T8927] loop0: detected capacity change from 0 to 128 [ 140.196172][ T8914] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 140.213583][ T8928] syzkaller1: entered promiscuous mode [ 140.219119][ T8928] syzkaller1: entered allmulticast mode [ 140.247234][ T8931] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.2017' sets config #4 [ 140.279636][ T8934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.289016][ T8934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.301112][ T29] audit: type=1400 audit(1756423378.507:4395): avc: denied { read } for pid=8933 comm="syz.0.2018" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 140.324228][ T29] audit: type=1400 audit(1756423378.507:4396): avc: denied { open } for pid=8933 comm="syz.0.2018" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 140.347686][ T29] audit: type=1400 audit(1756423378.507:4397): avc: denied { ioctl } for pid=8933 comm="syz.0.2018" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x2103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 140.652668][ T8788] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 140.661563][ T8788] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 140.670822][ T8788] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 140.679951][ T8788] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 140.716981][ T8788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.729544][ T8788] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.739092][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.746316][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.757568][ T1594] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.764745][ T1594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.829493][ T8788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.895167][ T8788] veth0_vlan: entered promiscuous mode [ 140.903225][ T8788] veth1_vlan: entered promiscuous mode [ 140.918816][ T8788] veth0_macvtap: entered promiscuous mode [ 140.926185][ T8788] veth1_macvtap: entered promiscuous mode [ 140.937572][ T8788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.949449][ T8788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.960829][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.969940][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.979249][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.988005][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.020194][ T29] audit: type=1400 audit(1756423379.227:4398): avc: denied { mounton } for pid=8788 comm="syz-executor" path="/root/syzkaller.ybAJGZ/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 141.044836][ T29] audit: type=1400 audit(1756423379.227:4399): avc: denied { mount } for pid=8788 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 141.067319][ T29] audit: type=1400 audit(1756423379.227:4400): avc: denied { mount } for pid=8788 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 141.089418][ T29] audit: type=1400 audit(1756423379.227:4401): avc: denied { mounton } for pid=8788 comm="syz-executor" path="/root/syzkaller.ybAJGZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 141.116200][ T29] audit: type=1400 audit(1756423379.227:4402): avc: denied { mounton } for pid=8788 comm="syz-executor" path="/root/syzkaller.ybAJGZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=28660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 141.155391][ T29] audit: type=1400 audit(1756423379.237:4403): avc: denied { mounton } for pid=8788 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 141.517086][ T8990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2031'. [ 141.811086][ T9001] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2035'. [ 141.925694][ T9013] serio: Serial port ptm0 [ 142.040458][ T9023] loop4: detected capacity change from 0 to 128 [ 142.175620][ T9043] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 142.192232][ T9023] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.205962][ T9043] SELinux: failed to load policy [ 142.286064][ T9023] ext4 filesystem being mounted at /392/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.485785][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.525973][ T9051] loop2: detected capacity change from 0 to 128 [ 142.663983][ T9051] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 142.688031][ T9051] ext4 filesystem being mounted at /353/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.758557][ T9060] tracefs: Unknown parameter 'DŒ ' [ 143.129358][ T9062] loop4: detected capacity change from 0 to 512 [ 143.169665][ T9062] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 143.177701][ T9062] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 143.189393][ T9062] System zones: 0-1, 15-15, 18-18, 34-34 [ 143.195284][ T9062] EXT4-fs (loop4): orphan cleanup on readonly fs [ 143.203214][ T9062] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 143.217896][ T9062] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 143.236459][ T3301] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.238338][ T9062] EXT4-fs (loop4): 1 truncate cleaned up [ 143.251446][ T9062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.506380][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.558734][ T29] kauditd_printk_skb: 643 callbacks suppressed [ 144.558752][ T29] audit: type=1326 audit(1756423382.777:5046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.1.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05ad91ade9 code=0x7ffc0000 [ 144.598330][ T29] audit: type=1326 audit(1756423382.807:5047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.1.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05ad91ade9 code=0x7ffc0000 [ 144.621787][ T29] audit: type=1326 audit(1756423382.807:5048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.1.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05ad91ade9 code=0x7ffc0000 [ 144.645411][ T29] audit: type=1326 audit(1756423382.807:5049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.1.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05ad91ade9 code=0x7ffc0000 [ 144.669100][ T29] audit: type=1326 audit(1756423382.807:5050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.1.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05ad91ade9 code=0x7ffc0000 [ 144.692532][ T29] audit: type=1326 audit(1756423382.807:5051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.1.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05ad91ade9 code=0x7ffc0000 [ 144.716006][ T29] audit: type=1326 audit(1756423382.807:5052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.1.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05ad91ade9 code=0x7ffc0000 [ 144.739473][ T29] audit: type=1326 audit(1756423382.807:5053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.1.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05ad91ade9 code=0x7ffc0000 [ 144.762912][ T29] audit: type=1326 audit(1756423382.807:5054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.1.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05ad91ade9 code=0x7ffc0000 [ 144.786318][ T29] audit: type=1326 audit(1756423382.807:5055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9069 comm="syz.1.2062" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05ad91ade9 code=0x7ffc0000 [ 144.857323][ T9096] loop4: detected capacity change from 0 to 128 [ 144.886947][ T9096] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.920230][ T9096] ext4 filesystem being mounted at /394/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.984899][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.040373][ T9107] 9pnet_fd: Insufficient options for proto=fd [ 146.176177][ T9133] loop2: detected capacity change from 0 to 2048 [ 146.237347][ T9133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.340231][ T9146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2089'. [ 146.351412][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.423223][ T9155] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.470523][ T9155] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.548712][ T9158] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 146.575986][ T9156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 146.598957][ T9155] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.618078][ T9166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2092'. [ 146.627295][ T9166] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2092'. [ 146.692375][ T9155] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.801628][ T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.838898][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.860908][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.876788][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.908689][ T9179] loop2: detected capacity change from 0 to 7 [ 147.212482][ T9194] netlink: '+}[@': attribute type 10 has an invalid length. [ 147.233916][ T9194] netlink: '+}[@': attribute type 10 has an invalid length. [ 147.258834][ T9194] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 147.267772][ T9194] team0: Port device dummy0 removed [ 147.290527][ T9194] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 147.311814][ T9197] syzkaller1: entered promiscuous mode [ 147.317361][ T9197] syzkaller1: entered allmulticast mode [ 147.426406][ T9209] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2116'. [ 147.446540][ T9209] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 147.570274][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2126'. [ 147.579432][ T9230] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2126'. [ 147.711437][ T9228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.712083][ T9235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2122'. [ 147.736153][ T9235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2122'. [ 148.382192][ T9272] loop0: detected capacity change from 0 to 2048 [ 148.399894][ T9276] netlink: '+}[@': attribute type 10 has an invalid length. [ 148.420319][ T9281] bridge0: port 4(batadv1) entered blocking state [ 148.426896][ T9281] bridge0: port 4(batadv1) entered disabled state [ 148.433819][ T9281] batadv1: entered allmulticast mode [ 148.439857][ T9281] batadv1: entered promiscuous mode [ 148.459349][ T9276] team0: Port device dummy0 added [ 148.486118][ T9272] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.498837][ T9282] netlink: 'syz.1.2144': attribute type 10 has an invalid length. [ 148.509488][ T9282] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 148.526885][ T9272] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 148.545333][ T9282] team0: Failed to send options change via netlink (err -105) [ 148.565278][ T9282] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 148.602693][ T9282] team0: Port device dummy0 removed [ 148.617001][ T9282] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 148.626432][ T3307] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 148.674794][ T9276] syzkaller1: entered promiscuous mode [ 148.680401][ T9276] syzkaller1: entered allmulticast mode [ 148.775502][ T9310] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2158'. [ 148.825278][ T9310] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 148.918360][ T3451] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 148.927707][ T3451] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 149.361856][ T9340] bridge0: port 4(batadv2) entered blocking state [ 149.368469][ T9340] bridge0: port 4(batadv2) entered disabled state [ 149.393736][ T9340] batadv2: entered allmulticast mode [ 149.403337][ T9340] batadv2: entered promiscuous mode [ 149.882175][ T1594] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 149.891532][ T1594] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 149.981513][ T29] kauditd_printk_skb: 1212 callbacks suppressed [ 149.981557][ T29] audit: type=1400 audit(1756423388.197:6268): avc: denied { connect } for pid=9354 comm="syz.2.2177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 150.328344][ T29] audit: type=1400 audit(1756423388.537:6269): avc: denied { sqpoll } for pid=9351 comm="syz.4.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 150.480260][ T9381] loop0: detected capacity change from 0 to 512 [ 150.504511][ T9381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.517564][ T9381] ext4 filesystem being mounted at /459/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.538776][ T9381] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.2188: corrupted inode contents [ 150.563967][ T9381] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.2188: mark_inode_dirty error [ 150.581873][ T9381] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.2188: corrupted inode contents [ 150.604526][ T29] audit: type=1400 audit(1756423388.817:6270): avc: denied { setopt } for pid=9390 comm="syz.1.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.631508][ T9381] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.2188: mark_inode_dirty error [ 150.698513][ T29] audit: type=1400 audit(1756423388.817:6271): avc: denied { write } for pid=9390 comm="syz.1.2191" path="socket:[29389]" dev="sockfs" ino=29389 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 150.722123][ T29] audit: type=1400 audit(1756423388.907:6272): avc: denied { create } for pid=9378 comm="syz.0.2188" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 150.788918][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.796985][ T9409] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2193'. [ 150.876218][ T9414] loop4: detected capacity change from 0 to 2048 [ 150.947594][ T9414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.982788][ T9426] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.996037][ T9414] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 151.011137][ T9414] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 1 with error 28 [ 151.023480][ T9414] EXT4-fs (loop4): This should not happen!! Data will be lost [ 151.023480][ T9414] [ 151.033288][ T9414] EXT4-fs (loop4): Total free blocks count 0 [ 151.039356][ T9414] EXT4-fs (loop4): Free/Dirty block details [ 151.045290][ T9414] EXT4-fs (loop4): free_blocks=2415919504 [ 151.048832][ T9431] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 151.051175][ T9414] EXT4-fs (loop4): dirty_blocks=16 [ 151.061420][ T9432] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 151.065716][ T9414] EXT4-fs (loop4): Block reservation details [ 151.077903][ T9432] EXT4-fs (loop4): This should not happen!! Data will be lost [ 151.077903][ T9432] [ 151.083998][ T29] audit: type=1400 audit(1756423389.287:6273): avc: denied { ioctl } for pid=9413 comm="syz.4.2204" path="/425/file1/file1" dev="loop4" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 151.150315][ T9426] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.186579][ T29] audit: type=1400 audit(1756423389.397:6274): avc: denied { read } for pid=9437 comm="syz.3.2211" path="socket:[29454]" dev="sockfs" ino=29454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.249917][ T9426] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.266181][ T9445] 9pnet_fd: Insufficient options for proto=fd [ 151.280829][ T9448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.289556][ T9448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.310958][ T9426] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.345122][ T9454] netlink: '+}[@': attribute type 10 has an invalid length. [ 151.356359][ T9454] bond0: (slave dummy0): Releasing backup interface [ 151.373660][ T9454] team0: Failed to send options change via netlink (err -105) [ 151.381512][ T9454] team0: Port device dummy0 added [ 151.419974][ T3451] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.445914][ T3451] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.481306][ T3451] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.498522][ T3451] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.520985][ T29] audit: type=1400 audit(1756423389.737:6275): avc: denied { read append } for pid=9460 comm="syz.3.2221" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 151.545075][ T29] audit: type=1400 audit(1756423389.737:6276): avc: denied { open } for pid=9460 comm="syz.3.2221" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 151.572153][ T29] audit: type=1400 audit(1756423389.787:6277): avc: denied { map } for pid=9460 comm="syz.3.2221" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 151.857588][ T9491] loop0: detected capacity change from 0 to 512 [ 151.885571][ T9497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.894813][ T9497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.914471][ T9491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.954361][ T9491] ext4 filesystem being mounted at /468/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.984730][ T9513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.003289][ T9513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.034293][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.222944][ T9520] batadv_slave_0: entered promiscuous mode [ 152.228950][ T9520] batadv_slave_0: entered allmulticast mode [ 152.322171][ T9526] loop4: detected capacity change from 0 to 2048 [ 152.354648][ T9526] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.371094][ T9526] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.2250: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 152.380622][ T9540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.390938][ T9526] EXT4-fs (loop4): Remounting filesystem read-only [ 152.396216][ T9540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.427429][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.457172][ T9546] loop2: detected capacity change from 0 to 1024 [ 152.481022][ T9546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.496739][ T9546] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 152.514526][ T9546] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 152.526810][ T9546] EXT4-fs (loop2): This should not happen!! Data will be lost [ 152.526810][ T9546] [ 152.536542][ T9546] EXT4-fs (loop2): Total free blocks count 0 [ 152.542611][ T9546] EXT4-fs (loop2): Free/Dirty block details [ 152.548553][ T9546] EXT4-fs (loop2): free_blocks=68451041280 [ 152.554378][ T9546] EXT4-fs (loop2): dirty_blocks=16 [ 152.559633][ T9546] EXT4-fs (loop2): Block reservation details [ 152.565645][ T9546] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 152.602028][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.669293][ T9570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.678019][ T9570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.033784][ T9607] netlink: 'syz.3.2275': attribute type 1 has an invalid length. [ 154.019942][ T9649] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2302'. [ 154.513816][ T9702] usb usb7: usbfs: process 9702 (syz.3.2325) did not claim interface 0 before use [ 154.547759][ T9706] netlink: 'syz.3.2327': attribute type 5 has an invalid length. [ 154.680942][ T9720] futex_wake_op: syz.2.2334 tries to shift op by -1; fix this program [ 154.784506][ T9732] netlink: 'syz.3.2340': attribute type 5 has an invalid length. [ 155.379150][ T9750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2348'. [ 155.534447][ T9762] netlink: 'syz.3.2353': attribute type 5 has an invalid length. [ 155.605838][ T9768] loop2: detected capacity change from 0 to 512 [ 155.633771][ T9768] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 155.642924][ T9768] EXT4-fs (loop2): blocks per group (3008) and clusters per group (32768) inconsistent [ 155.962671][ T9782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2361'. [ 156.274561][ T9800] loop2: detected capacity change from 0 to 256 [ 156.281830][ T9800] vfat: Bad value for 'fmask' [ 156.376052][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2373'. [ 156.422388][ T9810] loop2: detected capacity change from 0 to 512 [ 156.527625][ T9819] netlink: 'syz.3.2368': attribute type 5 has an invalid length. [ 156.557084][ T9810] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.566290][ T9810] EXT4-fs (loop2): blocks per group (3008) and clusters per group (32768) inconsistent [ 157.118698][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 157.124926][ T29] audit: type=1400 audit(1756423395.237:6366): avc: denied { wake_alarm } for pid=9818 comm="syz.4.2379" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 157.441758][ T9852] netlink: 'syz.2.2390': attribute type 5 has an invalid length. [ 157.479516][ T9854] loop4: detected capacity change from 0 to 128 [ 157.540351][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.549329][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.643199][ T9881] netlink: 'syz.0.2404': attribute type 5 has an invalid length. [ 157.666503][ T9883] netlink: 'syz.1.2405': attribute type 3 has an invalid length. [ 157.674454][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2405'. [ 157.916413][ T9913] netlink: 'syz.4.2418': attribute type 5 has an invalid length. [ 157.958062][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2413'. [ 158.198649][ T9937] netlink: 'syz.3.2429': attribute type 5 has an invalid length. [ 158.267081][ T9940] bond0: (slave dummy0): Releasing backup interface [ 158.317936][ T9940] bridge_slave_0: left allmulticast mode [ 158.323811][ T9940] bridge_slave_0: left promiscuous mode [ 158.329604][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.371027][ T9940] bridge_slave_1: left allmulticast mode [ 158.376750][ T9940] bridge_slave_1: left promiscuous mode [ 158.382712][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.423735][ T9940] bond0: (slave bond_slave_0): Releasing backup interface [ 158.464725][ T9940] bond0: (slave bond_slave_1): Releasing backup interface [ 158.502639][ T9940] team0: Port device team_slave_0 removed [ 158.537955][ T9940] team0: Port device team_slave_1 removed [ 158.549568][ T9940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.557015][ T9940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.570783][ T9940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.578324][ T9940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.626376][ T9945] team0: Mode changed to "activebackup" [ 158.680073][ T9971] netlink: 'syz.1.2443': attribute type 5 has an invalid length. [ 158.720307][ T9977] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2446'. [ 158.759983][ T9985] loop0: detected capacity change from 0 to 512 [ 158.766852][ T9985] EXT4-fs: inline encryption not supported [ 158.791344][ T29] audit: type=1400 audit(1756423397.007:6367): avc: denied { read } for pid=9992 comm="syz.1.2453" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 158.805385][ T9985] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 158.815869][ T29] audit: type=1400 audit(1756423397.007:6368): avc: denied { open } for pid=9992 comm="syz.1.2453" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 158.850774][ T9995] bond0: (slave dummy0): Releasing backup interface [ 158.851409][ T29] audit: type=1400 audit(1756423397.067:6369): avc: denied { ioctl } for pid=9992 comm="syz.1.2453" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 158.889276][ T9995] dummy0: left promiscuous mode [ 158.894311][ T9985] EXT4-fs (loop0): 1 truncate cleaned up [ 158.900962][ T9985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.921171][ T9995] bridge_slave_0: left allmulticast mode [ 158.926870][ T9995] bridge_slave_0: left promiscuous mode [ 158.932872][ T9995] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.942151][ T9995] bridge_slave_1: left allmulticast mode [ 158.947928][ T9995] bridge_slave_1: left promiscuous mode [ 158.953748][ T9995] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.966013][ T9995] bond0: (slave bond_slave_0): Releasing backup interface [ 158.974187][ T9995] bond_slave_0: left promiscuous mode [ 158.981718][ T9995] bond0: (slave bond_slave_1): Releasing backup interface [ 158.990553][ T9995] bond_slave_1: left promiscuous mode [ 158.999719][ T9995] team0: Port device team_slave_0 removed [ 159.008628][ T9995] team0: Port device team_slave_1 removed [ 159.015427][ T9995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.023009][ T9995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.031717][ T9995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.039263][ T9995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.058556][ T9995] batadv1: left allmulticast mode [ 159.063613][ T9995] batadv1: left promiscuous mode [ 159.068819][ T9995] bridge0: port 3(batadv1) entered disabled state [ 159.076325][ T9995] batadv2: left allmulticast mode [ 159.081465][ T9995] batadv2: left promiscuous mode [ 159.086579][ T9995] bridge0: port 4(batadv2) entered disabled state [ 159.095110][ T9999] team0: Mode changed to "activebackup" [ 159.114406][T10005] syzkaller1: entered promiscuous mode [ 159.120271][T10005] syzkaller1: entered allmulticast mode [ 159.208028][T10022] loop4: detected capacity change from 0 to 164 [ 159.215559][T10022] Unable to read rock-ridge attributes [ 159.227637][ T29] audit: type=1400 audit(1756423397.447:6370): avc: denied { mount } for pid=10020 comm="syz.4.2463" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 159.288559][T10033] loop4: detected capacity change from 0 to 512 [ 159.295610][T10035] netlink: 'syz.1.2470': attribute type 5 has an invalid length. [ 159.303742][ T29] audit: type=1400 audit(1756423397.487:6371): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 159.325271][T10033] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 159.342098][T10033] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.2469: bad orphan inode 15 [ 159.370409][T10033] ext4_test_bit(bit=14, block=18) = 1 [ 159.375852][T10033] is_bad_inode(inode)=0 [ 159.380250][T10033] NEXT_ORPHAN(inode)=1023 [ 159.384647][T10033] max_ino=32 [ 159.387950][T10033] i_nlink=0 [ 159.409807][T10033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 159.424564][T10033] ext2 filesystem being mounted at /487/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 159.491866][ T3309] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /487/éq‰Y’3aK: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 