last executing test programs: 41m5.551451625s ago: executing program 32 (id=9): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7}, {0xa, 0x10001, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0xfffffffd, 0x32}, 0x2, @in=@rand_addr=0x400, 0x3506, 0x4}}, 0xe8) socket$key(0xf, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket(0x15, 0x80000, 0x2) syz_clone3(&(0x7f0000000400)={0x100000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdcf, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1002002, 0x0) dup(r4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 41m4.539221264s ago: executing program 33 (id=31): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000005280), 0x10) r2 = dup3(r1, r0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ec"], 0x20000600}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$can_bcm(r2, 0x0, 0x2c004000) 40m56.751426908s ago: executing program 34 (id=73): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') readlinkat(r2, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000780)=""/198, 0xc6) 40m44.622012038s ago: executing program 35 (id=122): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c00010005000000030000000800", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x14000}, 0x0) 38m37.322607315s ago: executing program 7 (id=3039): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x4}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) waitid(0x0, 0x0, 0x0, 0xe, 0x0) 38m36.767348449s ago: executing program 36 (id=3053): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040), 0x4) 38m36.76549839s ago: executing program 37 (id=3055): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) write$cgroup_subtree(r0, 0x0, 0xfe33) 38m35.370559107s ago: executing program 7 (id=3057): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e22, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x80, 0x81, 0x10000}, {0x6}]}, 0x10) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='+', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 38m35.370439057s ago: executing program 38 (id=3057): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000700)={0xa, 0x4e22, 0x0, @loopback, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x80, 0x81, 0x10000}, {0x6}]}, 0x10) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)='+', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 38m34.739316318s ago: executing program 39 (id=3061): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="6cb8a8fde1", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1}}], 0x2, 0x4001015) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40001) 38m13.946494548s ago: executing program 40 (id=3740): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="2d6306f46578637420"], 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r7, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r8, 0x0, 0x0}, 0x10) 38m7.29757158s ago: executing program 41 (id=4042): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000780)="63eced8e46dc3f0adf33383543cf", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x50) 36m17.195075921s ago: executing program 42 (id=6339): r0 = socket$nl_route(0x10, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001528047b19a0f1feeffff00ffff", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00.'], 0x28}}, 0x0) 36m11.069133552s ago: executing program 1 (id=6388): close(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x79) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x50, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {0x0, 0x9}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0x20, @val={0x8c, 0x10, {0x8a4, "33e9eba8dbbf", @short="35c9c37732e43579"}}}}]}, 0x50}}, 0x0) 36m10.659477351s ago: executing program 1 (id=6392): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) clock_adjtime(0xffc99a3b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x28001}, 0x48c0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}, @common=@inet=@socket3={{0x28}, 0x51}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) 36m10.489490359s ago: executing program 1 (id=6393): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfc, 0x19c, &(0x7f0000000200)="$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") open$dir(0x0, 0x80040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) truncate(&(0x7f0000000040)='./file1\x00', 0x5) renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 36m10.145399422s ago: executing program 1 (id=6397): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@abort}, {@noinit_itable}, {@abort}, {@debug}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") mount$bpf(0x0, 0x0, 0x0, 0x1800040, &(0x7f0000000100)={[{}]}) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) 36m9.920067144s ago: executing program 1 (id=6402): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000000340)=[{&(0x7f0000001380)=""/4104, 0x1008}], 0x1, 0x4, 0x88) 36m8.359564827s ago: executing program 1 (id=6407): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) fchdir(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/49, 0x2d) getdents(r1, 0xfffffffffffffffd, 0x58) 36m8.352583308s ago: executing program 43 (id=6407): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) fchdir(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/49, 0x2d) getdents(r1, 0xfffffffffffffffd, 0x58) 36m2.564952656s ago: executing program 7 (id=6408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000001c0)=0x5) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffa7) 36m2.41578126s ago: executing program 7 (id=6464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000300)="e2", 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) tee(r2, 0xffffffffffffffff, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r3, 0x0) 36m1.462781674s ago: executing program 7 (id=6471): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) write$sndseq(r0, &(0x7f0000000240)=[{0x9, 0xc8, 0xd, 0xd2, @time={0x7, 0x8}, {0x3, 0xe}, {0x10, 0x6}, @raw32={[0xbcf, 0x5bd, 0xfffffffb]}}], 0x1c) 35m59.005709655s ago: executing program 7 (id=6495): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xffeffffffffffffd, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb1, 0x2, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0xc42a, 0x900000000000100, 0x7, 0x5, 0x0, 0x200000, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 35m59.005504745s ago: executing program 44 (id=6495): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) perf_event_open(0x0, 0x0, 0xffeffffffffffffd, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb1, 0x2, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0xc42a, 0x900000000000100, 0x7, 0x5, 0x0, 0x200000, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x8) 35m17.048424881s