last executing test programs: 1m47.598663109s ago: executing program 32 (id=1304): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(0xffffffffffffffff, 0x0, 0x3f01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d", 0x28}], 0x1}, 0x0) 1m35.554840507s ago: executing program 33 (id=1841): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x6}, 0x1c) 1m21.641786558s ago: executing program 5 (id=2272): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x26, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r3, 0x1, 0xffffffff, 0xf7fffffc, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x0) 1m21.623000738s ago: executing program 5 (id=2273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) 1m21.600467339s ago: executing program 5 (id=2274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0xfffff7fffffffffd}, 0x18) syz_emit_ethernet(0xffffffffffffff68, 0x0, 0x0) 1m21.584126929s ago: executing program 5 (id=2275): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1m21.461886769s ago: executing program 5 (id=2279): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m21.303711261s ago: executing program 5 (id=2280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af03000600000000000200010000000000000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e010100000000000000000200130003"], 0x78}, 0x1, 0x7}, 0x0) 1m7.148287512s ago: executing program 34 (id=2265): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) 1m6.287651578s ago: executing program 35 (id=2280): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af03000600000000000200010000000000000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e010100000000000000000200130003"], 0x78}, 0x1, 0x7}, 0x0) 55.139972582s ago: executing program 8 (id=2680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 51.950769342s ago: executing program 8 (id=2680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 51.901496602s ago: executing program 8 (id=2692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 51.853963522s ago: executing program 8 (id=2694): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 51.555700295s ago: executing program 8 (id=2707): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000002640)="ef0ba606342672dabc", 0x9}], 0x1}}], 0x1, 0x20000010) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) 50.440340122s ago: executing program 8 (id=2746): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03559f06000000000000aab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) 50.435039012s ago: executing program 36 (id=2746): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03559f06000000000000aab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) 45.872321442s ago: executing program 7 (id=2872): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) dup3(r3, r0, 0x0) 45.850483302s ago: executing program 7 (id=2874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xd8240980, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)) write$cgroup_devices(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="2d84000906ffb9"], 0xffdd) 45.755641732s ago: executing program 7 (id=2878): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) 45.630447593s ago: executing program 7 (id=2893): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 45.284612836s ago: executing program 7 (id=2888): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x2a}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 44.895231188s ago: executing program 7 (id=2901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x22c}}, 0x0) 44.895025778s ago: executing program 37 (id=2901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d40)={0x0, 0x300, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x22c}}, 0x0) 44.028200654s ago: executing program 9 (id=2929): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000013000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 43.943103694s ago: executing program 9 (id=2931): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x1684, &(0x7f0000000080)={0x0, 0xce3d, 0x400, 0x1, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 43.942762734s ago: executing program 9 (id=2932): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") capset(0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x141c00, 0x0) add_key$user(&(0x7f0000000ec0), &(0x7f0000000f00)={'syz', 0x1}, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 43.707507506s ago: executing program 9 (id=2938): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$eJzs3MtvVNUfAPDvnbY8fjzaHyIKglbQSHy0tKCycKFGExeamOgCl7UtiAzU0JoIabQYg0tD4t64NPEvcOfGqAtj4lYTl4aEaGNCcTXmvugwnSltaTvS+XyS6ZxzH3PO9957Zs69p/cG0LH60z9JxPaI+DUievPsrQv0529zs9OjN2anR5Oo1d74M8mWuz47PVouWq63rcgcrkRUPkni+WRhuZMXLp4ZqVbHzxf5wamz7w1OXrj41OmzI6fGT42fGz5+/NjRoWefGX56VeJM47q+78OJ/XtfeevKa6Mnrrz9w9dptfYcyOfXx3FbN5oE1ER/utX+qmUa5z26jLrfDXbUpZPuNlaEZemKiHR39WTtvze6Yn7n9cbLH7dec/P6VBBYM+lv0yIteaYGbGBJtLsGQHuUP/Tp+W/5Wqeux3/CtRciNhXpudnp0bmb8XdHpZjes4bl90fEiZl/vkhfsdzrEAAAK5D1bZ5s1v+rxJ7sPR/r2FmMofRFxP8jYldE3BMRuyPi3ohs2fsi4v585VrvEsvvb8gv7P9Urjat8ypJ+3/P1fX95uriL976uorcjiz+nuTk6er4kWKbHI6ezWl+aJEyvn3pl89azavv/6WvtPyyL1hU4Gp3wwW6sZGpkdXaCNcuRezrbhZ/cnMkID0C9kbEvuV99M4ycfrxr/a3Wuj28S9iFcaZal9GPJbv/5loiL+ULD4+ObglquNHBsujYqEff778eqvy7yj+VXDt4AN5Yn7/NyzR+3eSj9f2RLU6fn5y+WVc/u3Tluc0Kz3+NyVvZmPWP72TT/tgZGrq/FDEpuTVLF+e02XTh+fXLfPl8unxf/hQ8/a/q1gnjT/dSulBfCAiHoyIh4q6PxwRByPi0CLxf//iI+8uEn8SSbRv/1+KGGv6/Xfz+O9L6sfrV5DoOvPdN61GzOv3fy1ptf+PxUz2XZvLvv9uY6kVvMPNBwAAAHeFSkRsj6QykKf7t0elMjCQ/w//7vhfpToxOfXEyYn3z43l9wj0RU+lvNLVW3c9dCiZKT4xzw8X14rL+UeL68afd23N8gOjE9WxNscOnW7bre0/yvaf+qOr3bUD1pz7taBzNbb/SpvqAay/pfz+OxeAjenW9r8l/bO1XXUB1pfzf+hczdr/Rw15/X/YmBY+AOj3Jo+sAzYi/X/oXNo/dC7tHzpSfif8lVjJff0rT5Q3C6z8c7Ys+Q7/TkmUT7xYy7K2xvyUqLQ95A5KpC1mfQudf4YKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3ezfAAAA//+5XeWQ") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 42.886763961s ago: executing program 9 (id=2940): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4}, 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 42.726727052s ago: executing program 6 (id=2945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x1, &(0x7f0000000180)={{}, {r2, r3/1000+60000}}, 0x0) 42.714878142s ago: executing program 6 (id=2947): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) unshare(0x2c020400) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @loopback={0xffffff7f00000000}}], 0x1c) 42.638728062s ago: executing program 6 (id=2951): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 42.638094333s ago: executing program 6 (id=2952): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0) 42.637940513s ago: executing program 9 (id=2960): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 42.564759003s ago: executing program 38 (id=2960): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 42.387922994s ago: executing program 6 (id=2955): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000b40)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c002e39a45aa9edcfe08671a816cb673d99851079b41e699eacf742"], 0x1, 0x373, &(0x7f00000006c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') ftruncate(r0, 0x2007ffc) 42.195239676s ago: executing program 6 (id=2957): r0 = socket$netlink(0x10, 0x3, 0x8000000004) gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0xfcfd, &(0x7f0000000040)={0x0, 0x989680}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 42.195074216s ago: executing program 39 (id=2957): r0 = socket$netlink(0x10, 0x3, 0x8000000004) gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0xfcfd, &(0x7f0000000040)={0x0, 0x989680}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) 1.726530859s ago: executing program 1 (id=4630): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) timerfd_create(0x5, 0x80800) 1.59617559s ago: executing program 1 (id=4631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x86, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x2}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu==0!|!') 1.459904131s ago: executing program 1 (id=4633): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 1.433019501s ago: executing program 1 (id=4636): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.390013521s ago: executing program 1 (id=4640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) 1.119472323s ago: executing program 3 (id=4643): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.068327324s ago: executing program 3 (id=4646): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7098}, 0x18) sendmsg$xdp(0xffffffffffffffff, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)="9454b83847a5c639dccc1cc3aa288229ee8a8a45ab78b6638fd2636c7547f7afcc1711878b54b4a8bc9eda3358a5cafd58dbb8a9f638354fbf2e6ab22b8558896f959a8579d9a05c6dde4a9dcc1779d407440e34d6e555f793ec7c2979d1f4b82e4122ce3f815e2e5322b7e74e3439af393c3adad4bab28934e91efd14ebc482d56ce8cedb094afc27d5c1e6cc050411de76f5731640796ba1e233fa6da1bb14cd30662898a0595bf34af8eebc3d12716e62ae66fbb6cf070bef47415d593769c361fc054ea962c9d09ed46aecba2af20e0a40204d4d795d019895bc0d52d8cc032ee13ae832fb1f989b70ab35596dfe28c239d45c99016cadd05b87af7bd13d37c5efae45046d0e5f9860e35c2f08ef9f67c80c47b870e353c089bab87b74c588183c64b20b7ccbdb068390e4c59a848d9695f46fc8bdbde97a4400f2e8b7379a62c57fd4ef8bd4f8e3a4bf141e87156efc1b86e15f34591489db7112fcae399f83f9e4ee56a923ea3123b3fbff37ccdf92284137a1500cad979bc0331524168b5f1a5da3e2d6643b6b0f28eb15869ba7f609c4fc9e4aecca1183de7b6427e7564714ffe154c2e4db0042ada0561c58a4003191033a4fdbf0d09c9c49e802e325da5bc2bcbe5b7a64c411a780ae8d0902118894f5f63fe989623f25a7e201e135e8f25b5365c3a615a4727144109cc4b88660728445ce841940d20e87069cb74f63fbfb5dd7992dc4ccde1484aeec05630a440ed9481d03267585eed156484d23b07280cc045ff023abd628d43f7d3b7bc5a9e8e6445f94271d508e5bb17b12216dba8a5f1a02aef9126389dcf725197440404b29b95e71d45b9dad8f3fdf1c6a2734632ca7991026304d869a94259cc32ac8a45da5ba38f54e9d98faf2af04e3f11ab495eb490daa88cbf465fe127cf144081196d8319692a51d3bae449ff531427c829d9cfab8cb15ae4ff6f4392e2c657beae5364b55d05729bc7f950e4b99c7ce71136168a3fda8b7ead182973c1f5fb52f7c6f488f6383c1259345306375ebe0639e40f367be4a480c2babf3e0572a5c089cccd06588489fdf12ff256af41faef912dea1c1cf122e8e4b99770b19fdc9f6b12cdfa51d0b0d3b6dbc18af665f0f92b83b12eda1fae071a9fb49575763d1bfce45616089b868e37bad0c806a5cff911ae163f82f98c885e7c9afa4d55a4117246086b07e55991205ad345dde63ef855097c7be09343ff9dd982e7e8332337c1b9c8aedd1afeb06010e59aeb5008f7bb0d971963f79df825d94773c9b79e6897c53a83388ef89bddd1d35addfb6c3dc0121ac2a7936643159365a0ef14dc95de2d1f60f41a687c04ba42ed9b225496a418e593587f40a25bbb761eeddc2080512646d163a9968ea00f599239b3abd581253d383fb72abad3b19e0d85a7eafdc02e92cbe784129c37152934a286c2a3d5c5eb1ac65caf63f352e58c96a26b0b13462b992926bae78774d7d9de575bf86b50da743692fb38ee9fbc51ac0eff40589f7259b50e1208753abdd7e404abe252592ec7605fb2aacf41771c506cbcf84d7e8657d38", 0x459}], 0x1, 0x0, 0x0, 0x10}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000002300)=ANY=[@ANYBLOB="180000060010000000000000000000001800000004000000000000000700000085100000fbffffff1864000003000000000000000200000095000000000000009721f8f99b9c32b94fa3531ed1fe6ba94a51ebae43e4e02c6702b58f46e33936345a20937f2a96fd56d9437cee57a6a28ddc0fa3e93f72c37140d76fdb2f2dba11bf3e68b3d449ed8a6e259d56194a83c83d8add0ffb3af5414ebd89"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 1.006703884s ago: executing program 3 (id=4648): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {0x0, 0x1}, 0x0, 0x0, &(0x7f0000000240)={0xa2, 0xa, 0x0, 0x2001}, 0x8, 0x8, 0x0, 0x0, 0x2000, 0x200001, 0x0}) 947.141444ms ago: executing program 2 (id=4649): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 946.544024ms ago: executing program 3 (id=4659): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) unshare(0x2040400) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r2, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) 907.529784ms ago: executing program 2 (id=4650): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, 0x453, 0x4, 0x70bd2b, 0x25dfdbfc, "e4"}, 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x2080) 906.930724ms ago: executing program 3 (id=4661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000040c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x300}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x8000001, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 877.843695ms ago: executing program 2 (id=4651): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='system_u:object_r:auditd_initrc_exec_t:s0 /usr/sbin/cups-browsed 0'], 0x56) 876.734545ms ago: executing program 3 (id=4663): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x400000000, 0x10000000000008}) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000040)) 846.432315ms ago: executing program 2 (id=4652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) 807.951935ms ago: executing program 2 (id=4653): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000080)=0x4) r1 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 558.787817ms ago: executing program 1 (id=4654): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) preadv2(r2, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 270.590209ms ago: executing program 4 (id=4664): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) 247.103299ms ago: executing program 4 (id=4666): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f0000000040)="58db1d", 0x0, 0x0, 0x0, 0x40}, 0x38) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 179.729819ms ago: executing program 0 (id=4669): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) 156.28893ms ago: executing program 0 (id=4670): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB="0000000000000002000000040000000000000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="0000000002400000000000000000"], 0x50) 155.12529ms ago: executing program 4 (id=4671): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "00641a", 0x0, 0x3a, 0x0, @mcast1, @mcast1, [], "1e520b4c951ee12e"}}}}}}}, 0x0) 138.31541ms ago: executing program 0 (id=4672): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x0, 0x0, 0x0) 137.86158ms ago: executing program 4 (id=4673): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000280)="05154ca8eb3d", 0x6, 0x240458d1, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @broadcast}, 0x14) 118.38422ms ago: executing program 0 (id=4674): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) sendfile(r0, r0, 0x0, 0x6) 117.55163ms ago: executing program 4 (id=4684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 112.57603ms ago: executing program 0 (id=4675): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 1.232431ms ago: executing program 2 (id=4676): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffb", 0x11) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffffffffffffffd) 990.971µs ago: executing program 4 (id=4677): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=4687): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x8000) kernel console output (not intermixed with test programs): 118][ T9945] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2698'. [ 118.950397][ T9932] netlink: 'syz.6.2693': attribute type 10 has an invalid length. [ 118.976761][ T9935] loop8: detected capacity change from 512 to 64 [ 118.984206][ T9951] syz.8.2694: attempt to access beyond end of device [ 118.984206][ T9951] loop8: rw=2051, sector=506, nr_sectors = 2 limit=64 [ 118.997952][ T9951] EXT4-fs (loop8): discard request in group:0 block:252 count:1 failed with -5 [ 119.023099][ T9951] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: IO failure [ 119.034511][ T9952] netlink: 'syz.7.2701': attribute type 21 has an invalid length. [ 119.037889][ T9951] syz.8.2694: attempt to access beyond end of device [ 119.037889][ T9951] loop8: rw=2051, sector=510, nr_sectors = 2 limit=64 [ 119.056940][ T9951] EXT4-fs (loop8): discard request in group:0 block:254 count:1 failed with -5 [ 119.066904][ T9951] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6667: IO failure [ 119.071211][ T9952] netlink: 'syz.7.2701': attribute type 