159.516507][ T3309] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 159.538655][ T3309] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 159.608636][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.822419][T10063] syzkaller1: entered promiscuous mode [ 159.828009][T10063] syzkaller1: entered allmulticast mode [ 159.836885][T10065] netlink: 'syz.1.2484': attribute type 5 has an invalid length. [ 159.846579][T10049] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 159.859746][ T52] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.920982][ T52] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.980914][ T52] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.050805][ T52] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.133098][ T52] batadv2: left allmulticast mode [ 160.138198][ T52] batadv2: left promiscuous mode [ 160.143326][ T52] bridge0: port 4(batadv2) entered disabled state [ 160.174304][ T52] batadv1: left allmulticast mode [ 160.179431][ T52] batadv1: left promiscuous mode [ 160.184503][ T52] bridge0: port 3(batadv1) entered disabled state [ 160.215620][ T52] bridge_slave_1: left allmulticast mode [ 160.221608][ T52] bridge_slave_1: left promiscuous mode [ 160.227378][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.252408][ T52] bridge_slave_0: left allmulticast mode [ 160.258113][ T52] bridge_slave_0: left promiscuous mode [ 160.263994][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.392871][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.415556][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.426749][ T52] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 160.437786][ T52] bond0 (unregistering): Released all slaves [ 160.448223][ T52] team0: Port device bond1 removed [ 160.456447][ T52] bond1 (unregistering): Released all slaves [ 160.467162][ T52] bond2 (unregistering): Released all slaves [ 160.527332][ T52] hsr_slave_0: left promiscuous mode [ 160.533191][ T52] hsr_slave_1: left promiscuous mode [ 160.539030][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.546431][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.555800][ T52] veth1_macvtap: left promiscuous mode [ 160.561787][ T52] veth0_macvtap: left promiscuous mode [ 160.659229][ T52] team0 (unregistering): Port device team_slave_1 removed [ 160.670131][ T52] team0 (unregistering): Port device team_slave_0 removed [ 160.757782][T10078] chnl_net:caif_netlink_parms(): no params data found [ 160.809882][T10078] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.817004][T10078] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.827712][T10078] bridge_slave_0: entered allmulticast mode [ 160.856398][T10078] bridge_slave_0: entered promiscuous mode [ 160.881939][T10078] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.889164][T10078] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.917844][T10078] bridge_slave_1: entered allmulticast mode [ 160.927934][T10078] bridge_slave_1: entered promiscuous mode [ 160.955691][T10078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.968932][T10078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.994066][T10078] team0: Port device team_slave_0 added [ 161.000687][T10078] team0: Port device team_slave_1 added [ 161.030566][T10078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.037615][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.063744][T10078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.086104][T10078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.093126][T10078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.119073][T10078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.259805][T10078] hsr_slave_0: entered promiscuous mode [ 161.315016][T10078] hsr_slave_1: entered promiscuous mode [ 161.617710][T10078] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 161.627149][T10078] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 161.636692][T10078] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 161.648234][T10078] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.679329][T10078] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.686561][T10078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.693957][T10078] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.701094][T10078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.734713][T10078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.747555][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.755889][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.892341][T10078] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.913120][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.920251][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.947245][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.954404][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.196387][T10218] loop0: detected capacity change from 0 to 512 [ 162.505818][T10078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.853518][T10078] veth0_vlan: entered promiscuous mode [ 162.862132][T10078] veth1_vlan: entered promiscuous mode [ 162.881631][T10078] veth0_macvtap: entered promiscuous mode [ 162.891533][T10078] veth1_macvtap: entered promiscuous mode [ 162.904291][T10078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.928027][T10078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.953725][ T311] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.992789][ T311] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.013832][ T311] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.042330][ T311] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.102293][T10252] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 163.109629][T10252] IPv6: NLM_F_CREATE should be set when creating new route [ 165.926646][T10492] 9pnet_fd: Insufficient options for proto=fd [ 166.020241][T10496] syzkaller0: entered promiscuous mode [ 166.025894][T10496] syzkaller0: entered allmulticast mode [ 166.163735][T10525] 9pnet_fd: Insufficient options for proto=fd [ 166.431102][T10551] 9pnet_fd: Insufficient options for proto=fd [ 166.604610][ T3451] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 64496 - 0 [ 166.614576][ T3451] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 166.680133][ T3451] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 64496 - 0 [ 166.690172][ T3451] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 166.780878][ T3451] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 64496 - 0 [ 166.790863][ T3451] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 166.899055][ T3451] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 64496 - 0 [ 166.909071][ T3451] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 167.300566][T10610] 9pnet_fd: Insufficient options for proto=fd [ 167.510887][ T3451] bond0 (unregistering): Released all slaves [ 167.530734][T10602] lo speed is unknown, defaulting to 1000 [ 167.530827][T10553] chnl_net:caif_netlink_parms(): no params data found [ 167.565847][T10611] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 167.572440][T10611] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 167.580603][T10611] vhci_hcd vhci_hcd.0: Device attached [ 167.586638][T10602] lo speed is unknown, defaulting to 1000 [ 167.592624][T10602] lo speed is unknown, defaulting to 1000 [ 167.599905][T10602] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 167.646847][T10602] lo speed is unknown, defaulting to 1000 [ 167.659365][T10602] lo speed is unknown, defaulting to 1000 [ 167.659453][T10553] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.672414][T10553] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.720510][T10553] bridge_slave_0: entered allmulticast mode [ 167.735378][T10553] bridge_slave_0: entered promiscuous mode [ 167.750234][T10602] lo speed is unknown, defaulting to 1000 [ 167.750521][T10553] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.763204][T10553] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.805082][T10553] bridge_slave_1: entered allmulticast mode [ 167.822682][T10650] 9pnet_fd: Insufficient options for proto=fd [ 167.823045][T10553] bridge_slave_1: entered promiscuous mode [ 167.840752][T10602] lo speed is unknown, defaulting to 1000 [ 167.846865][T10602] lo speed is unknown, defaulting to 1000 [ 167.868297][ T7262] usb 4-1: SetAddress Request (2) to port 0 [ 167.879722][T10602] lo speed is unknown, defaulting to 1000 [ 167.893782][T10553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.912836][ T3451] hsr_slave_0: left promiscuous mode [ 167.930775][ T3451] hsr_slave_1: left promiscuous mode [ 167.940967][ T7262] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 