ago: executing program 2 (id=7372): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 35m16.965322589s ago: executing program 2 (id=7377): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x100}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0xd6) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') creat(&(0x7f0000000040)='./bus\x00', 0x140) 35m16.704363214s ago: executing program 2 (id=7384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) 35m15.771587416s ago: executing program 2 (id=7397): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) close(r0) 35m15.706991472s ago: executing program 2 (id=7400): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="412eb3598a50c721ed5ea4004512cf666662dea37a016aef00a95fed4836666fe90526e02a72199fd375effd063b9d39b95ab5698f16f5f62740834ec2703d98e44b2eb52de372053403a86013edb9cd405e87e23dbbac7b0990db87351c1ed8eb01c057debebaeb9ff95593c045ff4020a66c951920d12afc72d773a992f2e4fbf9463faa49f195ca4461b07a00"/155], 0x44}}, 0x0) 35m15.558422297s ago: executing program 5 (id=7404): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e"]) 35m15.511160492s ago: executing program 3 (id=7406): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="090000000700000000800000010000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfee, 0x0, 0x0, 0x3ff, 0x0, 0x100000000}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xb) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 35m15.509831342s ago: executing program 2 (id=7407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) 35m15.497103053s ago: executing program 5 (id=7408): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000006000000040000000200000006"], 0x48) 35m15.407517541s ago: executing program 5 (id=7410): bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x3, 0x0}, 0x8) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={r0, 0xffff, 0x8}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r1, &(0x7f0000000100)="d6f3e27302871048e8b33fdd90ba8a382e869c1e584cbe39214c8753e22cd36e51605d356068f866fd97309057998ac6d6781bf2f9a93c626c84ff2b8c4481d09c94284ef28ed601508ce385b2a5f04f45c0e90e86841d31881666d7b42577d872b09dcd7554884f5bde48d54c4d8ac9eb2716369a2ddb2705f79cd19c31c3cd5483a9db26c991c32892662180f489405da387214c834bf3422634c49cb86b59ed5b5f229a889568b48aba54ead28debb9616050cfcdc12fdcaa2977907119791725b4675b884af2a47c9d6605539fd402", &(0x7f0000000200)=""/90}, 0x20) 35m15.406932831s ago: executing program 5 (id=7413): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207373aa9cf3051d9bd1207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003004800850000001900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 35m15.365383496s ago: executing program 5 (id=7415): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1070}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x4b, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@timestamp_addr={0x44, 0x4, 0x59, 0x1, 0x3}]}}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 35m15.333414859s ago: executing program 5 (id=7416): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwrite64(r0, &(0x7f0000000280)="7516250d03afc1e56025d00ad5a60244722a98437be18acad9bdee0061ffadce1440e902a516c863322ae46df6118393f39f138d82032d98a682477cf3ca96b37f652d110ac9dfac1f6ae13ddd45ceb4f50bfbbd15c2b0297c3b8a05733ae3685294a622e4372d56e24b272d2d3e021b9fdf0939eaff9cfeabe6e6a6babdab15aa6c3fe20ec305d4ce3b538d0ba03bf653712d5fe2008f6956cb", 0xfffffd55, 0x8) 35m15.263186196s ago: executing program 3 (id=7418): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="412eb3598a50c721ed5ea4004512cf666662dea37a016aef00a95fed4836666fe90526e02a72199fd375effd063b9d39b95ab5698f16f5f62740834ec2703d98e44b2eb52de372053403a86013edb9cd405e87e23dbbac7b0990db87351c1ed8eb01c057debebaeb9ff95593c045ff4020a66c951920d12afc72d773a992f2e4fbf9463faa49f195ca4461b07a00"/155], 0x44}}, 0x0) 35m15.104629921s ago: executing program 3 (id=7421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e00000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f00000002c0), &(0x7f0000000540)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 35m15.057697196s ago: executing program 3 (id=7423): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00'}) sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1a, 0x0, 0x0, 0x0) 35m14.995449762s ago: executing program 3 (id=7424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e00000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 35m14.964733085s ago: executing program 3 (id=7425): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 34m59.916717241s ago: executing program 45 (id=7416): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwrite64(r0, &(0x7f0000000280)="7516250d03afc1e56025d00ad5a60244722a98437be18acad9bdee0061ffadce1440e902a516c863322ae46df6118393f39f138d82032d98a682477cf3ca96b37f652d110ac9dfac1f6ae13ddd45ceb4f50bfbbd15c2b0297c3b8a05733ae3685294a622e4372d56e24b272d2d3e021b9fdf0939eaff9cfeabe6e6a6babdab15aa6c3fe20ec305d4ce3b538d0ba03bf653712d5fe2008f6956cb", 0xfffffd55, 0x8) 34m59.891718753s ago: executing program 46 (id=7425): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 34m59.864937226s ago: executing program 47 (id=7407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) 4.155876052s ago: executing program 9 (id=22267): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084080000000000000001"], 0x0, 0x42}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 4.133274985s ago: executing program 9 (id=22270): socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r4, r2, 0x25, 0x2, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) 4.115411326s ago: executing program 9 (id=22272): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="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", 0x2d9}, {&(0x7f0000001200)="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", 0x24a}, {&(0x7f0000000e40)="5be081cd2e5383c893e2c864f68d85738305437c98b91b9455046f57b5fc090014b5e2bb01000000000000001a7838d859203067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729", 0x4e}, {&(0x7f0000000140)="6011daffb3bc7ec41548698eff4928731657", 0x12}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x80) 4.074371931s ago: executing program 9 (id=22275): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) 4.003369637s ago: executing program 9 (id=22278): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="c80000001000010800000000fdffffff00000000", @ANYRES32, @ANYBLOB="0000000004a202000c002b8008000300130000009c001680980001800c00070040000000000400000c00070002000000030000000c000300"], 0xc8}}, 0x0) 3.991315049s ago: executing program 9 (id=22281): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0xc, 0x42, 0x40}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r5}, 0x38) 3.238926712s ago: executing