6 has an invalid length. [ 119.083001][ T9952] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2701'. [ 119.125540][ T9801] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 119.154532][ T9801] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.295063][T10045] loop6: detected capacity change from 0 to 512 [ 119.321255][T10045] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.338620][T10045] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.362504][ T7745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.537563][T10058] loop6: detected capacity change from 0 to 1024 [ 119.544761][T10058] EXT4-fs: inline encryption not supported [ 119.550830][T10058] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.557794][T10058] EXT4-fs: Ignoring removed bh option [ 119.567811][T10058] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.587303][T10058] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.2722: Allocating blocks 385-513 which overlap fs metadata [ 119.603669][T10057] EXT4-fs (loop6): pa ffff888106df55b0: logic 16, phys. 129, len 24 [ 119.612211][T10057] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 119.700388][ T7745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.820563][T10066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10066 comm=syz.6.2725 [ 119.912059][T10075] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2729'. [ 119.921263][T10075] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2729'. [ 120.151607][T10106] loop7: detected capacity change from 0 to 512 [ 120.174899][T10106] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.193098][T10106] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.2742: error while reading EA inode 32 err=-116 [ 120.228310][ T9998] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.238967][T10113] FAT-fs (loop13): unable to read boot sector [ 120.249403][T10106] EXT4-fs (loop7): 1 orphan inode deleted [ 120.273318][T10116] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2747'. [ 120.283562][T10106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.324640][T10121] pimreg: entered allmulticast mode [ 120.337464][ T9777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.359485][T10121] pimreg: left allmulticast mode [ 120.449150][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2754'. [ 120.463752][T10137] bridge_slave_1: left allmulticast mode [ 120.469604][T10137] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.477772][T10137] bridge_slave_0: left allmulticast mode [ 120.483694][T10137] bridge_slave_0: left promiscuous mode [ 120.489559][T10137] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.493490][T10142] netlink: 'syz.6.2757': attribute type 3 has an invalid length. [ 120.507798][T10137] bridge0 (unregistering): left allmulticast mode [ 120.579878][T10150] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2761'. [ 120.620898][T10117] chnl_net:caif_netlink_parms(): no params data found [ 120.676689][T10117] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.684180][T10117] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.706461][T10117] bridge_slave_0: entered allmulticast mode [ 120.713280][T10117] bridge_slave_0: entered promiscuous mode [ 120.720335][T10117] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.727432][T10117] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.734856][T10117] bridge_slave_1: entered allmulticast mode [ 120.741886][T10117] bridge_slave_1: entered promiscuous mode [ 120.752222][T10167] netlink: 'syz.6.2767': attribute type 39 has an invalid length. [ 120.785937][T10117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.797011][T10117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.824430][T10117] team0: Port device team_slave_0 added [ 120.835001][T10117] team0: Port device team_slave_1 added [ 120.854560][T10117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.861757][T10117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.888070][T10117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.899635][T10117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.906768][T10117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.933116][T10117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.992913][T10117] hsr_slave_0: entered promiscuous mode [ 121.005730][T10117] hsr_slave_1: entered promiscuous mode [ 121.018713][T10117] debugfs: 'hsr0' already exists in 'hsr' [ 121.024478][T10117] Cannot create hsr debugfs directory [ 121.030117][T10175] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2771'. [ 121.039277][T10175] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2771'. [ 121.168657][T10117] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 121.189544][T10117] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 121.207555][T10117] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 121.226507][T10117] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 121.301002][T10178] chnl_net:caif_netlink_parms(): no params data found [ 121.417883][ T9998] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.435632][T10117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.463924][ T9998] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.482811][T10178] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.490118][T10178] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.498147][T10178] bridge_slave_0: entered allmulticast mode [ 121.505223][T10178] bridge_slave_0: entered promiscuous mode [ 121.514498][T10227] netlink: 'syz.6.2785': attribute type 3 has an invalid length. [ 121.515420][ T9998] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.534691][T10178] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.541851][T10178] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.549793][T10178] bridge_slave_1: entered allmulticast mode [ 121.556468][T10178] bridge_slave_1: entered promiscuous mode [ 121.563564][T10117] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.588419][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.595502][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.609799][ T9998] bridge_slave_1: left allmulticast mode [ 121.615679][ T9998] bridge_slave_1: left promiscuous mode [ 121.621308][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.629815][ T9998] bridge_slave_0: left allmulticast mode [ 121.635669][ T9998] bridge_slave_0: left promiscuous mode [ 121.641461][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.712898][ T9998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.723800][ T9998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.733147][ T9998] bond0 (unregistering): Released all slaves [ 121.753488][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.760682][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.770889][T10178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.782102][T10178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.809000][ T9998] hsr_slave_0: left promiscuous mode [ 121.815195][ T9998] hsr_slave_1: left promiscuous mode [ 121.821156][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.828672][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.836864][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.844368][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.856103][ T9998] veth1_macvtap: left promiscuous mode [ 121.861755][ T9998] veth0_macvtap: left promiscuous mode [ 121.867685][ T9998] veth1_vlan: left promiscuous mode [ 121.872999][ T9998] veth0_vlan: left promiscuous mode [ 121.957890][ T9998] team0 (unregistering): Port device team_slave_1 removed [ 121.970983][ T9998] team0 (unregistering): Port device team_slave_0 removed [ 121.987424][T10248] netlink: 'syz.6.2795': attribute type 10 has an invalid length. [ 122.017444][T10178] team0: Port device team_slave_0 added [ 122.024573][T10178] team0: Port device team_slave_1 added [ 122.033305][T10248] ipvlan0: entered allmulticast mode [ 122.038740][T10248] veth0_vlan: entered allmulticast mode [ 122.063592][T10178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.070574][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.096660][T10178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.110716][T10178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.117710][T10178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.144064][T10178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.164242][T10117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.174782][T10117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.210177][T10178] hsr_slave_0: entered promiscuous mode [ 122.216740][T10178] hsr_slave_1: entered promiscuous mode [ 122.222877][T10178] debugfs: 'hsr0' already exists in 'hsr' [ 122.228731][T10178] Cannot create hsr debugfs directory [ 122.318023][T10117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.387403][T10178] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.417946][T10286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2809'. [ 122.427094][T10286] netlink: 348 bytes leftover after parsing attributes in process `syz.1.2809'. [ 122.456700][T10178] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.471149][T10288] loop6: detected capacity change from 0 to 2048 [ 122.501569][T10288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 122.517354][T10178] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.540612][T10117] veth0_vlan: entered promiscuous mode [ 122.553136][T10117] veth1_vlan: entered promiscuous mode [ 122.567145][T10117] veth0_macvtap: entered promiscuous mode [ 122.574543][T10117] veth1_macvtap: entered promiscuous mode [ 122.587161][T10178] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.618746][T10117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.630681][ T9998] bridge_slave_1: left allmulticast mode [ 122.636437][ T9998] bridge_slave_1: left promiscuous mode [ 122.642298][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.653578][ T9998] bridge_slave_0: left allmulticast mode [ 122.659412][ T9998] bridge_slave_0: left promiscuous mode [ 122.665139][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.742246][T10311] loop7: detected capacity change from 0 to 512 [ 122.758353][T10311] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 122.772336][ T9998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.783617][ T9998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.793475][ T9998] bond0 (unregistering): Released all slaves [ 122.805768][T10117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.819840][T10311] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 122.838508][ T3451] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.848003][T10311] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 122.858656][ T9998] hsr_slave_0: left promiscuous mode [ 122.865185][T10311] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 548) [ 122.873905][ T9998] hsr_slave_1: left promiscuous mode [ 122.904298][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.911965][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.991745][T10288] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 123.007071][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.014562][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.037885][ T9998] veth1_macvtap: left promiscuous mode [ 123.043585][ T9998] veth0_macvtap: left promiscuous mode [ 123.043899][T10288] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 123.049285][ T9998] veth1_vlan: left promiscuous mode [ 123.061766][T10288] EXT4-fs (loop6): This should not happen!! Data will be lost [ 123.061766][T10288] [ 123.076716][T10288] EXT4-fs (loop6): Total free blocks count 0 [ 123.082713][T10288] EXT4-fs (loop6): Free/Dirty block details [ 123.088621][T10288] EXT4-fs (loop6): free_blocks=2415919104 [ 123.090321][ T9998] veth0_vlan: left promiscuous mode [ 123.094419][T10288] EXT4-fs (loop6): dirty_blocks=8208 [ 123.104852][T10288] EXT4-fs (loop6): Block reservation details [ 123.111179][T10288] EXT4-fs (loop6): i_reserved_data_blocks=513 [ 123.228238][ T9998] team0 (unregistering): Port device team_slave_1 removed [ 123.238308][ T9998] team0 (unregistering): Port device team_slave_0 removed [ 123.252442][ T9986] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 123.300677][ T3451] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.310983][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 123.310999][ T29] audit: type=1400 audit(1761939372.137:3965): avc: denied { ioctl } for pid=10323 comm="syz.7.2821" path="socket:[31871]" dev="sockfs" ino=31871 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 123.368611][ T3451] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.378311][T10328] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 123.398001][ T3451] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.417742][T10178] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.434813][T10178] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.458646][T10178] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.475362][T10178] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.523740][T10349] syzkaller0: entered allmulticast mode [ 123.531597][T10349] syzkaller0 (unregistering): left allmulticast mode [ 123.642049][T10178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.665496][T10178] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.686892][T10023] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.694184][T10023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.723907][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.731035][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.777614][ T29] audit: type=1326 audit(1761939372.630:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.9.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b25b1efc9 code=0x7ffc0000 [ 123.802829][T10178] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.844614][ T29] audit: type=1326 audit(1761939372.630:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.9.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f3b25b1efc9 code=0x7ffc0000 [ 123.868417][ T29] audit: type=1326 audit(1761939372.630:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.9.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b25b1efc9 code=0x7ffc0000 [ 123.892053][ T29] audit: type=1326 audit(1761939372.683:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10376 comm="syz.9.2841" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b25b1efc9 code=0x7ffc0000 [ 123.950648][T10178] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.057602][T10394] loop7: detected capacity change from 0 to 8192 [ 124.092725][T10405] __nla_validate_parse: 14 callbacks suppressed [ 124.092743][T10405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2859'. [ 124.110852][T10394] loop7: p1 p3 [ 124.114569][T10394] loop7: p1 start 51314688 is beyond EOD, truncated [ 124.121277][T10394] loop7: p3 start 65536 is beyond EOD, truncated [ 124.139435][ T29] audit: type=1326 audit(1761939372.998:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.7.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf71efc9 code=0x7ffc0000 [ 124.163295][ T29] audit: type=1326 audit(1761939372.998:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.7.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf71efc9 code=0x7ffc0000 [ 124.163348][T10405] bridge_slave_1: left allmulticast mode [ 124.186855][ T29] audit: type=1326 audit(1761939372.998:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.7.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f33bf71efc9 code=0x7ffc0000 [ 124.192488][T10405] bridge_slave_1: left promiscuous mode [ 124.215946][ T29] audit: type=1326 audit(1761939372.998:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.7.