167.948750][ T3451] veth1_macvtap: left promiscuous mode [ 167.954344][ T3451] veth0_macvtap: left promiscuous mode [ 167.960048][ T3451] veth1_vlan: left promiscuous mode [ 167.965547][ T3451] veth0_vlan: left promiscuous mode [ 168.154782][ T3451] pim6reg (unregistering): left allmulticast mode [ 168.212356][ T3451] pimreg (unregistering): left allmulticast mode [ 168.406350][T10553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.422541][T10663] syzkaller1: entered promiscuous mode [ 168.428109][T10663] syzkaller1: entered allmulticast mode [ 168.476814][T10553] team0: Port device team_slave_0 added [ 168.500090][T10553] team0: Port device team_slave_1 added [ 168.501282][T10681] 9pnet_fd: Insufficient options for proto=fd [ 168.520287][T10626] vhci_hcd: connection reset by peer [ 168.526034][ T311] vhci_hcd: stop threads [ 168.530437][ T311] vhci_hcd: release socket [ 168.534906][ T311] vhci_hcd: disconnect device [ 168.580047][T10553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.587097][T10553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.613339][T10553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.658646][T10553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.665695][T10553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.692033][T10553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.736994][T10553] hsr_slave_0: entered promiscuous mode [ 168.745194][T10553] hsr_slave_1: entered promiscuous mode [ 168.751400][T10553] debugfs: 'hsr0' already exists in 'hsr' [ 168.757210][T10553] Cannot create hsr debugfs directory [ 168.767292][T10701] syzkaller1: entered promiscuous mode [ 168.773178][T10701] syzkaller1: entered allmulticast mode [ 168.798839][T10707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2736'. [ 168.984356][T10730] syzkaller1: entered promiscuous mode [ 168.989930][T10730] syzkaller1: entered allmulticast mode [ 169.156459][T10553] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.187870][T10553] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.205288][T10764] syzkaller1: entered promiscuous mode [ 169.210974][T10764] syzkaller1: entered allmulticast mode [ 169.238900][T10553] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.256872][T10553] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.377076][T10553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.410110][T10553] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.434386][T10804] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2780'. [ 169.459958][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.467112][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.487666][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.495396][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.515567][T10553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.539912][T10810] syzkaller1: entered promiscuous mode [ 169.545439][T10810] syzkaller1: entered allmulticast mode [ 169.600634][T10816] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 169.607232][T10816] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 169.615575][T10816] vhci_hcd vhci_hcd.0: Device attached [ 169.656793][T10553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.890980][T10553] veth0_vlan: entered promiscuous mode [ 169.908292][ T3382] usb 6-1: SetAddress Request (6) to port 0 [ 169.910551][T10553] veth1_vlan: entered promiscuous mode [ 169.931670][ T3382] usb 6-1: new SuperSpeed USB device number 6 using vhci_hcd [ 169.933434][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2789'. [ 169.969650][T10553] veth0_macvtap: entered promiscuous mode [ 169.980545][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2789'. [ 170.000886][T10553] veth1_macvtap: entered promiscuous mode [ 170.049712][T10553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.072955][T10553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.117360][ T3451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.148089][ T3451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.159560][T10847] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2793'. [ 170.173814][ T3451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.190932][ T3451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.200938][T10817] vhci_hcd: connection reset by peer [ 170.210497][ T31] vhci_hcd: stop threads [ 170.214788][ T31] vhci_hcd: release socket [ 170.219257][ T31] vhci_hcd: disconnect device [ 170.254591][T10850] syzkaller1: entered promiscuous mode [ 170.260309][T10850] syzkaller1: entered allmulticast mode [ 170.510942][T10870] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2803'. [ 170.604504][T10882] syzkaller1: entered promiscuous mode [ 170.610174][T10882] syzkaller1: entered allmulticast mode [ 170.736410][T10895] 9pnet_fd: Insufficient options for proto=fd [ 170.787772][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2817'. [ 170.797423][T10899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2817'. [ 170.939305][T10912] syzkaller1: entered promiscuous mode [ 170.944875][T10912] syzkaller1: entered allmulticast mode [ 171.026771][T10918] 9pnet_fd: Insufficient options for proto=fd [ 171.090881][T10925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2829'. [ 171.100562][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2829'. [ 171.215601][T10931] syzkaller0: entered promiscuous mode [ 171.221223][T10931] syzkaller0: entered allmulticast mode [ 171.261185][T10932] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 171.267741][T10932] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 171.276124][T10932] vhci_hcd vhci_hcd.0: Device attached [ 171.443276][T10952] syzkaller1: entered promiscuous mode [ 171.448879][T10952] syzkaller1: entered allmulticast mode [ 171.512917][T10956] 9pnet_fd: Insufficient options for proto=fd [ 171.558308][ T5847] usb 12-1: SetAddress Request (2) to port 0 [ 171.565613][ T5847] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 171.587138][T10966] netlink: 'syz.0.2847': attribute type 4 has an invalid length. [ 171.741477][T10974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.921524][T10933] vhci_hcd: connection reset by peer [ 171.927017][ T3451] vhci_hcd: stop threads [ 171.932917][ T3451] vhci_hcd: release socket [ 171.937732][ T3451] vhci_hcd: disconnect device [ 172.065069][T10989] syzkaller1: entered promiscuous mode [ 172.071180][T10989] syzkaller1: entered allmulticast mode [ 172.228284][T10994] 9pnet_fd: Insufficient options for proto=fd [ 172.580015][T11033] 9pnet_fd: Insufficient options for proto=fd [ 172.652972][T11043] 9pnet_fd: Insufficient options for proto=fd [ 172.916152][T11061] siw: device registration error -23 [ 173.048299][ T7262] usb 4-1: device descriptor read/8, error -110 [ 173.168327][ T7262] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 173.217023][ T7262] usb 4-1: enqueue for inactive port 0 [ 173.271339][ T7262] usb 4-1: enqueue for inactive port 0 [ 173.276977][ T7262] usb 4-1: enqueue for inactive port 0 [ 173.673917][T11124] syzkaller1: entered promiscuous mode [ 173.679552][T11124] syzkaller1: entered allmulticast mode [ 173.905147][T11157] __nla_validate_parse: 12 callbacks suppressed [ 173.905167][T11157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2934'. [ 173.941974][T11162] syzkaller1: entered promiscuous mode [ 173.947512][T11162] syzkaller1: entered allmulticast mode [ 174.146815][T11200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2954'. [ 174.179586][T11206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11206 comm=syz.2.2958 [ 174.338563][ T7262] usb usb4-port1: attempt power cycle [ 174.470661][T11238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11238 comm=syz.3.2971 [ 174.580667][T11248] hub 2-0:1.0: USB hub found [ 174.598853][T11248] hub 2-0:1.0: 8 ports detected [ 174.738336][T11271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11271 comm=syz.0.2984 [ 174.934451][T11299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11299 comm=syz.3.2998 [ 175.042680][ T3382] usb 6-1: device descriptor read/8, error -110 [ 175.162889][ T3382] usb 6-1: new SuperSpeed USB device number 6 using vhci_hcd [ 175.198566][ T3382] usb 6-1: enqueue for inactive port 0 [ 175.210454][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3008'. [ 175.241911][ T3382] usb 6-1: enqueue for inactive port 0 [ 175.249285][ T3382] usb 6-1: enqueue for inactive port 0 [ 175.427252][T11335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11335 comm=syz.5.3012 [ 176.055271][T11369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11369 comm=syz.5.3025 [ 176.258599][ T7262] usb usb4-port1: unable to enumerate USB device [ 176.281910][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3038'. [ 