program 4 (id=22292): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000300)={[0xda]}, 0x8, 0x80000) io_setup(0x4, &(0x7f0000000440)=0x0) io_submit(r1, 0x47f, &(0x7f00000005c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000003c0)="951aa14bd6f68579cac67c83bf8d4500e5cea1bb1596d4ee6645fa16fa7cacb9214070a622a2c57b89075f59b85c7b5b2c41edc9d2cd5a2c95ed1c2cf72425be9c1a2df1b60a309bc3228d7e85b300f0d7a042a40166b9208e9d2e423c32ad8e47adedf5dc425c6bcb031fb2230835d41afc23476eae602bad3246417e5ac757", 0x80}]) 2.863483179s ago: executing program 4 (id=22295): socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, 0x0, 0x25, 0x2, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) 2.824728413s ago: executing program 4 (id=22296): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0x0, 0x0) 2.747450651s ago: executing program 4 (id=22297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.742486491s ago: executing program 4 (id=22298): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000480)={0x2f}, 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000200)={0x89}, 0x8) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 2.729857132s ago: executing program 0 (id=22299): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01"], 0xfc}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x200c0810}, 0x44004) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a300000000014000380"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001000000000000000000da00000a44000000160a01030000000000000000020000070900020073797a3200f100000900010073797a30000000000c00054000000000000000030c00054000000000000000021c000000020a05"], 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x800) 2.64730131s ago: executing program 4 (id=22300): socket$nl_sock_diag(0x10, 0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f0000000500)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) io_uring_setup(0x5b54, &(0x7f0000000040)={0x0, 0x2df0, 0x0, 0x0, 0x2b2}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYRESDEC=0x0], 0x0) 2.64645223s ago: executing program 0 (id=22301): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fddbdf251d0000000c0006"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) 2.624352543s ago: executing program 0 (id=22302): timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) 2.567399439s ago: executing program 0 (id=22303): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 2.24131327s ago: executing program 8 (id=22304): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) semtimedop(0x0, 0x0, 0x0, 0x0) 2.229853832s ago: executing program 8 (id=22305): ioperm(0x0, 0x1, 0x1) unshare(0x4a00021f) 2.205627943s ago: executing program 8 (id=22306): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) signalfd4(r1, &(0x7f0000000000), 0x8, 0x800) 1.702577023s ago: executing program 0 (id=22314): r0 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f00000000c0)=0x3, 0x4) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.269318516s ago: executing program 8 (id=22315): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)={[{@test_dummy_encryption_v1}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@nogrpid}, {@block_validity}], [{@permit_directio}, {@seclabel, 0x22}, {@euid_gt}]}, 0x0, 0x533, &(0x7f0000001b40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getresuid(0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, 0x0, 0x0, &(0x7f0000000500)="b9b9c86368a0c3e2ab51d5853e5f", &(0x7f00000000c0)=""/48) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) 896.693242ms ago: executing program 0 (id=22318): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x18) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x0, 0x5, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45}}) socket$nl_generic(0x10, 0x3, 0x10) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="756e6c6fa96b20696f2b6d656d00"], 0xe) syz_usb_connect(0x3, 0x4f, &(0x7f0000000080)=ANY=[], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) 383.768072ms ago: executing program 8 (id=22319): unshare(0x22040080) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x60b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad386dd", 0x4, 0x4008045, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 350.912256ms ago: executing program 6 (id=22321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 334.069937ms ago: executing program 6 (id=22322): socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r3, 0x0, 0x25, 0x2, @val=@tcx={@void, @value=r0}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x8000, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x9}}}}}}}, 0x0) 259.258165ms ago: executing program 6 (id=22323): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x3a}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) ioctl(r0, 0xfffffff9, &(0x7f0000000240)="49c4") r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000240)=ANY=[], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) 182.929352ms ago: executing program 6 (id=22324): open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x6c, r2, 0xb496be12fe179219, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r6, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 182.279712ms ago: executing program 8 (id=22325): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x18) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) 24.121118ms ago: executing program 6 (id=22326): clock_adjtime(0x0, &(0x7f0000000000)={0x3fd, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1}) 0s ago: executing program 6 (id=22327): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x40}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000900000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0xc, 0x42, 0x40}, 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x3, r5}, 0x38) kernel console output (not intermixed with test programs): 0x10/0x10 [ 1961.426660][T22147] ? __pfx_kthread+0x10/0x10 [ 1961.431363][T22147] ret_from_fork+0x122/0x1b0 [ 1961.436020][T22147] ? __pfx_kthread+0x10/0x10 [ 1961.440624][T22147] ret_from_fork_asm+0x1a/0x30 [ 1961.445459][T22147] [ 1961.448464][T22147] ---[ end trace 0000000000000000 ]--- [ 1961.977940][T28512] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1961.999299][T28512] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1962.011481][T28512] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1962.047496][T28512] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1962.358153][T28590] syzkaller0: entered promiscuous mode [ 1962.363740][T28590] syzkaller0: entered allmulticast mode [ 1962.471760][T28512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1962.485939][T21757] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1962.499361][T28512] 8021q: adding VLAN 0 to