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf71efc9 code=0x7ffc0000 [ 124.221796][T10405] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.245159][ T29] audit: type=1326 audit(1761939372.998:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10393 comm="syz.7.2846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f33bf71efc9 code=0x7ffc0000 [ 124.297096][T10405] bridge_slave_0: left allmulticast mode [ 124.303072][T10405] bridge_slave_0: left promiscuous mode [ 124.309028][T10405] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.361733][T10418] loop9: detected capacity change from 0 to 512 [ 124.361761][T10414] netlink: 'syz.1.2852': attribute type 3 has an invalid length. [ 124.376292][T10418] EXT4-fs: Ignoring removed bh option [ 124.394500][T10178] veth0_vlan: entered promiscuous mode [ 124.414265][T10178] veth1_vlan: entered promiscuous mode [ 124.423745][T10418] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.429261][T10178] veth0_macvtap: entered promiscuous mode [ 124.445744][T10178] veth1_macvtap: entered promiscuous mode [ 124.456879][T10418] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.466328][T10178] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.479406][T10426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2854'. [ 124.488549][T10426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2854'. [ 124.498360][T10418] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 124.508157][T10178] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.527734][T10117] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.539478][T10023] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.585582][T10023] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.595696][T10023] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.605155][T10023] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.696068][T10442] block device autoloading is deprecated and will be removed. [ 124.703919][T10442] FAT-fs (loop3): unable to read boot sector [ 124.750682][T10452] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2866'. [ 124.830739][T10448] loop6: detected capacity change from 0 to 8192 [ 124.861468][T10469] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2875'. [ 124.870615][T10469] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2875'. [ 124.872607][T10448] loop6: p1 p3 [ 124.884096][T10448] loop6: p1 start 51314688 is beyond EOD, truncated [ 124.890897][T10448] loop6: p3 start 65536 is beyond EOD, truncated [ 124.938931][T10476] FAT-fs (loop15): unable to read boot sector [ 124.985555][T10481] loop6: detected capacity change from 0 to 512 [ 124.992790][T10481] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.000825][T10481] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2880: error while reading EA inode 32 err=-116 [ 125.013900][T10481] EXT4-fs (loop6): 1 orphan inode deleted [ 125.023177][T10481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.053998][ T7745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.061339][T10487] loop7: detected capacity change from 0 to 512 [ 125.087887][T10487] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.2893: inode has both inline data and extents flags [ 125.101625][T10487] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2893: couldn't read orphan inode 15 (err -117) [ 125.135819][T10494] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2884'. [ 125.180184][T10487] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.253122][T10487] loop7: detected capacity change from 512 to 64 [ 125.261202][T10487] syz.7.2893: attempt to access beyond end of device [ 125.261202][T10487] loop7: rw=2051, sector=506, nr_sectors = 2 limit=64 [ 125.285174][T10487] EXT4-fs (loop7): discard request in group:0 block:252 count:1 failed with -5 [ 125.300806][T10487] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: IO failure [ 125.311778][T10487] syz.7.2893: attempt to access beyond end of device [ 125.311778][T10487] loop7: rw=2051, sector=510, nr_sectors = 2 limit=64 [ 125.327736][T10487] EXT4-fs (loop7): discard request in group:0 block:254 count:1 failed with -5 [ 125.336956][T10487] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: IO failure [ 125.380131][ T9777] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 125.462475][T10506] loop6: detected capacity change from 0 to 128 [ 125.477204][T10506] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.478946][T10223] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.505402][T10506] ext4 filesystem being mounted at /236/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 125.523558][T10506] EXT4-fs (loop6): shut down requested (1) [ 125.557706][ T7745] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.641606][T10515] loop9: detected capacity change from 0 to 8192 [ 125.672433][T10515] loop9: p1 p3 [ 125.676102][T10515] loop9: p1 start 51314688 is beyond EOD, truncated [ 125.677949][T10526] loop6: detected capacity change from 0 to 1024 [ 125.682772][T10515] loop9: p3 start 65536 is beyond EOD, truncated [ 125.719686][T10526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.754463][ T9998] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.783932][T10526] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4193: comm syz.6.2910: Allocating blocks 497-513 which overlap fs metadata [ 125.800885][T10526] EXT4-fs (loop6): pa ffff888106ea6620: logic 16, phys. 145, len 23 [ 125.809247][T10526] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 125.837023][ T7745] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.855993][ T9998] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.896235][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2906'. [ 125.908491][ T9998] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.966446][ T9998] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.997283][T10552] netlink: 'syz.4.2909': attribute type 10 has an invalid length. [ 126.011134][T10551] wireguard0: entered promiscuous mode [ 126.016797][T10551] wireguard0: entered allmulticast mode [ 126.030179][T10552] team0: Port device dummy0 added [ 126.040951][T10552] netlink: 'syz.4.2909': attribute type 10 has an invalid length. [ 126.060682][T10552] team0: Port device dummy0 removed [ 126.068904][T10552] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.089852][ T9998] bridge_slave_1: left allmulticast mode [ 126.095594][ T9998] bridge_slave_1: left promiscuous mode [ 126.101480][ T9998] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.132725][ T9998] bridge_slave_0: left allmulticast mode [ 126.138419][ T9998] bridge_slave_0: left promiscuous mode [ 126.144288][ T9998] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.198897][T10561] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 126.231916][T10561] vhci_hcd: invalid port number 96 [ 126.237520][T10561] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 126.295089][ T9998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.311878][ T9998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.324933][ T9998] bond0 (unregistering): Released all slaves [ 126.423316][ T9998] hsr_slave_0: left promiscuous mode [ 126.431518][ T9998] hsr_slave_1: left promiscuous mode [ 126.437441][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.445401][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.453309][ T9998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.460779][ T9998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.487712][ T9998] veth1_macvtap: left promiscuous mode [ 126.493345][ T9998] veth0_macvtap: left promiscuous mode [ 126.498889][ T9998] veth1_vlan: left promiscuous mode [ 126.504437][ T9998] veth0_vlan: left promiscuous mode [ 126.526184][T10595] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.573385][ T9998] team0 (unregistering): Port device team_slave_1 removed [ 126.582870][ T9998] team0 (unregistering): Port device team_slave_0 removed [ 126.629975][T10590] wireguard0: entered promiscuous mode [ 126.635647][T10590] wireguard0: entered allmulticast mode [ 126.746656][T10536] chnl_net:caif_netlink_parms(): no params data found [ 126.754463][T10610] loop9: detected capacity change from 0 to 512 [ 126.799571][T10610] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.860827][T10610] ext4 filesystem being mounted at /26/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.872700][T10536] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.879947][T10536] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.890024][T10536] bridge_slave_0: entered allmulticast mode [ 126.942468][T10536] bridge_slave_0: entered promiscuous mode [ 126.956952][T10536] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.964200][T10536] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.029478][T10117] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.214199][T10628] loop9: detected capacity change from 0 to 512 [ 127.252005][T10628] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.2938: inode has both inline data and extents flags [ 127.268920][T10536] bridge_slave_1: entered allmulticast mode [ 127.277818][T10628] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.2938: couldn't read orphan inode 15 (err -117) [ 127.291143][T10536] bridge_slave_1: entered promiscuous mode [ 127.297822][T10628] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.352853][T10536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.382618][T10536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.419318][T10628] loop9: detected capacity change from 512 to 64 [ 127.444873][T10536] team0: Port device team_slave_0 added [ 127.454251][T10630] syz.9.2938: attempt to access beyond end of device [ 127.454251][T10630] loop9: rw=2051, sector=506, nr_sectors = 2 limit=64 [ 127.455126][T10536] team0: Port device team_slave_1 added [ 127.485686][T10630] EXT4-fs (loop9): discard request in group:0 block:252 count:1 failed with -5 [ 127.532372][T10630] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: IO failure [ 127.534351][T10536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.547747][T10536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.574055][T10536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.574960][T10630] syz.9.2938: attempt to access beyond end of device [ 127.574960][T10630] loop9: rw=2051, sector=510, nr_sectors = 2 limit=64 [ 127.631979][T10630] EXT4-fs (loop9): discard request in group:0 block:254 count:1 failed with -5 [ 127.635446][T10536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.647934][T10536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.673982][T10536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.686173][T10630] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6667: IO failure [ 127.706359][T10536] hsr_slave_0: entered promiscuous mode [ 127.712720][T10536] hsr_slave_1: entered promiscuous mode [ 127.718695][T10536] debugfs: 'hsr0' already exists in 'hsr' [ 127.724515][T10536] Cannot create hsr debugfs directory [ 127.791534][T10117] EXT4-fs warning (device loop9): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 127.820880][T10536] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.855078][T10117] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.866404][T10536] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.932415][T10536] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.017568][T10536] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.046809][T10033] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.049627][T10661] loop6: detected capacity change from 0 to 512 [ 128.066083][T10661] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2952: inode has both inline data and extents flags [ 128.084791][T10661] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2952: couldn't read orphan inode 15 (err -117) [ 128.102325][T10661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.136656][T10536] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 128.148917][T10661] loop6: detected capacity change from 512 to 64 [ 128.157327][T10661] syz.6.2952: attempt to access beyond end of device [ 128.157327][T10661] loop6: rw=2051, sector=506, nr_sectors = 2 limit=64 [ 128.172656][T10033] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.177718][T10661] EXT4-fs (loop6): discard request in group:0 block:252 count:1 failed with -5 [ 128.192144][T10661] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: IO failure [ 128.196582][T10536] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 128.208371][T10661] syz.6.2952: attempt to access beyond end of device [ 128.208371][T10661] loop6: rw=2051, sector=510, nr_sectors = 2 limit=64 [ 128.223384][T10536] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 128.234759][T10536] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 128.243988][T10661] EXT4-fs (loop6): discard request in group:0 block:254 count:1 failed with -5 [ 128.257135][T10661] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: IO failure [ 128.270889][T10033] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.290830][ T7745] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 128.355990][T10033] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.371130][T10684] syzkaller0: entered allmulticast mode [ 128.385154][T10536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.393042][ T9855] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.405445][T10684] syzkaller0 (unregistering): left allmulticast mode [ 128.478350][T10536] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.497249][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.504468][ T9996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.514335][T10033] bridge_slave_1: left allmulticast mode [ 128.520067][T10033] bridge_slave_1: left promiscuous mode [ 128.526000][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.534985][T10033] bridge_slave_0: left allmulticast mode [ 128.540791][T10033] bridge_slave_0: left promiscuous mode [ 128.546529][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.697603][T10033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.718047][T10033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.737935][T10033] bond0 (unregistering): Released all slaves [ 128.758484][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.765638][ T9996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.821277][T10033] hsr_slave_0: left promiscuous mode [ 128.827990][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 128.828074][ T29] audit: type=1326 audit(1761939377.932:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.4.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04f9cefc9 code=0x7ffc0000 [ 128.857976][ T29] audit: type=1326 audit(1761939377.932:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.4.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04f9cefc9 code=0x7ffc0000 [ 128.886718][T10033] hsr_slave_1: left promiscuous mode [ 128.897832][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.898050][ T29] audit: type=1326 audit(1761939377.932:4086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.4.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa04f9cefc9 code=0x7ffc0000 [ 128.905751][T10033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.929443][ T29] audit: type=1400 audit(1761939377.932:4087): avc: denied { kexec_image_load } for pid=10701 comm="syz.4.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 128.956569][ T29] audit: type=1326 audit(1761939377.932:4088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.4.