176.338604][ T3382] usb usb6-port1: attempt power cycle [ 176.486785][T11424] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3050'. [ 176.638382][ T5847] usb 12-1: device descriptor read/8, error -110 [ 176.754067][ T5847] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd [ 176.760014][T11449] syzkaller0: entered promiscuous mode [ 176.767620][T11449] syzkaller0: entered allmulticast mode [ 176.788535][ T5847] usb 12-1: enqueue for inactive port 0 [ 176.806447][ T5847] usb 12-1: enqueue for inactive port 0 [ 176.812345][ T5847] usb 12-1: enqueue for inactive port 0 [ 176.839752][ T3451] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.843555][ T29] audit: type=1326 audit(1756423415.057:6372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219a6ebe9 code=0x7ffc0000 [ 176.870687][T11459] serio: Serial port ptm0 [ 176.873336][ T29] audit: type=1326 audit(1756423415.057:6373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219a6ebe9 code=0x7ffc0000 [ 176.901628][ T29] audit: type=1326 audit(1756423415.057:6374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6219a6ebe9 code=0x7ffc0000 [ 176.931153][T11435] lo speed is unknown, defaulting to 1000 [ 176.932704][ T29] audit: type=1326 audit(1756423415.067:6375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219a6ebe9 code=0x7ffc0000 [ 176.960623][ T29] audit: type=1326 audit(1756423415.067:6376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219a6ebe9 code=0x7ffc0000 [ 176.984176][ T29] audit: type=1326 audit(1756423415.067:6377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11461 comm="syz.2.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6219aa14a5 code=0x7ffc0000 [ 177.007885][ T29] audit: type=1326 audit(1756423415.067:6378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6219a6ebe9 code=0x7ffc0000 [ 177.031611][ T29] audit: type=1326 audit(1756423415.067:6379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219a6ebe9 code=0x7ffc0000 [ 177.055441][ T29] audit: type=1326 audit(1756423415.067:6380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6219a6ebe9 code=0x7ffc0000 [ 177.079090][ T29] audit: type=1326 audit(1756423415.067:6381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11458 comm="syz.2.3063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6219a6ebe9 code=0x7ffc0000 [ 177.117079][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3064'. [ 177.154822][ T3451] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.168135][T11467] loop5: detected capacity change from 0 to 128 [ 177.195271][T11467] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 177.211943][ T3451] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.235260][T11435] chnl_net:caif_netlink_parms(): no params data found [ 177.243257][T11467] ext4 filesystem being mounted at /111/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.277582][ T3451] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.309261][T10078] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.359826][T11435] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.366921][T11435] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.401599][T11435] bridge_slave_0: entered allmulticast mode [ 177.417015][T11435] bridge_slave_0: entered promiscuous mode [ 177.428747][T11435] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.435855][T11435] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.460783][T11435] bridge_slave_1: entered allmulticast mode [ 177.480243][T11435] bridge_slave_1: entered promiscuous mode [ 177.496940][T11495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3075'. [ 177.573532][T11494] syzkaller0: entered promiscuous mode [ 177.579200][T11494] syzkaller0: entered allmulticast mode [ 177.595729][T11435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.607819][T11435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.670494][T11435] team0: Port device team_slave_0 added [ 177.687664][T11435] team0: Port device team_slave_1 added [ 177.852635][ T5847] usb usb12-port1: attempt power cycle [ 177.926629][T11523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3088'. [ 177.940417][ T3451] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 178.298599][ T3382] usb usb6-port1: unable to enumerate USB device [ 178.377090][ T3451] bond0 (unregistering): Released all slaves [ 178.386171][ T3451] bond1 (unregistering): Released all slaves [ 178.402263][T11435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.409480][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.435473][T11435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.481327][T11435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.488454][T11435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.514552][T11435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.528108][ T3451] tipc: Left network mode [ 178.539884][ T3451] hsr_slave_0: left promiscuous mode [ 178.550921][ T3451] hsr_slave_1: left promiscuous mode [ 178.565444][ T3451] veth1_macvtap: left promiscuous mode [ 178.571162][ T3451] veth0_macvtap: left promiscuous mode [ 178.576758][ T3451] veth1_vlan: left promiscuous mode [ 178.584095][ T3451] veth0_vlan: left promiscuous mode [ 178.978852][ T3451] team0 (unregistering): Port device dummy0 removed [ 179.021061][T11540] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3093'. [ 179.084964][T11542] syzkaller0: entered promiscuous mode [ 179.090713][T11542] syzkaller0: entered allmulticast mode [ 179.206996][T11435] hsr_slave_0: entered promiscuous mode [ 179.218600][T11435] hsr_slave_1: entered promiscuous mode [ 179.224616][T11435] debugfs: 'hsr0' already exists in 'hsr' [ 179.230630][T11435] Cannot create hsr debugfs directory [ 179.238744][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3099'. [ 179.658484][T11435] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.685546][T11435] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.708711][T11435] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.728532][ T5847] usb usb12-port1: unable to enumerate USB device [ 179.740303][T11435] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.860427][T11435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.892721][T11435] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.918157][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.925376][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.953913][T11435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.964454][T11435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.983844][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.991036][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.009490][T11626] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 180.016085][T11626] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 180.024215][T11626] vhci_hcd vhci_hcd.0: Device attached [ 180.203649][T11435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.410888][T11435] veth0_vlan: entered promiscuous mode [ 180.427346][T11435] veth1_vlan: entered promiscuous mode [ 180.449049][T11435] veth0_macvtap: entered promiscuous mode [ 180.465611][T11435] veth1_macvtap: entered promiscuous mode [ 180.513202][T11435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.540026][T11435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.575503][ T1594] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.584681][T11629] vhci_hcd: connection closed [ 180.590351][ T37] vhci_hcd: stop threads [ 180.599418][ T37] vhci_hcd: release socket [ 180.603929][ T37] vhci_hcd: disconnect device [ 180.626404][ T1594] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.672302][ T1594] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.704729][ T1594] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.223250][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'. [ 181.232578][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3155'. [ 181.983301][T11750] syzkaller1: entered promiscuous mode [ 181.989087][T11750] syzkaller1: entered allmulticast mode [ 182.433809][T11788] syzkaller1: entered promiscuous mode [ 182.439421][T11788] syzkaller1: entered allmulticast mode [ 182.863635][T11830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3198'. [ 182.872709][T11830] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3198'. [ 182.892424][T11825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 182.955707][T11832] syzkaller1: entered promiscuous mode [ 182.961373][T11832] syzkaller1: entered allmulticast mode [ 183.490395][T11874] syzkaller1: entered promiscuous mode [ 183.496089][T11874] syzkaller1: entered allmulticast mode [ 183.822106][T11914] syzkaller1: entered promiscuous mode [ 183.827877][T11914] syzkaller1: entered allmulticast mode [ 