HW filter on device team0 [ 1962.527219][T28303] bridge0: port 1(bridge_slave_0) entered blocking state [ 1962.534307][T28303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1962.570003][T28303] bridge0: port 2(bridge_slave_1) entered blocking state [ 1962.577124][T28303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1962.632805][T28597] syzkaller0: entered promiscuous mode [ 1962.638312][T28597] syzkaller0: entered allmulticast mode [ 1962.683621][T28512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1962.694024][T28512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1962.781866][T28512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1962.903583][T28512] veth0_vlan: entered promiscuous mode [ 1962.911869][T28512] veth1_vlan: entered promiscuous mode [ 1962.930080][T28512] veth0_macvtap: entered promiscuous mode [ 1962.937689][T28512] veth1_macvtap: entered promiscuous mode [ 1962.950132][T28512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1962.961718][T28512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1962.972898][T22127] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.982823][T22127] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1962.994741][T22127] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.012136][T22127] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1963.054528][T28633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1963.075113][T28633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1963.284022][T28644] netlink: 'syz.4.19298': attribute type 16 has an invalid length. [ 1963.311212][T28644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1964.134039][T28650] loop6: detected capacity change from 0 to 512 [ 1964.209032][T28650] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1964.217168][T28650] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1964.246398][T28650] EXT4-fs (loop6): 1 truncate cleaned up [ 1964.252551][T28650] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1965.071022][T21757] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1965.627671][T28659] syzkaller0: entered promiscuous mode [ 1965.633212][T28659] syzkaller0: entered allmulticast mode [ 1965.916741][T28675] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=28675 comm=syz.6.19305 [ 1966.785200][T28684] bridge: RTM_NEWNEIGH with invalid ether address [ 1967.813302][T28704] netlink: 'syz.9.19313': attribute type 3 has an invalid length. [ 1971.325733][T28744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1971.334302][T28744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1971.750657][T28758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19329'. [ 1973.379049][T28771] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19332'. [ 1973.649374][ T29] audit: type=1400 audit(2229.627:7835): avc: denied { getattr } for pid=28775 comm="syz.9.19334" name="/" dev="pidfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1973.863484][T28778] loop8: detected capacity change from 0 to 1024 [ 1973.901305][T28778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1975.161770][T20816] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1975.559229][T28822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1975.628759][T28822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1975.874100][T28823] syzkaller0: entered promiscuous mode [ 1975.879701][T28823] syzkaller0: entered allmulticast mode [ 1975.893596][T28827] loop8: detected capacity change from 0 to 1024 [ 1975.924213][T28827] EXT4-fs: Ignoring removed oldalloc option [ 1975.930264][T28827] EXT4-fs: Ignoring removed bh option [ 1976.005511][T28827] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1979.424245][T28844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1979.449401][T28844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1979.863270][T28862] netlink: 'syz.0.19354': attribute type 16 has an invalid length. [ 1979.903149][T28862] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1980.860361][T20816] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1982.078919][T28888] loop8: detected capacity change from 0 to 512 [ 1982.101257][T28888] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1982.125775][T28888] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1982.185394][T28888] EXT4-fs (loop8): 1 truncate cleaned up [ 1982.196896][T28888] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1982.370278][T28900] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19367'. [ 1982.397471][T20816] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1982.479935][T28905] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19368'. [ 1982.636226][T28915] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19371'. [ 1984.932559][T28931] loop8: detected capacity change from 0 to 2048 [ 1985.409929][T28931] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1985.698051][T20816] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1985.904244][T28959] loop6: detected capacity change from 0 to 128 [ 1986.483182][T28968] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=28968 comm=syz.9.19386 [ 1987.150340][T28983] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1988.134947][T28999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19395'. [ 1988.719599][T29009] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1988.756234][T29009] vhci_hcd: invalid port number 96 [ 1988.761395][T29009] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 1989.147608][T29024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19403'. [ 1989.443825][T29031] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1989.643718][T29033] syzkaller0: entered promiscuous mode [ 1989.649340][T29033] syzkaller0: entered allmulticast mode [ 1992.377004][T29066] loop6: detected capacity change from 0 to 1024 [ 1992.416838][T29066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1992.692680][T29074] xt_socket: unknown flags 0x50 [ 1993.725074][T29081] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19417'. [ 1993.775418][T21757] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1994.082629][T29089] syzkaller0: entered promiscuous mode [ 1994.088116][T29089] syzkaller0: entered allmulticast mode [ 1994.891595][ T29] audit: type=1400 audit(2250.877:7836): avc: denied { map } for pid=29099 comm="syz.0.19422" path="socket:[202977]" dev="sockfs" ino=202977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1994.992610][T29104] loop8: detected capacity change from 0 to 512 [ 1995.017711][T29104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1995.155411][T29104] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1995.168966][T29104] EXT4-fs (loop8): 1 truncate cleaned up [ 1995.175597][T29104] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1995.312533][T29116] xt_socket: unknown flags 0x50 [ 1995.337239][T20816] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1995.462549][T29123] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8192 sclass=netlink_xfrm_socket pid=29123 comm=syz.4.19429 [ 1995.916482][T29127] syzkaller0: entered promiscuous mode [ 1995.922055][T29127] syzkaller0: entered allmulticast mode [ 1996.111885][T29132] loop8: detected capacity change from 0 to 512 [ 1996.133083][T29132] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1996.280631][T29132] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1996.591892][T29138] netlink: 44 bytes leftover after parsing attributes in process `syz.9.19432'. [ 1996.621264][T29132] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.19433: bg 0: block 248: padding at end of block bitmap is not set [ 1996.721476][T29132] Quota error (device loop8): write_blk: dquota write failed [ 1996.728890][T29132] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1996.766898][T29132] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.19433: Failed to acquire dquot type 1 [ 1996.791301][T29132] EXT4-fs (loop8): 1 truncate cleaned up [ 1996.797631][T29132] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1996.966337][T20816] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1996.976039][T28305] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-5 [ 1996.985094][T28305] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 1997.342525][ T29] audit: type=1400 audit(2253.217:7837): avc: denied { mount } for pid=29152 comm="syz.9.19438" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1997.603750][T29162] loop6: detected capacity change from 0 to 512 [ 1997.610502][T29162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1997.621195][T29162] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1997.637299][T29162] EXT4-fs (loop6): 1 truncate cleaned up [ 1997.654357][T29162] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1997.703829][T21757] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1997.874714][T29168] xt_socket: unknown flags 0x50 [ 1997.936655][ T29] audit: type=1400 audit(2253.917:7838): avc: denied { unmount } for pid=28512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1998.542844][T29189] syzkaller0: entered promiscuous mode [ 1998.548342][T29189] syzkaller0: entered allmulticast mode [ 1999.392680][ T29] audit: type=1400 audit(2255.377:7839): avc: denied { mount } for pid=29201 comm="syz.9.19454" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1999.937896][T29210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1999.988195][T29210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.337753][T29260] syzkaller0: entered promiscuous mode [ 2003.343379][T29260] syzkaller0: entered allmulticast mode [ 2003.484054][T29255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2003.519415][T29255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2003.933451][T29277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2003.969403][T29277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.681950][T29287] loop8: detected capacity change from 0 to 1024 [ 2004.690535][T29287] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 2004.786544][T29287] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2004.888254][T29296] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2005.304631][T29298] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19482'. [ 2005.453776][T29309] ipt_REJECT: TCP_RESET invalid for non-tcp [ 2005.610472][T29312] tipc: Started in network mode [ 2005.615405][T29312] tipc: Node identity 8771, cluster identity 4711 [ 2005.621918][T29312] tipc: Node number set to 34673 [ 2005.653817][T29312] tipc: Cannot configure node identity twice [ 2006.110855][T20816] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2006.357734][T29334] netlink: 44 bytes leftover after parsing attributes in process `syz.9.19492'. [ 2006.717837][T29342] syzkaller0: entered promiscuous mode [ 2006.723377][T29342] syzkaller0: entered allmulticast mode [ 2007.051815][T29352] bridge7: entered allmulticast mode [ 2007.134890][T29348] netlink: 'syz.6.19496': attribute type 3 has an invalid length. [ 2007.418116][T29354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.426576][T29354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2007.447311][T29370] xt_socket: unknown flags 0x50 [ 2008.007719][T29374] syzkaller0: entered promiscuous mode [ 2008.013232][T29374] syzkaller0: entered allmulticast mode [ 2008.167597][T29376] syzkaller0: entered promiscuous mode [ 2008.173177][T29376] syzkaller0: entered allmulticast mode [ 2010.165703][T29424] loop9: detected capacity change from 0 to 512 [ 2010.197682][T29424] EXT4-fs error (device loop9): ext4_orphan_get:1392: inode #15: comm syz.9.19524: inode has both inline data and extents flags [ 2010.229406][T29424] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.19524: couldn't read orphan inode 15 (err -117) [ 2010.255852][T29424] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2010.292213][ T29] audit: type=1400 audit(2266.277:7840): avc: denied { setattr } for pid=29423 comm="syz.9.19524" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 2010.349892][T28512] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2010.493354][T22147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.557101][T22147] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.637886][T22147] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.696442][T29432] loop9: detected capacity change from 0 to 2048 [ 2010.717297][T22147] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2010.742732][T29432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2010.761490][T29429] chnl_net:caif_netlink_parms(): no params data found [ 2010.850041][T28512] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2010.888334][T29429] bridge0: port 1(bridge_slave_0) entered blocking state [ 2010.895445][T29429] bridge0: port 1(bridge_slave_0) entered disabled state [ 2010.919546][T29429] bridge_slave_0: entered allmulticast mode [ 2010.930110][T29429] bridge_slave_0: entered promiscuous mode [ 2010.946780][T29429] bridge0: port 2(bridge_slave_1) entered blocking state [ 2010.953897][T29429] bridge0: port 2(bridge_slave_1) entered disabled state [ 2010.991556][T29429] bridge_slave_1: entered allmulticast mode [ 2011.010364][T29429] bridge_slave_1: entered promiscuous mode [ 2011.221955][T29459] netlink: 44 bytes leftover after parsing attributes in process `syz.6.19529'. [ 2011.521635][T22147] bond0 (unregistering): Released all slaves [ 2011.591468][T29429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2011.604564][T22147] tipc: Left network mode [ 2011.621397][T22147] hsr_slave_0: left promiscuous