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04f9cefc9 code=0x7ffc0000 [ 128.980387][ T29] audit: type=1400 audit(1761939377.964:4089): avc: denied { name_bind } for pid=10703 comm="syz.1.2965" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 129.001720][ T29] audit: type=1326 audit(1761939377.974:4090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10701 comm="syz.4.2964" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa04f9cefc9 code=0x7ffc0000 [ 129.026009][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.033403][T10033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.045992][T10033] veth1_macvtap: left promiscuous mode [ 129.051502][T10033] veth0_macvtap: left promiscuous mode [ 129.068428][T10033] veth1_vlan: left promiscuous mode [ 129.073985][T10033] veth0_vlan: left promiscuous mode [ 129.156423][T10033] team0 (unregistering): Port device team_slave_1 removed [ 129.166395][T10033] team0 (unregistering): Port device team_slave_0 removed [ 129.196791][T10536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.246655][T10664] chnl_net:caif_netlink_parms(): no params data found [ 129.286659][T10536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.317326][ T29] audit: type=1326 audit(1761939378.436:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190f1fefc9 code=0x7ffc0000 [ 129.341242][ T29] audit: type=1326 audit(1761939378.436:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190f1fefc9 code=0x7ffc0000 [ 129.365027][ T29] audit: type=1326 audit(1761939378.436:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10740 comm="syz.1.2978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f190f1fefc9 code=0x7ffc0000 [ 129.417044][T10664] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.424302][T10664] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.431637][T10664] bridge_slave_0: entered allmulticast mode [ 129.438433][T10664] bridge_slave_0: entered promiscuous mode [ 129.464341][T10752] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2980'. [ 129.475563][T10664] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.482679][T10664] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.490229][T10664] bridge_slave_1: entered allmulticast mode [ 129.497578][T10664] bridge_slave_1: entered promiscuous mode [ 129.531888][T10664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.553996][T10664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.563353][T10691] chnl_net:caif_netlink_parms(): no params data found [ 129.586735][T10536] veth0_vlan: entered promiscuous mode [ 129.610782][T10664] team0: Port device team_slave_0 added [ 129.625253][T10664] team0: Port device team_slave_1 added [ 129.646685][T10536] veth1_vlan: entered promiscuous mode [ 129.659743][T10691] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.667117][T10691] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.674740][T10691] bridge_slave_0: entered allmulticast mode [ 129.681559][T10691] bridge_slave_0: entered promiscuous mode [ 129.701292][T10664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.708339][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.734478][T10664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.746227][T10664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.753229][T10664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.779162][T10664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.799508][T10033] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.815762][T10691] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.822858][T10691] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.838635][T10691] bridge_slave_1: entered allmulticast mode [ 129.845729][T10691] bridge_slave_1: entered promiscuous mode [ 129.861796][T10033] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.924841][T10691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.937227][T10536] veth0_macvtap: entered promiscuous mode [ 129.953617][T10691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.965941][T10664] hsr_slave_0: entered promiscuous mode [ 129.976933][T10664] hsr_slave_1: entered promiscuous mode [ 129.982920][T10664] debugfs: 'hsr0' already exists in 'hsr' [ 129.988720][T10664] Cannot create hsr debugfs directory [ 129.995161][T10536] veth1_macvtap: entered promiscuous mode [ 130.005621][T10536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.037415][T10033] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.069427][T10536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.124774][T10691] team0: Port device team_slave_0 added [ 130.131843][T10691] team0: Port device team_slave_1 added [ 130.179026][T10033] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.248158][ T269] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.284942][ T1703] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.314308][T10691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.321342][T10691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.347401][T10691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.359742][ T1703] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.380169][T10691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.387304][T10691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.413297][T10691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.442700][T10664] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.463447][ T1703] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.509333][T10664] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.541758][T10691] hsr_slave_0: entered promiscuous mode [ 130.548032][T10691] hsr_slave_1: entered promiscuous mode [ 130.564142][T10691] debugfs: 'hsr0' already exists in 'hsr' [ 130.569987][T10691] Cannot create hsr debugfs directory [ 130.656590][T10664] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.694940][T10033] hsr_slave_0: left promiscuous mode [ 130.700918][T10033] hsr_slave_1: left promiscuous mode [ 130.706969][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.714481][T10033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.723135][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.730647][T10033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.741536][T10033] veth1_macvtap: left promiscuous mode [ 130.747146][T10033] veth0_macvtap: left promiscuous mode [ 130.758467][T10033] veth1_vlan: left promiscuous mode [ 130.767819][T10033] veth0_vlan: left promiscuous mode [ 130.884230][T10664] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.986826][T10664] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 130.999599][T10664] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 131.009011][T10664] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 131.019795][T10850] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3018'. [ 131.029242][T10664] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 131.110504][T10664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.123722][T10664] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.172221][ T9996] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.179898][ T9996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.212652][ T9996] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.220332][ T9996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.388885][T10691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 131.409658][T10691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 131.432833][T10691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 131.443694][T10691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 131.490748][T10691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.545332][T10691] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.586599][T10664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.653118][T10009] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.662007][T10009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.761751][ T9990] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.769565][ T9990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.832632][T10691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.843104][T10691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.907159][T10901] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 131.945056][T10691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.975279][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3034'. [ 131.984552][T10912] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3034'. [ 131.997478][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3034'. [ 132.007209][T10912] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3034'. [ 132.016388][T10912] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3034'. [ 132.041027][T10664] veth0_vlan: entered promiscuous mode [ 132.061387][T10664] veth1_vlan: entered promiscuous mode [ 132.092387][T10664] veth0_macvtap: entered promiscuous mode [ 132.104438][T10664] veth1_macvtap: entered promiscuous mode [ 132.133314][T10664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.141133][T10691] veth0_vlan: entered promiscuous mode [ 132.151011][T10691] veth1_vlan: entered promiscuous mode [ 132.159492][T10664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.182631][T10026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.193547][T10026] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.203299][T10928] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.206467][T10691] veth0_macvtap: entered promiscuous mode [ 132.219539][T10026] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.237032][T10691] veth1_macvtap: entered promiscuous mode [ 132.248584][T10026] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.269868][T10691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.301468][T10691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.314521][ T1703] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.354168][ T1703] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.382762][ T1703] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.406789][ T1703] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.456634][T10953] wireguard0: entered promiscuous mode [ 132.462228][T10953] wireguard0: entered allmulticast mode [ 132.489787][T10956] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3048'. [ 132.501811][T10956] 0X: renamed from caif0 [ 132.534124][T10956] 0X: entered allmulticast mode [ 132.539367][T10956] net_ratelimit: 20 callbacks suppressed [ 132.539379][T10956] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 132.615454][T10970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3054'. [ 132.627442][T10973] netlink: 'syz.3.3056': attribute type 10 has an invalid length. [ 132.640088][T10973] team0: Port device dummy0 added [ 132.675747][T10973] netlink: 'syz.3.3056': attribute type 10 has an invalid length. [ 132.699552][T10973] team0: Port device dummy0 removed [ 132.705105][T10978] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3057'. [ 132.711151][T10973] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 132.723542][T10978] netlink: 'syz.0.3057': attribute type 1 has an invalid length. [ 132.731523][T10978] netlink: 'syz.0.3057': attribute type 2 has an invalid length. [ 132.871448][T11002] loop3: detected capacity change from 0 to 512 [ 132.906540][T11002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.924855][T11002] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.961754][T10536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.368309][T11058] Falling back ldisc for ttyS3. [ 133.569643][T11094] wg1: entered promiscuous mode [ 133.574669][T11094] wg1: entered allmulticast mode [ 133.629185][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 133.629201][ T29] audit: type=1400 audit(1761939382.972:4268): avc: denied { read } for pid=11095 comm="syz.4.3107" dev="nsfs" ino=4026533176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 133.657407][ T29] audit: type=1400 audit(1761939382.972:4269): avc: denied { open } for pid=11095 comm="syz.4.3107" path="net:[4026533176]" dev="nsfs" ino=4026533176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 133.687021][ T29] audit: type=1400 audit(1761939383.024:4270): avc: denied { create } for pid=11095 comm="syz.4.3107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.708384][ T29] audit: type=1400 audit(1761939383.045:4271): avc: denied { read } for pid=11095 comm="syz.4.3107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 133.730232][ T29] audit: type=1400 audit(1761939383.066:4272): avc: denied { create } for pid=11104 comm="syz.2.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.750504][ T29] audit: type=1400 audit(1761939383.066:4273): avc: denied { write } for pid=11104 comm="syz.2.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.770257][ T29] audit: type=1400 audit(1761939383.066:4274): avc: denied { connect } for pid=11104 comm="syz.2.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.789971][ T29] audit: type=1400 audit(1761939383.066:4275): avc: denied { name_connect } for pid=11104 comm="syz.2.3110" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 133.818224][ T29] audit: type=1326 audit(1761939383.150:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11108 comm="syz.1.3112" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f190f1fefc9 code=0x0 [ 133.866543][ T29] audit: type=1400 audit(1761939383.213:4277): avc: denied { read } for pid=11112 comm="syz.2.3114" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 134.333212][T11185] __nla_validate_parse: 2 callbacks suppressed [ 134.333225][T11185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3148'. [ 134.427493][T11191] loop3: detected capacity change from 0 to 512 [ 134.446902][T11191] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3151: couldn't read orphan inode 26 (err -116) [ 134.459438][T11191] EXT4-fs (loop3): Remounting filesystem read-only [ 134.466788][T11191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.479777][T11191] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.504572][T11198] netlink: 'syz.2.3153': attribute type 4 has an invalid length. [ 134.513754][T10536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.664552][T11212] xt_limit: Overflow, try lower: 0/0 [ 134.835779][T11239] netlink: 'syz.3.3171': attribute type 1 has an invalid length. [ 135.136216][T11285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3192'. [ 135.145315][T11285] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3192'. [ 135.166990][T11287] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3193'. [ 135.184753][T11287] 0X: renamed from caif0 [ 135.193319][T11287] 0X: entered allmulticast mode [ 135.198739][T11287] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 135.389490][T11320] random: crng reseeded on system resumption [ 135.594423][ T1703] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.812503][T11367] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11367 comm=syz.1.3229 [ 136.099409][T11394] netlink: 35 bytes leftover after parsing attributes in process `syz.0.3242'. [ 136.108473][T11394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3242'. [ 136.182100][T11405] netlink: 'syz.1.3247': attribute type 1 has an invalid length. [ 136.437710][T11423] SELinux: policydb version 4376 does not match my version range 15-35 [ 136.447478][T11423] SELinux: failed to load policy [ 136.525996][T11419] loop3: detected capacity change from 0 to 32768 [ 136.559400][T11436] macvtap0: refused to change device tx_queue_len [ 136.618596][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3264'. [ 136.627627][T11440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3264'. [ 136.636715][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3264'. [ 136.650356][T11440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3264'. [ 136.659469][T11440] netlink: 'syz.1.3264': attribute type 6 has an invalid length. [ 136.830791][T11461] hub 2-0:1.0: USB hub found [ 136.835849][T11461] hub 2-0:1.0: 8 ports detected [ 137.522896][ T3577] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.586826][T11536] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 137.593439][T11536] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 137.601845][T11536] vhci_hcd vhci_hcd.0: Device attached [ 137.669899][T11537] vhci_hcd: connection closed [ 137.670171][T10026] vhci_hcd: stop threads [ 137.679265][T10026] vhci_hcd: release socket [ 137.683873][T10026] vhci_hcd: disconnect device [ 137.763740][T11555] SELinux: policydb version 0 does not match my version range 15-35 [ 137.783889][T11555] SELinux: failed to load policy [ 137.799568][T11569] netlink: 'syz.2.3322': attribute type 9 has an invalid length. [ 137.842210][T10026] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.861937][T10026] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.872372][T10026] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.882076][T10026] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.908968][T11579] tipc: Started in network mode [ 137.913961][T11579] tipc: Node identity ac14140f, cluster identity 4711 [ 137.932626][T11579] tipc: New replicast peer: 255.255.255.83 [ 137.938691][T11579] tipc: Enabled bearer , priority 10 [ 137.994061][T11587] SELinux: failed to load policy [ 138.026273][T11592] bond_slave_0: entered promiscuous mode [ 138.032147][T11592] bond_slave_1: entered promiscuous mode [ 138.038016][T11592] dummy0: entered promiscuous mode [ 138.047207][T11592] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 138.059538][T11592] bond_slave_0: left promiscuous mode [ 138.065205][T11592] bond_slave_1: left promiscuous mode [ 138.070596][T11592] dummy0: left promiscuous mode [ 138.363198][T11635] netlink: 'syz.0.3354': attribute type 39 has an invalid length. [ 138.451419][ T29] kauditd_printk_skb: 277 callbacks suppressed [ 138.451435][ T29] audit: type=1326 audit(1761939388.033:4555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.3.