184.350418][T11960] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 184.369486][T11964] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3248'. [ 184.378560][T11964] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3248'. [ 184.382724][T11966] netlink: 'syz.2.3250': attribute type 4 has an invalid length. [ 184.497155][T11974] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3253'. [ 184.503125][ T3394] lo speed is unknown, defaulting to 1000 [ 184.512802][ T3394] syz0: Port: 1 Link DOWN [ 184.629295][T11986] batadv_slave_0: entered promiscuous mode [ 184.635170][T11986] batadv_slave_0: entered allmulticast mode [ 184.707625][T11992] syzkaller1: entered promiscuous mode [ 184.713255][T11992] syzkaller1: entered allmulticast mode [ 184.889408][T12007] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3266'. [ 185.217288][T12031] syzkaller1: entered promiscuous mode [ 185.222864][T12031] syzkaller1: entered allmulticast mode [ 185.386515][T12046] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3282'. [ 185.616911][T12070] syzkaller1: entered promiscuous mode [ 185.622464][T12070] syzkaller1: entered allmulticast mode [ 185.707053][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3288'. [ 185.716124][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3288'. [ 185.728686][T12071] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.271939][T12087] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3296'. [ 186.437977][T12080] lo speed is unknown, defaulting to 1000 [ 186.670687][T12080] chnl_net:caif_netlink_parms(): no params data found [ 186.750735][T12080] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.757840][T12080] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.771571][T12080] bridge_slave_0: entered allmulticast mode [ 186.779648][T12080] bridge_slave_0: entered promiscuous mode [ 186.787383][T12080] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.794524][T12080] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.802106][T12080] bridge_slave_1: entered allmulticast mode [ 186.803501][T12127] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3307'. [ 186.810399][T12080] bridge_slave_1: entered promiscuous mode [ 186.872315][T12080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.881792][T12132] syzkaller1: entered promiscuous mode [ 186.887444][T12132] syzkaller1: entered allmulticast mode [ 186.896913][T12080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.974398][T12080] team0: Port device team_slave_0 added [ 187.001054][T12080] team0: Port device team_slave_1 added [ 187.038099][T12080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.045213][T12080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.071387][T12080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.087207][T12080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.094264][T12080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.120287][T12080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.163288][T12080] hsr_slave_0: entered promiscuous mode [ 187.169629][T12080] hsr_slave_1: entered promiscuous mode [ 187.191376][T12080] debugfs: 'hsr0' already exists in 'hsr' [ 187.197406][T12080] Cannot create hsr debugfs directory [ 187.214660][T12151] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3319'. [ 187.329464][T12080] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.370875][T12080] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.391526][T12161] syzkaller1: entered promiscuous mode [ 187.397126][T12161] syzkaller1: entered allmulticast mode [ 187.439882][T12080] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.569266][T12080] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.696497][T12080] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 187.716277][T12080] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 187.736056][T12080] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 187.756728][T12080] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 187.910589][T12208] syzkaller1: entered promiscuous mode [ 187.916134][T12208] syzkaller1: entered allmulticast mode [ 187.928316][T12080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.979235][T12080] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.989880][ T1594] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.997062][ T1594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.041526][ T1594] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.048729][ T1594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.212431][T12080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.295238][T12241] syzkaller0: entered promiscuous mode [ 188.300914][T12241] syzkaller0: entered allmulticast mode [ 188.311328][T12238] syzkaller1: entered promiscuous mode [ 188.316863][T12238] syzkaller1: entered allmulticast mode [ 188.379388][T12080] veth0_vlan: entered promiscuous mode [ 188.388359][T12080] veth1_vlan: entered promiscuous mode [ 188.400751][T12250] loop5: detected capacity change from 0 to 512 [ 188.427413][T12250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 188.439176][T12080] veth0_macvtap: entered promiscuous mode [ 188.447785][T12080] veth1_macvtap: entered promiscuous mode [ 188.454738][T12250] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.479994][T12080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.489132][T12080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.517950][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 188.517966][ T29] audit: type=1326 audit(1756423426.687:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1f67ebe9 code=0x7ffc0000 [ 188.547733][ T29] audit: type=1326 audit(1756423426.687:6388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee1f67ebe9 code=0x7ffc0000 [ 188.571670][ T29] audit: type=1326 audit(1756423426.687:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1f67ebe9 code=0x7ffc0000 [ 188.595209][ T29] audit: type=1326 audit(1756423426.687:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee1f67ebe9 code=0x7ffc0000 [ 188.619020][ T29] audit: type=1326 audit(1756423426.687:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1f67ebe9 code=0x7ffc0000 [ 188.642801][ T29] audit: type=1326 audit(1756423426.687:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee1f67ebe9 code=0x7ffc0000 [ 188.666479][ T29] audit: type=1326 audit(1756423426.687:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1f67ebe9 code=0x7ffc0000 [ 188.690026][ T29] audit: type=1326 audit(1756423426.687:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fee1f67ebe9 code=0x7ffc0000 [ 188.698368][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.713538][ T29] audit: type=1326 audit(1756423426.687:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee1f67ebe9 code=0x7ffc0000 [ 188.745891][ T29] audit: type=1326 audit(1756423426.687:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12249 comm="syz.5.3356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fee1f67ebe9 code=0x7ffc0000 [ 188.774037][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.793688][ T3451] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.816762][ T3451] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.066983][T12283] syzkaller0: entered promiscuous mode [ 189.072630][T12283] syzkaller0: entered allmulticast mode [ 189.202571][T12290] syzkaller1: entered promiscuous mode [ 189.208356][T12290] syzkaller1: entered allmulticast mode [ 189.394595][T12307] __nla_validate_parse: 4 callbacks suppressed [ 189.394615][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3376'. [ 189.475731][T12250] ================================================================== [ 189.483866][T12250] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 189.491816][T12250] [ 189.494133][T12250] write to 0xffff8881073fa0f4 of 4 bytes by task 12267 on cpu 1: [ 189.501866][T12250] xas_set_mark+0x12b/0x140 [ 189.506372][T12250] __folio_start_writeback+0x1dd/0x440 [ 189.511867][T12250] ext4_bio_write_folio+0x5ad/0x9f0 [ 189.517070][T12250] mpage_process_page_bufs+0x4a1/0x620 [ 189.522534][T12250] mpage_prepare_extent_to_map+0x786/0xc00 [ 189.528451][T12250] ext4_do_writepages+0x708/0x2750 [ 189.533583][T12250] ext4_writepages+0x176/0x300 [ 189.538360][T12250] do_writepages+0x1c3/0x310 [ 189.542961][T12250] file_write_and_wait_range+0x156/0x2c0 [ 189.548691][T12250] generic_buffers_fsync_noflush+0x45/0x120 [ 189.554606][T12250] ext4_sync_file+0x1ab/0x690 [ 189.559384][T12250] vfs_fsync_range+0x10d/0x130 [ 189.564159][T12250] ext4_buffered_write_iter+0x34f/0x3c0 [ 189.569722][T12250] ext4_file_write_iter+0x383/0xf00 [ 189.574941][T12250] iter_file_splice_write+0x663/0xa60 [ 189.580316][T12250] direct_splice_actor+0x153/0x2a0 [ 189.585448][T12250] splice_direct_to_actor+0x30f/0x680 [ 189.590845][T12250] do_splice_direct+0xda/0x150 [ 189.595638][T12250] do_sendfile+0x380/0x650 [ 189.600073][T12250] __x64_sys_sendfile64+0x105/0x150 [ 189.605295][T12250] x64_sys_call+0x2bb0/0x2ff0 [ 189.610106][T12250] do_syscall_64+0xd2/0x200 [ 189.614626][T12250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.620520][T12250] [ 189.622929][T12250] read to 0xffff8881073fa0f4 of 4 bytes by task 12250 on cpu 0: [ 189.630557][T12250] __writeback_single_inode+0x1f9/0x7c0 [ 189.636123][T12250] writeback_single_inode+0x167/0x3e0 [ 189.641507][T12250] sync_inode_metadata+0x5b/0x90 [ 189.646462][T12250] generic_buffers_fsync_noflush+0xd9/0x120 [ 189.652355][T12250] ext4_sync_file+0x1ab/0x690 [ 189.657040][T12250] vfs_fsync_range+0x10d/0x130 [ 189.661802][T12250] ext4_buffered_write_iter+0x34f/0x3c0 [ 189.667399][T12250] ext4_file_write_iter+0x383/0xf00 [ 189.672616][T12250] iter_file_splice_write+0x663/0xa60 [ 189.677984][T12250] direct_splice_actor+0x153/0x2a0 [ 189.683098][T12250] splice_direct_to_actor+0x30f/0x680 [ 189.688471][T12250] do_splice_direct+0xda/0x150 [ 189.693239][T12250] do_sendfile+0x380/0x650 [ 189.697662][T12250] __x64_sys_sendfile64+0x105/0x150 [ 189.702872][T12250] x64_sys_call+0x2bb0/0x2ff0 [ 189.707641][T12250] do_syscall_64+0xd2/0x200 [ 189.712160][T12250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.718052][T12250] [ 189.720373][T12250] value changed: 0x0a000021 -> 0x04000021 [ 189.726112][T12250] [ 189.728442][T12250] Reported by Kernel Concurrency Sanitizer on: [ 189.734670][T12250] CPU: 0 UID: 0 PID: 12250 Comm: syz.5.3356 Not tainted syzkaller #0 PREEMPT(voluntary) [ 189.744483][T12250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.754555][T12250] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 189.844173][T10078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 189.915343][T12311] syzkaller0: entered promiscuous mode [ 189.921035][T12311] syzkaller0: entered allmulticast mode [ 190.182145][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.261802][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.330842][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.410738][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.472133][ T52] bridge_slave_1: left allmulticast mode [ 190.477883][ T52] bridge_slave_1: left promiscuous mode [ 190.483613][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.491544][ T52] bridge_slave_0: left allmulticast mode [ 190.497194][ T52] bridge_slave_0: left promiscuous mode [ 190.503076][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.600707][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.610705][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.620513][ T52] bond0 (unregistering): Released all slaves [ 190.672276][ T52] hsr_slave_0: left promiscuous mode [ 190.677912][ T52] hsr_slave_1: left promiscuous mode [ 190.683609][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.691074][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.699115][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.706511][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.717014][ T52] veth1_macvtap: left promiscuous mode [ 190.722682][ T52] veth0_macvtap: left promiscuous mode [ 190.728614][ T52] veth1_vlan: left promiscuous mode [ 190.733871][ T52] veth0_vlan: left promiscuous mode [ 190.796273][ T52] team0 (unregistering): Port device team_slave_1 removed [ 190.805910][ T52] team0 (unregistering): Port device team_slave_0 removed [ 191.182608][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.241395][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.282035][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.330783][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.384111][ T52] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.442239][ T52] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.501324][ T52] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.541275][ T52] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.604035][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.640746][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.701238][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.771457][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.832698][ T52] bridge_slave_1: left allmulticast mode [ 191.838562][ T52] bridge_slave_1: left promiscuous mode [ 191.844322][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.852288][ T52] bridge_slave_0: left allmulticast mode [ 191.858048][ T52] bridge_slave_0: left promiscuous mode [ 191.863869][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.872210][ T52] bridge_slave_1: left allmulticast mode [ 191.877896][ T52] bridge_slave_1: left promiscuous mode [ 191.883662][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.891650][ T52] bridge_slave_0: left allmulticast mode [ 191.897373][ T52] bridge_slave_0: left promiscuous mode [ 191.903166][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.030233][ T52] bond0 (unregistering): Released all slaves [ 192.111505][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.121534][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.131392][ T52] bond0 (unregistering): Released all slaves [ 192.210921][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.220832][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.230709][ T52] bond0 (unregistering): Released all slaves [ 192.286042][ T52] hsr_slave_0: left promiscuous mode [ 192.291996][ T52] hsr_slave_1: left promiscuous mode [ 192.299388][ T52] hsr_slave_0: left promiscuous mode [ 192.305020][ T52] hsr_slave_1: left promiscuous mode [ 192.310753][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.318174][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.325924][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.333478][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.342795][ T52] hsr_slave_0: left promiscuous mode [ 192.348601][ T52] hsr_slave_1: left promiscuous mode [ 192.354175][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.361647][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.369377][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.376777][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.392605][ T52] veth1_macvtap: left promiscuous mode [ 192.398096][ T52] veth0_macvtap: left promiscuous mode [ 192.403840][ T52] veth1_vlan: left promiscuous mode [ 192.409139][ T52] veth0_vlan: left promiscuous mode [ 192.415077][ T52] veth1_macvtap: left promiscuous mode [ 192.420650][ T52] veth0_macvtap: left promiscuous mode [ 192.426163][ T52] veth1_vlan: left promiscuous mode [ 192.431775][ T52] veth0_vlan: left promiscuous mode [ 192.437459][ T52] veth1_macvtap: left promiscuous mode [ 192.442967][ T52] veth0_macvtap: left promiscuous mode [ 192.448507][ T52] veth1_vlan: left promiscuous mode [ 192.453799][ T52] veth0_vlan: left promiscuous mode [ 192.626025][ T52] team0 (unregistering): Port device team_slave_1 removed [ 192.636426][ T52] team0 (unregistering): Port device team_slave_0 removed [ 192.688506][ T52] team0 (unregistering): Port device team_slave_1 removed [ 192.698069][ T52] team0 (unregistering): Port device team_slave_0 removed [ 193.441748][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.481521][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.530841][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.571412][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.642765][ T52] bridge_slave_1: left allmulticast mode [ 193.648554][ T52] bridge_slave_1: left promiscuous mode [ 193.654337][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.662313][ T52] bridge_slave_0: left allmulticast mode [ 193.668006][ T52] bridge_slave_0: left promiscuous mode [ 193.673739][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.750834][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.760913][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.770313][ T52] bond0 (unregistering): Released all slaves [ 193.802262][ T52] hsr_slave_0: left promiscuous mode [ 193.808038][ T52] hsr_slave_1: left promiscuous mode [ 193.813764][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.821210][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.828982][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.836440][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.846296][ T52] veth1_macvtap: left promiscuous mode [ 193.852004][ T52] veth0_macvtap: left promiscuous mode [ 193.857522][ T52] veth1_vlan: left promiscuous mode [ 193.862875][ T52] veth0_vlan: left promiscuous mode [ 193.923475][ T52] team0 (unregistering): Port device team_slave_1 removed [ 193.932859][ T52] team0 (unregistering): Port device team_slave_0 removed