mode [ 2011.637290][T22147] hsr_slave_1: left promiscuous mode [ 2011.645290][T22147] veth1_macvtap: left promiscuous mode [ 2011.651062][T22147] veth0_macvtap: left promiscuous mode [ 2011.656722][T22147] veth1_vlan: left promiscuous mode [ 2011.662184][T22147] veth0_vlan: left promiscuous mode [ 2011.755058][T29429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2011.786175][T29429] team0: Port device team_slave_0 added [ 2011.792731][T29429] team0: Port device team_slave_1 added [ 2011.830069][T29429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2011.837121][T29429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2011.863254][T29429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2011.887998][T29429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2011.895022][T29429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2011.895053][T29429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2011.942852][T29429] hsr_slave_0: entered promiscuous mode [ 2011.943367][T29429] hsr_slave_1: entered promiscuous mode [ 2011.954796][T29429] debugfs: 'hsr0' already exists in 'hsr' [ 2011.954809][T29429] Cannot create hsr debugfs directory [ 2012.013810][T29471] loop8: detected capacity change from 0 to 512 [ 2012.022505][T29471] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2012.029536][T29471] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 2012.043740][T29471] EXT4-fs (loop8): 1 truncate cleaned up [ 2012.054337][T29471] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2012.080947][T22147] ------------[ cut here ]------------ [ 2012.086430][T22147] WARNING: CPU: 1 PID: 22147 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 2012.096138][T22147] Modules linked in: [ 2012.100150][T22147] CPU: 1 UID: 0 PID: 22147 Comm: kworker/u8:57 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 2012.111790][T22147] Tainted: [W]=WARN [ 2012.115580][T22147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2012.125649][T22147] Workqueue: netns cleanup_net [ 2012.130589][T22147] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 2012.136147][T22147] Code: 48 8d bb 70 0e 00 00 e8 e5 4b b7 fc 48 8b bb 70 0e 00 00 e8 99 f8 c3 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 98 f2 9b fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 8a f2 9b fc 90 0f 0b 90 4c 89 f7 e8 ae [ 2012.155834][T22147] RSP: 0018:ffffc90003fa3c60 EFLAGS: 00010293 [ 2012.161948][T22147] RAX: ffffffff84bb5588 RBX: ffff88810a450000 RCX: ffff888101552100 [ 2012.169932][T22147] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a450e40 [ 2012.177895][T22147] RBP: ffffffff86c90e80 R08: 0001ffff8684802f R09: 0000000000000000 [ 2012.185886][T22147] R10: ffffc90003fa3be8 R11: 0001c90003fa3be8 R12: ffffffff86c90ea0 [ 2012.193922][T22147] R13: ffff88810a450028 R14: ffff88810a450e40 R15: ffff88810a450000 [ 2012.201905][T22147] FS: 0000000000000000(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 2012.210859][T22147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2012.217529][T22147] CR2: 00007fffa07f57e8 CR3: 0000000006834000 CR4: 00000000003506f0 [ 2012.225529][T22147] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 2012.233525][T22147] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 2012.241524][T22147] Call Trace: [ 2012.244794][T22147] [ 2012.247716][T22147] xfrm_net_exit+0x2d/0x60 [ 2012.252208][T22147] ops_undo_list+0x27b/0x410 [ 2012.256848][T22147] cleanup_net+0x2f4/0x4f0 [ 2012.261419][T22147] process_scheduled_works+0x4ce/0x9d0 [ 2012.267094][T22147] worker_thread+0x582/0x770 [ 2012.271745][T22147] kthread+0x489/0x510 [ 2012.273810][T29480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2012.275851][T22147] ? finish_task_switch+0xad/0x2b0 [ 2012.275880][T22147] ? __pfx_worker_thread+0x10/0x10 [ 2012.284548][T29480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2012.289387][T22147] ? __pfx_kthread+0x10/0x10 [ 2012.306810][T22147] ret_from_fork+0x122/0x1b0 [ 2012.311406][T22147] ? __pfx_kthread+0x10/0x10 [ 2012.316037][T22147] ret_from_fork_asm+0x1a/0x30 [ 2012.320864][T22147] [ 2012.323872][T22147] ---[ end trace 0000000000000000 ]--- [ 2012.330297][T20816] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2012.535418][T29488] loop8: detected capacity change from 0 to 512 [ 2012.595547][T29489] netlink: 'syz.9.19536': attribute type 3 has an invalid length. [ 2012.843443][T29429] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2012.871351][T29429] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2012.920141][T29429] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2013.085004][T29429] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2013.903682][T29499] loop9: detected capacity change from 0 to 2048 [ 2013.941250][T29499] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2013.998113][T29429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2014.032890][T29429] 8021q: adding VLAN 0 to HW filter on device team0 [ 2014.058571][T28512] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2014.087254][T29429] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2014.097824][T29429] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2014.133629][T22147] bridge0: port 1(bridge_slave_0) entered blocking state [ 2014.140710][T22147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2014.149480][T22147] bridge0: port 2(bridge_slave_1) entered blocking state [ 2014.156527][T22147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2014.265430][T29429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2014.493927][T29429] veth0_vlan: entered promiscuous mode [ 2014.508340][T29429] veth1_vlan: entered promiscuous mode [ 2014.532131][T29429] veth0_macvtap: entered promiscuous mode [ 2014.552235][T29429] veth1_macvtap: entered promiscuous mode [ 2014.577069][T29429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2014.595036][T29429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2014.616377][T22115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.633268][T22115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.659361][T22115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.680509][T22115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.636055][T29562] xt_hashlimit: size too large, truncated to 1048576 [ 2015.796801][T29566] xt_socket: unknown flags 0x50 [ 2016.536467][T29582] netlink: 'syz.8.19556': attribute type 16 has an invalid length. [ 2016.582632][T29582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2016.719912][T29588] loop9: detected capacity change from 0 to 512 [ 2016.757872][T29588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2016.806912][T29588] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 2016.901192][T29588] EXT4-fs (loop9): 1 truncate cleaned up [ 