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da6a6efc9 code=0x7ffc0000 [ 138.502734][ T29] audit: type=1326 audit(1761939388.064:4556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.3.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da6a6efc9 code=0x7ffc0000 [ 138.575979][ T29] audit: type=1326 audit(1761939388.138:4557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.3.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f2da6a6efc9 code=0x7ffc0000 [ 138.583303][T11645] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.599506][ T29] audit: type=1326 audit(1761939388.138:4558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.3.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da6a6efc9 code=0x7ffc0000 [ 138.628734][T11645] vhci_hcd: invalid port number 96 [ 138.630236][ T29] audit: type=1326 audit(1761939388.138:4559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11640 comm="syz.3.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2da6a6efc9 code=0x7ffc0000 [ 138.635339][T11645] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 138.690208][ T29] audit: type=1400 audit(1761939388.274:4560): avc: denied { mount } for pid=11657 comm="syz.4.3363" name="/" dev="ramfs" ino=37344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 138.859054][ T29] audit: type=1400 audit(1761939388.463:4561): avc: denied { sqpoll } for pid=11678 comm="syz.4.3372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 138.901915][ T9] tipc: Node number set to 2886997007 [ 139.044960][T11691] vcan0: entered allmulticast mode [ 139.052683][T11691] vcan0: left allmulticast mode [ 139.069349][ T29] audit: type=1326 audit(1761939388.621:4562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7fcb285e67 code=0x7ffc0000 [ 139.093187][ T29] audit: type=1326 audit(1761939388.621:4563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7fcb22b099 code=0x7ffc0000 [ 139.116821][ T29] audit: type=1326 audit(1761939388.621:4564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11688 comm="syz.0.3377" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7fcb285e67 code=0x7ffc0000 [ 139.238149][T11697] __nla_validate_parse: 8 callbacks suppressed [ 139.238167][T11697] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3380'. [ 139.444118][T11714] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3388'. [ 139.584940][T11722] loop3: detected capacity change from 0 to 512 [ 139.603770][T11726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3395'. [ 139.627726][T11722] EXT4-fs (loop3): orphan cleanup on readonly fs [ 139.635761][T11726] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3395'. [ 139.664606][T11722] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.3393: corrupted inode contents [ 139.692755][T11722] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 139.729999][T11722] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #15: comm syz.3.3393: corrupted inode contents [ 139.752568][T11722] EXT4-fs error (device loop3): ext4_evict_inode:302: inode #15: comm syz.3.3393: mark_inode_dirty error [ 139.785637][T11722] EXT4-fs (loop3): 1 orphan inode deleted [ 139.794263][T11733] SELinux: failed to load policy [ 139.794420][T11722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 139.842235][T11742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3401'. [ 139.853772][T11743] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3400'. [ 139.863192][T11743] 0X: renamed from caif0 [ 139.863740][T10536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.883178][T11743] 0X: entered allmulticast mode [ 139.888502][T11743] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 140.578522][T11826] Falling back ldisc for ttyS3. [ 140.609309][T11834] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 140.617697][T11834] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 141.249275][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'. [ 141.602288][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3494'. [ 141.686920][T11966] SELinux: ebitmap: truncated map [ 141.693215][T11966] SELinux: failed to load policy [ 141.898750][T12000] netlink: 'syz.4.3514': attribute type 1 has an invalid length. [ 141.966200][T12014] netlink: 'syz.4.3530': attribute type 4 has an invalid length. [ 141.983894][T12015] xt_limit: Overflow, try lower: 0/0 [ 142.140810][T12031] SELinux: failed to load policy [ 142.763990][T12052] netlink: 'syz.1.3536': attribute type 4 has an invalid length. [ 142.852735][T12063] random: crng reseeded on system resumption [ 142.904074][T12065] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3543'. [ 142.917803][T12065] netem: change failed [ 142.999831][T12081] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3553'. [ 143.026307][T12081] 1X: renamed from 60X [ 143.036109][T12081] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 143.145758][T12098] netem: change failed [ 143.523736][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 143.523752][ T29] audit: type=1400 audit(1761939393.345:4807): avc: denied { open } for pid=12108 comm="syz.4.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 143.549429][ T29] audit: type=1400 audit(1761939393.345:4808): avc: denied { kernel } for pid=12108 comm="syz.4.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 143.569110][ T29] audit: type=1400 audit(1761939393.345:4809): avc: denied { tracepoint } for pid=12108 comm="syz.4.3565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 143.917950][ T29] audit: type=1326 audit(1761939393.765:4810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.2.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 143.954959][ T29] audit: type=1326 audit(1761939393.765:4811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.2.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 143.978832][ T29] audit: type=1326 audit(1761939393.765:4812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.2.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 144.002791][ T29] audit: type=1326 audit(1761939393.765:4813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.2.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 144.026346][ T29] audit: type=1326 audit(1761939393.797:4814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12136 comm="syz.2.3578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 144.069706][ T29] audit: type=1326 audit(1761939393.933:4815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12142 comm="syz.2.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 144.094029][ T29] audit: type=1326 audit(1761939393.933:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12142 comm="syz.2.3581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 144.165750][T12154] netlink: 'syz.2.3585': attribute type 20 has an invalid length. [ 144.173674][T12154] __nla_validate_parse: 1 callbacks suppressed [ 144.173690][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3585'. [ 144.236779][T12154] netlink: 'syz.2.3585': attribute type 20 has an invalid length. [ 144.244738][T12154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3585'. [ 144.348729][T12169] xt_hashlimit: max too large, truncated to 1048576 [ 144.476667][T12185] SELinux: policydb version 4376 does not match my version range 15-35 [ 144.485235][T12185] SELinux: failed to load policy [ 144.515959][T12187] netlink: 'syz.4.3602': attribute type 20 has an invalid length. [ 144.523987][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3602'. [ 144.541504][T10033] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.549901][T12187] netlink: 'syz.4.3602': attribute type 20 has an invalid length. [ 144.552747][T10033] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.558070][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3602'. [ 144.567384][T10033] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.588401][T10033] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.698905][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3609'. [ 144.707984][T12208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3609'. [ 144.717114][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3609'. [ 144.735486][T12208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3609'. [ 144.744579][T12208] netlink: 'syz.4.3609': attribute type 6 has an invalid length. [ 144.777247][T12215] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3614'. [ 144.786365][T12215] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3614'. [ 144.951253][T12235] xt_hashlimit: max too large, truncated to 1048576 [ 145.054197][T12254] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12254 comm=syz.2.3631 [ 145.067465][T12254] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12254 comm=syz.2.3631 [ 145.105755][T12256] 1X: renamed from 60X [ 145.114410][T12256] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 145.171965][T12264] loop3: detected capacity change from 0 to 512 [ 145.203586][T12264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.217017][T12264] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.302969][T10536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.371512][T12285] SELinux: ebitmap: map size 68 does not match my size 64 (high bit was 0) [ 145.380633][T12285] SELinux: failed to load policy [ 145.576969][T12316] xt_hashlimit: max too large, truncated to 1048576 [ 145.866348][T12353] block device autoloading is deprecated and will be removed. [ 145.903323][T12359] SELinux: failed to load policy [ 146.016185][T12349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.031882][T12349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.183474][T12396] netlink: 'syz.3.3696': attribute type 9 has an invalid length. [ 146.216590][T10033] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.225543][T10033] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.234400][T10033] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.243235][T10033] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.283384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.383693][T12420] tipc: Started in network mode [ 146.388751][T12420] tipc: Node identity ac14140f, cluster identity 4711 [ 146.395632][T12420] tipc: New replicast peer: 255.255.255.83 [ 146.401853][T12420] tipc: Enabled bearer , priority 10 [ 146.644550][T12441] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12441 comm=syz.0.3718 [ 146.657368][T12441] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12441 comm=syz.0.3718 [ 146.857569][T12475] bond_slave_0: entered promiscuous mode [ 146.863367][T12475] bond_slave_1: entered promiscuous mode [ 146.869159][T12475] dummy0: entered promiscuous mode [ 146.885384][T12475] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 146.904840][T12475] bond_slave_0: left promiscuous mode [ 146.910275][T12475] bond_slave_1: left promiscuous mode [ 146.915787][T12475] dummy0: left promiscuous mode [ 146.950949][T12481] vcan0: entered allmulticast mode [ 146.956412][T12481] vcan0: left allmulticast mode [ 147.386484][T12530] bond_slave_0: entered promiscuous mode [ 147.392292][T12530] bond_slave_1: entered promiscuous mode [ 147.400713][T12530] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 147.413050][T12530] bond_slave_0: left promiscuous mode [ 147.418588][T12530] bond_slave_1: left promiscuous mode [ 147.464313][ T10] tipc: Node number set to 2886997007 [ 148.251299][T12578] SELinux: failed to load policy [ 148.636220][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 148.636298][ T29] audit: type=1400 audit(1761939398.731:4972): avc: denied { create } for pid=12611 comm="syz.1.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 148.673446][ T29] audit: type=1400 audit(1761939398.752:4973): avc: denied { write } for pid=12611 comm="syz.1.3794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 149.119613][ T29] audit: type=1400 audit(1761939399.225:4974): avc: denied { cpu } for pid=12626 comm="syz.3.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 149.229061][T12637] loop3: detected capacity change from 0 to 512 [ 149.236455][T12637] EXT4-fs: Ignoring removed bh option [ 149.250772][T12637] EXT4-fs: Ignoring removed oldalloc option [ 149.256966][T12637] ext4: Unknown parameter 'dont_measure' [ 149.309652][T12639] loop3: detected capacity change from 0 to 128 [ 149.401122][ T29] audit: type=1400 audit(1761939399.529:4975): avc: denied { setopt } for pid=12652 comm="syz.0.3809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 149.426849][T12653] wg1: entered promiscuous mode [ 149.432034][T12653] wg1: entered allmulticast mode [ 149.536502][ T29] audit: type=1326 audit(1761939399.666:4976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12665 comm="syz.0.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 149.569326][ T29] audit: type=1326 audit(1761939399.697:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12665 comm="syz.0.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 149.592952][ T29] audit: type=1326 audit(1761939399.697:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12665 comm="syz.0.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 149.616593][ T29] audit: type=1326 audit(1761939399.697:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12665 comm="syz.0.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 149.640264][ T29] audit: type=1326 audit(1761939399.697:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12665 comm="syz.0.