2016.935192][T29588] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2017.186711][T28512] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2017.559838][T29587] netlink: 'syz.4.19559': attribute type 3 has an invalid length. [ 2017.989460][T29602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2017.998207][T29602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2018.301585][T29612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2018.310112][T29612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2018.535978][T29623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2018.544473][T29623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2018.629593][T29625] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2019.325252][T29633] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19574'. [ 2019.478259][T29642] netlink: 'syz.9.19575': attribute type 16 has an invalid length. [ 2020.348693][T29642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2021.003096][T29667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2021.042692][T29667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2021.710851][T29672] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2025.099119][T29736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2025.119014][T29736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2025.143898][T29736] netlink: 68 bytes leftover after parsing attributes in process `syz.6.19607'. [ 2025.640240][T29757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2025.648825][T29757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2025.714200][T29760] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2026.466023][ T29] audit: type=1400 audit(2282.447:7841): avc: denied { execheap } for pid=29767 comm="syz.4.19618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2028.341597][T29789] xt_socket: unknown flags 0x50 [ 2029.687646][T29806] syzkaller0: entered promiscuous mode [ 2029.693226][T29806] syzkaller0: entered allmulticast mode [ 2030.869901][T29819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2030.889408][T29819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2031.053566][T29823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.062151][T29823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2033.956743][T29861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2033.974607][T29861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2034.509679][T29872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29872 comm=syz.6.19651 [ 2036.116478][T29897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2036.125114][T29897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2043.493800][T29979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2043.517789][T29979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2045.528269][T30003] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19689'. [ 2047.458744][T30020] netlink: 28 bytes leftover after parsing attributes in process `syz.9.19696'. [ 2050.299682][T30055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2050.308478][T30055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2052.040944][T30076] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 2053.611448][T30082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19713'. [ 2054.219535][ T29] audit: type=1400 audit(2310.207:7842): avc: denied { connect } for pid=30098 comm="syz.8.19719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2056.750614][T30117] netlink: 'syz.9.19724': attribute type 3 has an invalid length. [ 2057.106988][T30126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2057.136804][T30126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2059.124804][T30149] syzkaller0: entered promiscuous mode [ 2059.130426][T30149] syzkaller0: entered allmulticast mode [ 2059.171028][T30151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19735'. [ 2060.922729][T30169] syzkaller0: entered promiscuous mode [ 2060.928215][T30169] syzkaller0: entered allmulticast mode [ 2061.084174][T30179] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19746'. [ 2063.599142][T30197] netlink: 8 bytes leftover after parsing attributes in process `syz.8.19750'. [ 2063.618223][T30193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2063.635404][T30193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2064.316924][T30206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2064.325555][T30206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2064.577902][ T29] audit: type=1400 audit(2320.557:7843): avc: denied { bind } for pid=30203 comm="syz.6.19752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2067.278768][T30262] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19770'. [ 2067.311786][T30258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2067.320272][T30258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2068.263721][T30286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2068.272656][T30286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2068.435070][T30289] syzkaller0: entered promiscuous mode [ 2068.440683][T30289] syzkaller0: entered allmulticast mode [ 2068.661552][T30292] xt_socket: unknown flags 0x50 [ 2069.111512][T30297] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19782'. [ 2069.152860][T30300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2069.161680][T30300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2069.311132][T30310] SELinux: syz.0.19785 (30310) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 2069.767937][T30319] netlink: 'syz.6.19789': attribute type 3 has an invalid length. [ 2070.792735][T30335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2070.801378][T30335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2071.132556][T30343] xt_socket: unknown flags 0x50 [ 2071.571999][T30352] netlink: 'syz.9.19800': attribute type 3 has an invalid length. [ 2072.893011][T30369] netlink: 'syz.9.19804': attribute type 16 has an invalid length. [ 2072.912580][T30369] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2073.284994][T30376] xt_hashlimit: size too large, truncated to 1048576 [ 2074.566059][T30388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2074.855651][T30388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2075.945799][T30407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2075.960887][T30407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2076.283617][T30408] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19816'. [ 2076.350266][T30416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2076.358989][T30416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2076.836491][T30425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19823'. [ 2078.322791][T30456] netlink: 44 bytes leftover after parsing attributes