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 149.663885][ T29] audit: type=1326 audit(1761939399.697:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12665 comm="syz.0.3817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 149.789962][T12674] __nla_validate_parse: 11 callbacks suppressed [ 149.789978][T12674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3821'. [ 149.859836][T12680] loop3: detected capacity change from 0 to 512 [ 149.866763][T12680] EXT4-fs: Ignoring removed i_version option [ 149.872876][T12680] EXT4-fs: Ignoring removed bh option [ 149.889157][T12680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.902484][T12680] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.927564][T10536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.937409][T12693] wireguard0: entered promiscuous mode [ 149.943687][T12693] wireguard0: entered allmulticast mode [ 150.114785][T12720] random: crng reseeded on system resumption [ 150.305703][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3846'. [ 150.314697][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3846'. [ 150.323701][T12742] netlink: 'syz.1.3846': attribute type 20 has an invalid length. [ 150.332436][T12742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3846'. [ 150.341443][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3846'. [ 150.350795][T12742] netlink: 'syz.1.3846': attribute type 20 has an invalid length. [ 150.390519][T12746] x_tables: unsorted entry at hook 1 [ 150.815718][T12783] netlink: 'syz.4.3864': attribute type 1 has an invalid length. [ 150.823614][T12783] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.3864'. [ 150.972088][T12803] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3884'. [ 151.024279][T12812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3878'. [ 151.088454][T12816] netlink: 87 bytes leftover after parsing attributes in process `syz.3.3880'. [ 151.268740][T12834] ip6gre1: entered allmulticast mode [ 151.441507][T12859] netlink: 'syz.1.3900': attribute type 1 has an invalid length. [ 151.449367][T12859] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.3900'. [ 151.527868][T12864] ip6gre1: entered allmulticast mode [ 151.627989][T12880] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12880 comm=syz.1.3910 [ 151.660407][T12880] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12880 comm=syz.1.3910 [ 152.000223][T12946] netlink: 'syz.1.3944': attribute type 10 has an invalid length. [ 152.009798][T12946] dummy0: entered promiscuous mode [ 152.020043][T12946] bond0: (slave dummy0): Releasing backup interface [ 152.037063][T12946] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 152.104029][T12960] x_tables: duplicate underflow at hook 1 [ 152.189016][T12972] netlink: 'syz.2.3956': attribute type 3 has an invalid length. [ 152.507585][T13027] netlink: 'syz.2.3980': attribute type 2 has an invalid length. [ 152.648764][T13039] netem: change failed [ 152.690138][T13044] netlink: 'syz.2.3988': attribute type 1 has an invalid length. [ 153.282365][T13141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.289639][T13141] IPv6: NLM_F_CREATE should be set when creating new route [ 153.510623][ T29] kauditd_printk_skb: 436 callbacks suppressed [ 153.510639][ T29] audit: type=1326 audit(1761939403.834:5418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 153.540914][ T29] audit: type=1326 audit(1761939403.834:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 153.566845][ T29] audit: type=1326 audit(1761939403.907:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 153.590667][ T29] audit: type=1326 audit(1761939403.907:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 153.614548][ T29] audit: type=1326 audit(1761939403.907:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 153.640403][T13175] msdos: Unknown parameter '' [ 153.641939][ T29] audit: type=1326 audit(1761939403.981:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 153.668874][ T29] audit: type=1326 audit(1761939403.981:5424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 153.668982][ T29] audit: type=1326 audit(1761939403.981:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 153.669008][ T29] audit: type=1326 audit(1761939403.981:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 153.669034][ T29] audit: type=1326 audit(1761939403.981:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13174 comm="syz.0.4048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 154.114953][T13250] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 154.131510][T13252] SELinux: policydb version -2036594179 does not match my version range 15-35 [ 154.140824][T13252] SELinux: failed to load policy [ 154.431156][T13304] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 154.462603][T13309] netlink: 'syz.2.4108': attribute type 3 has an invalid length. [ 154.584396][T13325] vlan2: entered allmulticast mode [ 154.597767][T13327] tipc: Enabling of bearer rejected, failed to enable media [ 154.755602][T13349] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 155.181222][T13390] bond1: entered promiscuous mode [ 155.186388][T13390] bond1: entered allmulticast mode [ 155.202742][T13390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.213983][T13390] bond1 (unregistering): Released all slaves [ 155.635743][T13428] __nla_validate_parse: 22 callbacks suppressed [ 155.635765][T13428] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4165'. [ 155.643140][T13432] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4167'. [ 155.724781][T13440] netlink: 'syz.4.4171': attribute type 3 has an invalid length. [ 155.732757][T13440] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4171'. [ 155.783970][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4174'. [ 155.793031][T13446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4174'. [ 156.120339][T13486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4192'. [ 156.129779][T13486] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4192'. [ 156.468905][T13524] pim6reg: entered allmulticast mode [ 156.477658][T13524] pim6reg: left allmulticast mode [ 156.536653][T13531] 9pnet_fd: p9_fd_create_unix (13531): problem connecting socket: ./file0: -2 [ 156.567628][T13534] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 156.574269][T13534] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.581940][T13534] vhci_hcd vhci_hcd.0: Device attached [ 156.592694][T13536] vhci_hcd: connection closed [ 156.592854][T10048] vhci_hcd: stop threads [ 156.601866][T10048] vhci_hcd: release socket [ 156.606453][T10048] vhci_hcd: disconnect device [ 156.765841][T13555] vlan2: entered allmulticast mode [ 156.765861][T13555] bridge_slave_0: entered allmulticast mode [ 157.153186][T13584] bond1: entered promiscuous mode [ 157.153203][T13584] bond1: entered allmulticast mode [ 157.153360][T13584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.162434][T13584] bond1 (unregistering): Released all slaves [ 157.459240][T13606] pim6reg: entered allmulticast mode [ 157.461928][T13606] pim6reg: left allmulticast mode [ 157.625102][T13616] loop3: detected capacity change from 0 to 512 [ 157.633126][T13616] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 157.645189][T13618] netlink: 87 bytes leftover after parsing attributes in process `syz.4.4249'. [ 157.646276][T13620] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13620 comm=syz.0.4251 [ 157.667694][T13616] EXT4-fs (loop3): 1 truncate cleaned up [ 157.673766][T13616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.695715][T13620] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13620 comm=syz.0.4251 [ 157.734787][T13616] EXT4-fs error (device loop3): ext4_xattr_block_find:1874: inode #15: comm syz.3.4260: corrupted xattr block 33: invalid header [ 157.771789][T13616] EXT4-fs (loop3): Remounting filesystem read-only [ 157.779796][T13630] bond2: entered promiscuous mode [ 157.784904][T13630] bond2: entered allmulticast mode [ 157.804714][T13630] 8021q: adding VLAN 0 to HW filter on device bond2 [ 157.812534][T10536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.829434][T13630] bond2 (unregistering): Released all slaves [ 157.862868][T13638] dvmrp0: entered allmulticast mode [ 157.902147][T13638] dvmrp0: left allmulticast mode [ 158.170766][T13668] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 158.213979][T13670] dummy0: left promiscuous mode [ 158.223644][T13670] 1X: left allmulticast mode [ 158.239902][T13670] wg1: left promiscuous mode [ 158.244558][T13670] wg1: left allmulticast mode [ 158.260649][T13670] bridge_slave_1: left promiscuous mode [ 158.278898][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.302224][T13670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.358217][T13670] vxlan0: left promiscuous mode [ 158.364468][T13670] veth2: left promiscuous mode [ 158.369321][T13670] veth2: left allmulticast mode [ 158.379753][T13670] ip6gre1: left allmulticast mode [ 158.408258][T13673] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.418170][T13673] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.430407][T10033] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.438908][T10033] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.459344][T10033] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.468317][T10033] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.478479][T10033] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.487361][T10033] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.634777][T13698] syz.4.4288: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 158.649420][T13698] CPU: 1 UID: 0 PID: 13698 Comm: syz.4.4288 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.649439][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 158.649525][T13698] Call Trace: [ 158.649529][T13698] [ 158.649533][T13698] __dump_stack+0x1d/0x30 [ 158.649549][T13698] dump_stack_lvl+0xe8/0x140 [ 158.649561][T13698] dump_stack+0x15/0x1b [ 158.649572][T13698] warn_alloc+0x12b/0x1a0 [ 158.649676][T13698] ? __rcu_read_unlock+0x4f/0x70 [ 158.649702][T13698] __vmalloc_node_range_noprof+0x9d/0xed0 [ 158.649745][T13698] ? __futex_wait+0x1fa/0x260 [ 158.649773][T13698] ? __pfx_futex_wake_mark+0x10/0x10 [ 158.649793][T13698] ? __rcu_read_unlock+0x4f/0x70 [ 158.649841][T13698] ? avc_has_perm_noaudit+0x1b1/0x200 [ 158.649867][T13698] vmalloc_user_noprof+0x7d/0xb0 [ 158.649901][T13698] ? xskq_create+0x80/0xe0 [ 158.649976][T13698] xskq_create+0x80/0xe0 [ 158.650033][T13698] xsk_init_queue+0x95/0xf0 [ 158.650055][T13698] xsk_setsockopt+0x3f5/0x640 [ 158.650075][T13698] ? __pfx_xsk_setsockopt+0x10/0x10 [ 158.650095][T13698] __sys_setsockopt+0x184/0x200 [ 158.650193][T13698] __x64_sys_setsockopt+0x64/0x80 [ 158.650225][T13698] x64_sys_call+0x20ec/0x3000 [ 158.650248][T13698] do_syscall_64+0xd2/0x200 [ 158.650296][T13698] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.650369][T13698] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.650401][T13698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.650488][T13698] RIP: 0033:0x7fa04f9cefc9 [ 158.650510][T13698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.650529][T13698] RSP: 002b:00007fa04e42f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 158.650548][T13698] RAX: ffffffffffffffda RBX: 00007fa04fc25fa0 RCX: 00007fa04f9cefc9 [ 158.650631][T13698] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 158.650644][T13698] RBP: 00007fa04fa51f91 R08: 0000000000000004 R09: 0000000000000000 [ 158.650658][T13698] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.650671][T13698] R13: 00007fa04fc26038 R14: 00007fa04fc25fa0 R15: 00007ffc4f91bd18 [ 158.650744][T13698] [ 158.650758][T13698] Mem-Info: [ 158.703274][ T29] kauditd_printk_skb: 630 callbacks suppressed [ 158.703291][ T29] audit: type=1400 audit(1761939409.272:6058): avc: denied { read } for pid=13695 comm="syz.2.4287" lport=40699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 158.705464][T13698] active_anon:3990 inactive_anon:17 isolated_anon:0 [ 158.705464][T13698] active_file:8770 inactive_file:2541 isolated_file:0 [ 158.705464][T13698] unevictable:0 dirty:243 writeback:0 [ 158.705464][T13698] slab_reclaimable:3540 slab_unreclaimable:30585 [ 158.705464][T13698] mapped:28851 shmem:440 pagetables:1051 [ 158.705464][T13698] sec_pagetables:0 bounce:0 [ 158.705464][T13698] kernel_misc_reclaimable:0 [ 158.705464][T13698] free:1877237 free_pcp:17037 free_cma:0 [ 158.736320][T13701] x_tables: duplicate underflow at hook 1 [ 158.739935][T13698] Node 0 active_anon:15960kB inactive_anon:68kB active_file:35080kB inactive_file:10164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115404kB dirty:972kB writeback:0kB shmem:1760kB kernel_stack:4768kB pagetables:4320kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 158.976590][T13698] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 159.006294][T13698] lowmem_reserve[]: 0 2881 7859 7859 [ 159.011841][T13698] Node 0 DMA32 free:2946740kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950268kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 159.043381][T13698] lowmem_reserve[]: 0 0 4978 4978 [ 159.048684][T13698] Node 0 Normal free:4546356kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15960kB inactive_anon:68kB active_file:35080kB inactive_file:10164kB unevictable:0kB writepending:972kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:64708kB local_pcp:44076kB free_cma:0kB [ 159.082301][T13698] lowmem_reserve[]: 0 0 0 0 [ 159.087158][T13698] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 159.099988][T13698] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946740kB [ 159.116432][T13698] Node 0 Normal: 1300*4kB (UME) 453*8kB (UME) 346*16kB (UME) 219*32kB (UE) 183*64kB (UM) 135*128kB (UME) 53*256kB (UME) 78*512kB (UME) 96*1024kB (UME) 48*2048kB (UME) 1037*4096kB (UM) = 4548024kB [ 159.136589][T13698] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 159.146031][T13698] 11777 total pagecache pages [ 159.150863][T13698] 67 pages in swap cache [ 159.155142][T13698] Free swap = 124728kB [ 159.159350][T13698] Total swap = 124996kB [ 159.163530][T13698] 2097051 pages RAM [ 159.167695][T13698] 0 pages HighMem/MovableOnly [ 159.172392][T13698] 81084 pages reserved [ 159.192952][T13712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4295'. [ 159.247677][T13712] team0 (unregistering): Port device team_slave_0 removed [ 159.262183][T13712] team0 (unregistering): Port device team_slave_1 removed [ 159.338761][T13728] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 159.409163][T13737] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 159.428980][T13737] bond1 (unregistering): Released all slaves [ 159.442742][ T29] audit: type=1326 audit(1761939410.070:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 159.466926][ T29] audit: type=1326 audit(1761939410.102:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 159.490676][ T29] audit: type=1326 audit(1761939410.102:6061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 159.514259][ T29] audit: type=1326 audit(1761939410.102:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 159.538054][ T29] audit: type=1326 audit(1761939410.102:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 159.561612][ T29] audit: type=1326 audit(1761939410.102:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 159.585169][ T29] audit: type=1326 audit(1761939410.102:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 159.599654][T13744] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4309'. [ 159.608772][ T29] audit: type=1326 audit(1761939410.154:6066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 159.641493][ T29] audit: type=1326 audit(1761939410.154:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.2.4319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd37a52efc9 code=0x7ffc0000 [ 159.641570][T13744] netem: change failed [ 159.691248][ T9996] bridge_slave_1: left allmulticast mode [ 159.697160][ T9996] bridge_slave_1: left promiscuous mode [ 159.702929][ T9996] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.727060][ T9996] bridge_slave_0: left allmulticast mode [ 159.732910][ T9996] bridge_slave_0: left promiscuous mode [ 159.738970][ T9996] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.772816][T13757] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 159.798302][ T9996] bond1 (unregistering): (slave geneve2): Releasing active interface [ 159.838912][ T9996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.849277][ T9996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.858755][ T9996] bond0 (unregistering): Released all slaves [ 159.866890][ T9996] bond1 (unregistering): Released all slaves [ 159.903648][T13769] netlink: 'syz.3.4318': attribute type 1 has an invalid length. [ 159.929138][ T9996] hsr_slave_0: left promiscuous mode [ 159.935252][ T9996] hsr_slave_1: left promiscuous mode [ 159.935481][ T9996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.935496][ T9996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.936034][ T9996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.936047][ T9996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.941668][ T9996] veth1_macvtap: left promiscuous mode [ 159.941692][ T9996] veth0_macvtap: left promiscuous mode [ 159.942019][ T9996] veth1_vlan: left promiscuous mode [ 159.942101][ T9996] veth0_vlan: left promiscuous mode [ 160.060716][ T9996] team0 (unregistering): Port device team_slave_1 removed [ 160.071812][ T9996] team0 (unregistering): Port device team_slave_0 removed [ 160.393485][T13812] loop3: detected capacity change from 0 to 128 [ 160.403062][T13812] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 160.403332][T13812] ext4 filesystem being mounted at /288/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 160.415829][T10536] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 160.630819][T13836] msdos: Unknown parameter '' [ 160.948883][T13852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.979789][T13852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.692496][T13899] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 161.742098][T13904] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.899291][ T1095] hid_parser_main: 16 callbacks suppressed [ 161.899311][ T1095] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x4 [ 161.913098][ T1095] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x2 [ 161.921149][ T1095] hid-generic 0000:3000000:0000.000C: unknown main item tag 0x3 [ 161.938687][ T1095] hid-generic 0000:3000000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 162.065266][T13945] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 162.211039][T13963] vlan2: entered promiscuous mode [ 162.216253][T13963] macvlan1: entered promiscuous mode [ 162.243631][T13967] macvtap0: refused to change device tx_queue_len [ 162.642197][T14000] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14000 comm=syz.2.4425 [ 162.654893][T14000] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14000 comm=syz.2.4425 [ 162.702155][T14005] __nla_validate_parse: 1 callbacks suppressed [ 162.702173][T14005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4427'. [ 162.732214][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.885994][T14027] netlink: 'syz.0.4440': attribute type 1 has an invalid length. [ 162.901209][T14027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.917753][T14027] 8021q: adding VLAN 0 to HW filter on device bond1 [ 162.926654][T14027] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 162.938551][T14027] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 162.946410][T14032] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4441'. [ 162.961852][T14032] IPVS: Error connecting to the multicast addr [ 163.201427][T14075] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 163.208907][T14075] vhci_hcd: invalid port number 96 [ 163.214142][T14075] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 163.262904][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 163.272315][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4465'. [ 163.406272][T14097] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4471'. [ 163.420748][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 163.444199][ T10] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.591252][T14105] macvtap0: entered promiscuous mode [ 163.608628][T14105] macvtap0: left promiscuous mode [ 163.646967][T14107] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4475'. [ 163.723047][ T29] kauditd_printk_skb: 219 callbacks suppressed [ 163.723063][ T29] audit: type=1400 audit(1761939414.554:6287): avc: denied { create } for pid=14112 comm="syz.2.4479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 163.749425][ T29] audit: type=1400 audit(1761939414.554:6288): avc: denied { connect } for pid=14112 comm="syz.2.4479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 163.769462][ T29] audit: type=1400 audit(1761939414.554:6289): avc: denied { write } for pid=14112 comm="syz.2.4479" path="socket:[46348]" dev="sockfs" ino=46348 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 164.066128][ T29] audit: type=1326 audit(1761939414.932:6290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz.0.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 164.081080][T14137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.116641][ T29] audit: type=1326 audit(1761939414.953:6291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz.0.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 164.138431][T14137] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.140315][ T29] audit: type=1326 audit(1761939414.953:6292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz.0.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 164.170499][ T29] audit: type=1326 audit(1761939414.963:6293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14142 comm="syz.0.4491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7fcb28efc9 code=0x7ffc0000 [ 164.197835][T14137] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 164.349538][ T29] audit: type=1326 audit(1761939415.215:6294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.1.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190f1fefc9 code=0x7ffc0000 [ 164.373241][ T29] audit: type=1326 audit(1761939415.215:6295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.1.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190f1fefc9 code=0x7ffc0000 [ 164.397147][ T29] audit: type=1326 audit(1761939415.215:6296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14172 comm="syz.1.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f190f1fefc9 code=0x7ffc0000 [ 164.424694][T14175] netlink: 'syz.2.4506': attribute type 1 has an invalid length. [ 164.519789][T14184] ------------[ cut here ]------------ [ 164.525416][T14184] verifier bug: REG INVARIANTS VIOLATION (true_reg2): range bounds violation u64=[0x0, 0x7800000000] s64=[0x0, 0xffffffffffffffff] u32=[0x80000000, 0x0] s32=[0x0, 0xffffffff] var_off=(0x0, 0x7800000000) [ 164.545519][T14184] WARNING: CPU: 1 PID: 14184 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 164.556128][T14184] Modules linked in: [ 164.560082][T14184] CPU: 1 UID: 0 PID: 14184 Comm: syz.2.4510 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.570207][T14184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.580423][T14184] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 164.586696][T14184] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 c2 f7 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 164.606438][T14184] RSP: 0018:ffffc90001b77408 EFLAGS: 00010282 [ 164.612827][T14184] RAX: 0c912d41942df300 RBX: ffff88811a38f840 RCX: 0000000000080000 [ 164.620915][T14184] RDX: ffffc900069da000 RSI: 0000000000014489 RDI: 000000000001448a [ 164.628948][T14184] RBP: 0000000000000000 R08: 0001c90001b77257 R09: 0000000000000000 [ 164.636957][T14184] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a38f800 [ 164.644974][T14184] R13: ffff88810b500000 R14: ffff88810b500000 R15: ffff88811a38f838 [ 164.652982][T14184] FS: 00007fd378f8f6c0(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 164.662293][T14184] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.668942][T14184] CR2: 00002000000054c0 CR3: 000000011a440000 CR4: 00000000003506f0 [ 164.677037][T14184] DR0: 0000000000000002 DR1: 0000000000000000 DR2: 0000000000000000 [ 164.685303][T14184] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 164.693346][T14184] Call Trace: [ 164.696669][T14184] [ 164.699622][T14184] reg_set_min_max+0x1eb/0x260 [ 164.704573][T14184] check_cond_jmp_op+0x1370/0x19e0 [ 164.709715][T14184] do_check+0x3363/0x8460 [ 164.714192][T14184] do_check_common+0xc5e/0x12b0 [ 164.719071][T14184] bpf_check+0xaaae/0xd9d0 [ 164.723542][T14184] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 164.729745][T14184] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 164.735769][T14184] ? pcpu_block_update+0x377/0x3b0 [ 164.740899][T14184] ? _find_next_zero_bit+0x29/0xa0 [ 164.746296][T14184] ? pcpu_block_refresh_hint+0x157/0x170 [ 164.752019][T14184] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 164.758264][T14184] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 164.764506][T14184] ? css_rstat_updated+0xb7/0x240 [ 164.769751][T14184] ? __rcu_read_unlock+0x4f/0x70 [ 164.774847][T14184] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 164.780830][T14184] ? bpf_prog_alloc+0x5b/0x150 [ 164.785681][T14184] ? pcpu_alloc_noprof+0xd29/0x1250 [ 164.790903][T14184] ? __kmalloc_noprof+0x489/0x570 [ 164.795989][T14184] ? security_bpf_prog_load+0x60/0x140 [ 164.801462][T14184] ? selinux_bpf_prog_load+0xad/0xd0 [ 164.806860][T14184] ? security_bpf_prog_load+0x9e/0x140 [ 164.812370][T14184] bpf_prog_load+0xf6e/0x1100 [ 164.817088][T14184] ? security_bpf+0x2b/0x90 [ 164.821619][T14184] __sys_bpf+0x469/0x7c0 [ 164.825889][T14184] __x64_sys_bpf+0x41/0x50 [ 164.830471][T14184] x64_sys_call+0x2aee/0x3000 [ 164.835238][T14184] do_syscall_64+0xd2/0x200 [ 164.839816][T14184] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.845912][T14184] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 164.851770][T14184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.857669][T14184] RIP: 0033:0x7fd37a52efc9 [ 164.862063][T14184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.881703][T14184] RSP: 002b:00007fd378f8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.890372][T14184] RAX: ffffffffffffffda RBX: 00007fd37a785fa0 RCX: 00007fd37a52efc9 [ 164.898368][T14184] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 164.906456][T14184] RBP: 00007fd37a5b1f91 R08: 0000000000000000 R09: 0000000000000000 [ 164.914435][T14184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.922392][T14184] R13: 00007fd37a786038 R14: 00007fd37a785fa0 R15: 00007ffc19548d28 [ 164.930391][T14184] [ 164.933458][T14184] ---[ end trace 0000000000000000 ]--- [ 165.086003][T14207] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 165.092590][T14207] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.100302][T14207] vhci_hcd vhci_hcd.0: Device attached [ 165.122533][T14209] vhci_hcd: connection closed [ 165.123149][ T9996] vhci_hcd: stop threads [ 165.132436][ T9996] vhci_hcd: release socket [ 165.136941][ T9996] vhci_hcd: disconnect device [ 165.247447][T14225] loop3: detected capacity change from 0 to 2048 [ 165.286510][T14225] Alternate GPT is invalid, using primary GPT. [ 165.292939][T14225] loop3: p1 p2 p3 [ 165.425988][T14238] netlink: 444 bytes leftover after parsing attributes in process `syz.3.4534'. [ 165.435154][T14238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4534'. [ 165.508596][T10032] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.518981][T10032] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.568880][T10032] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.579412][T10032] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.639324][T10032] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.649773][T10032] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.720545][T10032] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.730904][T10032] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.745584][T14270] loop3: detected capacity change from 0 to 256 [ 165.759827][T14270] FAT-fs (loop3): bogus number of FAT sectors [ 165.766060][T14270] FAT-fs (loop3): Can't find a valid FAT filesystem [ 165.868924][T14287] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4554'. [ 165.878071][T14287] xt_policy: neither incoming nor outgoing policy selected [ 165.896652][T10032] bridge_slave_1: left allmulticast mode [ 165.902333][T10032] bridge_slave_1: left promiscuous mode [ 165.908127][T10032] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.918842][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4553'. [ 165.941298][T10032] bridge_slave_0: left promiscuous mode [ 165.947032][T10032] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.975818][T14300] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 14300 comm: syz.1.4559) [ 165.998794][T14299] vhci_hcd: default hub control req: 040b v007f i0001 l0 [ 166.098055][T10032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.119937][T10032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.136497][T10032] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 166.173811][T10032] bond0 (unregistering): Released all slaves [ 166.214962][T14256] chnl_net:caif_netlink_parms(): no params data found [ 166.258968][T10032] hsr_slave_0: left promiscuous mode [ 166.265043][T10032] hsr_slave_1: left promiscuous mode [ 166.274520][T10032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.282096][T10032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.310633][T10032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.318093][T10032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.358027][T10032] veth1_macvtap: left promiscuous mode [ 166.367874][T10032] veth0_macvtap: left promiscuous mode [ 166.379405][T10032] veth1_vlan: left promiscuous mode [ 166.393814][T10032] veth0_vlan: left promiscuous mode [ 166.618419][T10032] team0 (unregistering): Port device team_slave_1 removed [ 166.644314][T10032] team0 (unregistering): Port device team_slave_0 removed [ 167.001490][T14320] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.011824][T14320] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.125274][T14256] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.132494][T14256] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.159763][T14256] bridge_slave_0: entered allmulticast mode [ 167.166880][T14256] bridge_slave_0: entered promiscuous mode [ 167.181646][T14256] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.188729][T14256] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.195892][T14256] bridge_slave_1: entered allmulticast mode [ 167.202540][T14256] bridge_slave_1: entered promiscuous mode [ 167.268900][T14320] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.279232][T14320] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.392392][T14256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.442269][T14320] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.452819][T14320] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.506985][T14256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.557134][T14320] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.567505][T14320] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.595459][T14256] team0: Port device team_slave_0 added [ 167.602604][T14256] team0: Port device team_slave_1 added [ 167.638045][T14256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.645080][T14256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.671030][T14256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.716470][T14357] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 167.727110][T14256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.734442][T14256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.760738][T14256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.811705][T14365] __nla_validate_parse: 1 callbacks suppressed [ 167.811743][T14365] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4586'. [ 167.879462][T14256] hsr_slave_0: entered promiscuous mode [ 167.894355][T14373] loop3: detected capacity change from 0 to 1024 [ 167.895204][T14256] hsr_slave_1: entered promiscuous mode [ 167.913148][T14256] debugfs: 'hsr0' already exists in 'hsr' [ 167.918953][T14256] Cannot create hsr debugfs directory [ 167.937124][T14373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.959629][T10033] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.967929][T10033] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.007853][T10536] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.020957][T10033] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.030457][T10033] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.040260][T10033] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.048708][T10033] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.080576][T14386] usb usb1: check_ctrlrecip: process 14386 (syz.0.4595) requesting ep 01 but needs 81 [ 168.090418][T14386] usb usb1: usbfs: process 14386 (syz.0.4595) did not claim interface 0 before use [ 168.110164][T10022] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.118546][T10022] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.142658][T14390] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4596'. [ 168.246460][T14405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4598'. [ 168.258038][T14405] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4598'. [ 168.290738][T14409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4602'. [ 168.339383][T14256] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.356853][T14256] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.376722][T14256] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.394412][T14256] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.449322][T14256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.462080][T14256] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.471061][T14438] netlink: 'syz.3.4613': attribute type 1 has an invalid length. [ 168.472859][T10023] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.485905][T10023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.507443][T14256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 168.518071][T14256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.531493][T10023] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.538709][T10023] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.583993][T14446] netlink: 'syz.3.4616': attribute type 1 has an invalid length. [ 168.600646][T14446] bond1: entered promiscuous mode [ 168.606085][T14446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.616326][T14449] xt_CT: You must specify a L4 protocol and not use inversions on it [ 168.626169][T14446] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.637596][T14446] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 168.647839][T14446] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 168.660438][T14446] bond1: (slave vxcan3): making interface the new active one [ 168.667975][T14446] vxcan3: entered promiscuous mode [ 168.674187][T14446] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 168.703308][T14256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.740431][T14461] atomic_op ffff888119033d28 conn xmit_atomic 0000000000000000 [ 168.777320][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 168.777336][ T29] audit: type=1400 audit(1761939419.866:6408): avc: denied { bind } for pid=14469 comm="syz.1.4624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.803810][ T29] audit: type=1400 audit(1761939419.877:6409): avc: denied { write } for pid=14469 comm="syz.1.4624" path="socket:[46951]" dev="sockfs" ino=46951 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.827833][ T29] audit: type=1400 audit(1761939419.877:6410): avc: denied { read } for pid=14469 comm="syz.1.4624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 168.913273][T14256] veth0_vlan: entered promiscuous mode [ 168.922160][T14256] veth1_vlan: entered promiscuous mode [ 168.939672][T14256] veth0_macvtap: entered promiscuous mode [ 168.947495][T14256] veth1_macvtap: entered promiscuous mode [ 168.957689][ T29] audit: type=1326 audit(1761939420.055:6411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14488 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190f1fefc9 code=0x7ffc0000 [ 168.960673][T14256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.992773][T14256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.000447][ T29] audit: type=1326 audit(1761939420.087:6412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14488 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190f1fefc9 code=0x7ffc0000 [ 169.004193][T10032] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.024216][ T29] audit: type=1326 audit(1761939420.087:6413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14488 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f190f1fefc9 code=0x7ffc0000 [ 169.056561][ T29] audit: type=1326 audit(1761939420.087:6414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14488 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190f1fefc9 code=0x7ffc0000 [ 169.080196][ T29] audit: type=1326 audit(1761939420.087:6415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14488 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f190f1fefc9 code=0x7ffc0000 [ 169.106640][T10032] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.115496][T10032] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.129165][T10032] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.136633][ T29] audit: type=1400 audit(1761939420.244:6416): avc: denied { mounton } for pid=14256 comm="syz-executor" path="/root/syzkaller.nM89TI/syz-tmp" dev="sda1" ino=2073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 169.162457][ T29] audit: type=1400 audit(1761939420.244:6417): avc: denied { mounton } for pid=14256 comm="syz-executor" path="/root/syzkaller.nM89TI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 169.372941][T14520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4638'. [ 169.683636][T14533] usb usb1: check_ctrlrecip: process 14533 (syz.3.4648) requesting ep 01 but needs 81 [ 169.693356][T14533] usb usb1: usbfs: process 14533 (syz.3.4648) did not claim interface 0 before use [ 169.749200][T14537] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4649'. [ 169.775829][T14540] netem: change failed [ 169.809814][T10023] Bluetooth: hci0: Frame reassembly failed (-84) [ 169.838547][T14547] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4652'. [ 170.324907][T14562] usb usb1: check_ctrlrecip: process 14562 (syz.4.4660) requesting ep 01 but needs 81 [ 170.334716][T14562] usb usb1: usbfs: process 14562 (syz.4.4660) did not claim interface 0 before use [ 170.375756][T14564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4662'. [ 170.437098][T14572] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4667'. [ 170.446419][T14572] xt_policy: neither incoming nor outgoing policy selected [ 170.691965][T14594] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.737392][T14594] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.753496][T14596] ================================================================== [ 170.761644][T14596] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 170.770253][T14596] [ 170.772600][T14596] write to 0xffff88810abda468 of 8 bytes by task 14598 on cpu 0: [ 170.780312][T14596] shmem_file_splice_read+0x470/0x600 [ 170.785709][T14596] splice_direct_to_actor+0x26f/0x680 [ 170.791086][T14596] do_splice_direct+0xda/0x150 [ 170.795854][T14596] do_sendfile+0x380/0x650 [ 170.800276][T14596] __x64_sys_sendfile64+0x105/0x150 [ 170.805492][T14596] x64_sys_call+0x2bb4/0x3000 [ 170.810175][T14596] do_syscall_64+0xd2/0x200 [ 170.814765][T14596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.820662][T14596] [ 170.823003][T14596] write to 0xffff88810abda468 of 8 bytes by task 14596 on cpu 1: [ 170.830710][T14596] shmem_file_splice_read+0x470/0x600 [ 170.836081][T14596] splice_direct_to_actor+0x26f/0x680 [ 170.841455][T14596] do_splice_direct+0xda/0x150 [ 170.846229][T14596] do_sendfile+0x380/0x650 [ 170.850654][T14596] __x64_sys_sendfile64+0x105/0x150 [ 170.855885][T14596] x64_sys_call+0x2bb4/0x3000 [ 170.860621][T14596] do_syscall_64+0xd2/0x200 [ 170.865119][T14596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.871004][T14596] [ 170.873321][T14596] value changed: 0x0000000000013cf5 -> 0x0000000000013d06 [ 170.880413][T14596] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 170.882725][T14596] Reported by Kernel Concurrency Sanitizer on: [ 170.888870][T14596] CPU: 1 UID: 0 PID: 14596 Comm: syz.2.4676 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 170.900254][T14596] Tainted: [W]=WARN [ 170.904046][T14596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 170.914102][T14596] ================================================================== [ 170.956390][T14594] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.061558][T14594] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.139232][T10022] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.150069][T10022] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.160870][T10022] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.172260][T10022] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.613208][T10033] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.623008][T10033] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.658541][T10033] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.668442][T10033] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.715771][T10033] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.723784][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 171.725720][T10033] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.782469][T10033] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.792223][T10033] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.888703][T10033] bridge_slave_1: left allmulticast mode [ 171.894435][T10033] bridge_slave_1: left promiscuous mode [ 171.900370][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.908092][T10033] bridge_slave_0: left allmulticast mode [ 171.913775][T10033] bridge_slave_0: left promiscuous mode [ 171.919458][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.031010][T10033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.040947][T10033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.050346][T10033] bond0 (unregistering): Released all slaves [ 172.098002][T10033] tipc: Disabling bearer [ 172.102961][T10033] tipc: Left network mode [ 172.111481][T10033] hsr_slave_0: left promiscuous mode [ 172.117325][T10033] hsr_slave_1: left promiscuous mode [ 172.122885][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.130438][T10033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.137992][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.145373][T10033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.155152][T10033] veth1_macvtap: left promiscuous mode [ 172.160633][T10033] veth0_macvtap: left promiscuous mode [ 172.166159][T10033] veth1_vlan: left promiscuous mode [ 172.171513][T10033] veth0_vlan: left promiscuous mode [ 172.527503][T10033] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.574386][T10033] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.630858][T10033] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.698111][T10033] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.749198][T10033] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.759566][T10033] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.840675][T10033] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.851021][T10033] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.888193][T10033] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.898688][T10033] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.945670][T10033] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.956125][T10033] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.145593][T10033] bridge_slave_1: left allmulticast mode [ 173.151239][T10033] bridge_slave_1: left promiscuous mode [ 173.157042][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.164702][T10033] bridge_slave_0: left allmulticast mode [ 173.170322][T10033] bridge_slave_0: left promiscuous mode [ 173.176144][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.184273][T10033] bridge_slave_1: left allmulticast mode [ 173.189903][T10033] bridge_slave_1: left promiscuous mode [ 173.195618][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.203309][T10033] bridge_slave_0: left allmulticast mode [ 173.208928][T10033] bridge_slave_0: left promiscuous mode [ 173.214620][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.335471][T10033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.345579][T10033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.355236][T10033] bond0 (unregistering): Released all slaves [ 173.449672][T10033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.459400][T10033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.469655][T10033] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 173.478605][T10033] bond0 (unregistering): Released all slaves [ 173.487454][T10033] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 173.495461][T10033] vxcan3: left promiscuous mode [ 173.501135][T10033] bond1 (unregistering): Released all slaves [ 173.524482][T10033] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.533795][T10033] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.542840][T10033] bond0 (unregistering): Released all slaves [ 173.550909][T10033] bond1 (unregistering): (slave batadv1): Releasing active interface [ 173.559871][T10033] bond1 (unregistering): Released all slaves [ 173.624888][T10033] tipc: Disabling bearer [ 173.630080][T10033] tipc: Left network mode [ 173.641835][T10033] hsr_slave_0: left promiscuous mode [ 173.647564][T10033] hsr_slave_1: left promiscuous mode [ 173.653566][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.660978][T10033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.668551][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.676126][T10033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.685425][T10033] hsr_slave_0: left promiscuous mode [ 173.691253][T10033] hsr_slave_1: left promiscuous mode [ 173.696846][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.704303][T10033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.712030][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.719443][T10033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.728463][T10033] hsr_slave_0: left promiscuous mode [ 173.734212][T10033] hsr_slave_1: left promiscuous mode [ 173.739778][T10033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.747479][T10033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.758627][T10033] veth1_macvtap: left promiscuous mode [ 173.764378][T10033] veth0_macvtap: left promiscuous mode [ 173.769945][T10033] veth1_vlan: left promiscuous mode [ 173.775220][T10033] veth0_vlan: left promiscuous mode [ 173.780871][T10033] veth1_macvtap: left promiscuous mode [ 173.786432][T10033] veth0_macvtap: left promiscuous mode [ 173.792067][T10033] veth1_vlan: left promiscuous mode [ 173.797286][T10033] veth0_vlan: left promiscuous mode [ 173.878074][T10033] team0 (unregistering): Port device team_slave_1 removed [ 173.887882][T10033] team0 (unregistering): Port device team_slave_0 removed [ 173.935282][T10033] team0 (unregistering): Port device team_slave_1 removed [ 173.944491][T10033] team0 (unregistering): Port device team_slave_0 removed [ 173.994203][T10033] team0 (unregistering): Port device team_slave_1 removed [ 174.003900][T10033] team0 (unregistering): Port device team_slave_0 removed [ 175.917489][T10032] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.954365][T10032] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.001947][T10032] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.040098][T10032] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.088111][T10032] bridge_slave_1: left allmulticast mode [ 176.093935][T10032] bridge_slave_1: left promiscuous mode [ 176.099683][T10032] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.107475][T10032] bridge_slave_0: left allmulticast mode [ 176.113116][T10032] bridge_slave_0: left promiscuous mode [ 176.118866][T10032] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.211601][T10032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.221745][T10032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.231065][T10032] bond0 (unregistering): Released all slaves [ 176.238887][T10032] bond1 (unregistering): Released all slaves [ 176.308324][T10032] hsr_slave_0: left promiscuous mode [ 176.314110][T10032] hsr_slave_1: left promiscuous mode [ 176.320350][T10032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.327727][T10032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.335219][T10032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.342809][T10032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.352180][T10032] veth1_macvtap: left promiscuous mode [ 176.357696][T10032] veth0_macvtap: left promiscuous mode [ 176.363309][T10032] veth1_vlan: left promiscuous mode [ 176.368547][T10032] veth0_vlan: left promiscuous mode [ 176.418574][T10032] team0 (unregistering): Port device team_slave_1 removed [ 176.428393][T10032] team0 (unregistering): Port device team_slave_0 removed