in process `syz.4.19833'. [ 2078.996326][T30462] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19834'. [ 2079.151262][T30470] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19838'. [ 2082.259654][T30505] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19848'. [ 2083.862714][T30543] netlink: 'syz.8.19859': attribute type 16 has an invalid length. [ 2083.969709][T30543] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2084.391382][T30553] netlink: 44 bytes leftover after parsing attributes in process `syz.0.19863'. [ 2084.560018][T30548] syzkaller0: entered promiscuous mode [ 2084.565575][T30548] syzkaller0: entered allmulticast mode [ 2086.029547][T30569] netlink: 'syz.8.19868': attribute type 3 has an invalid length. [ 2086.706798][ T29] audit: type=1400 audit(2342.637:7844): avc: denied { ioctl } for pid=30567 comm="syz.6.19867" path="socket:[207970]" dev="sockfs" ino=207970 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2086.981684][T30587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2086.999130][T30587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2087.104342][T30594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2087.113125][T30594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2087.573763][T30597] syzkaller0: entered promiscuous mode [ 2087.579285][T30597] syzkaller0: entered allmulticast mode [ 2087.628605][T30605] netlink: 'syz.9.19881': attribute type 3 has an invalid length. [ 2087.723071][T30609] netlink: 'syz.8.19879': attribute type 16 has an invalid length. [ 2087.741068][T30609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2089.853452][T30631] xt_socket: unknown flags 0x50 [ 2092.549940][T30682] netlink: 'syz.0.19902': attribute type 16 has an invalid length. [ 2092.570843][T30682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2093.017846][T30690] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2096.838563][ T5978] Bluetooth: hci0: Frame reassembly failed (-84) [ 2097.093308][T30741] netlink: 'syz.8.19921': attribute type 16 has an invalid length. [ 2097.110470][T30741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2098.723172][T30755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2098.732295][T30755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2098.850015][T27181] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2101.358497][T30791] netlink: 'syz.4.19936': attribute type 16 has an invalid length. [ 2101.384673][T30791] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2102.449524][T30799] netlink: 'syz.8.19939': attribute type 12 has an invalid length. [ 2102.518735][T30801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2102.544950][T30801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2103.059371][ T29] audit: type=1326 audit(2358.747:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30800 comm="syz.8.19940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2c87efc9 code=0x7ffc0000 [ 2103.082453][ T29] audit: type=1326 audit(2358.747:7846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30800 comm="syz.8.19940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2c87efc9 code=0x7ffc0000 [ 2103.105647][ T29] audit: type=1326 audit(2358.747:7847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30800 comm="syz.8.19940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf2c87efc9 code=0x7ffc0000 [ 2103.128862][ T29] audit: type=1326 audit(2358.747:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30800 comm="syz.8.19940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2c87efc9 code=0x7ffc0000 [ 2103.151968][ T29] audit: type=1326 audit(2358.747:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30800 comm="syz.8.19940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2c87efc9 code=0x7ffc0000 [ 2103.175226][ T29] audit: type=1326 audit(2358.747:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30800 comm="syz.8.19940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf2c87efc9 code=0x7ffc0000 [ 2103.198307][ T29] audit: type=1326 audit(2358.747:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30800 comm="syz.8.19940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2c87efc9 code=0x7ffc0000 [ 2103.221558][ T29] audit: type=1326 audit(2358.747:7852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30800 comm="syz.8.19940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2c87efc9 code=0x7ffc0000 [ 2103.244690][ T29] audit: type=1326 audit(2358.747:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30800 comm="syz.8.19940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdf2c87efc9 code=0x7ffc0000 [ 2103.267798][ T29] audit: type=1326 audit(2358.747:7854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30800 comm="syz.8.19940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf2c87efc9 code=0x7ffc0000 [ 2105.283354][T30831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2105.552653][T30831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2106.274042][T30839] netlink: 'syz.8.19952': attribute type 16 has an invalid length. [ 2106.349407][T30839] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2106.626179][T30848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19954'. [ 2110.091151][T30880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2110.114426][T30880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2111.241532][T30903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2111.250431][T30903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2113.996030][T30960] netlink: 44 bytes leftover after parsing attributes in process `syz.4.19991'. [ 2114.273856][T30971] netlink: 'syz.6.19993': attribute type 16 has an invalid length. [ 2114.294076][T30971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2117.282005][T30993] netlink: 'syz.6.20000': attribute type 16 has an invalid length. [ 2117.299334][T30993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2118.778570][T31016] netlink: 44 bytes leftover after parsing attributes in process `syz.9.20006'. [ 2120.767591][T31022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2120.776054][T31022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2121.370058][T31041] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2122.059839][T31050] netlink: 'syz.6.20015': attribute type 16 has an invalid length. [ 2122.078225][T31050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2126.628285][T31137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2126.660051][T31137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2127.472114][T31148] chnl_net:caif_netlink_parms(): no params data found [ 2127.530753][T31148] bridge0: port 1(bridge_slave_0) entered blocking state [ 2127.537899][T31148] bridge0: port 1(bridge_slave_0) entered disabled state [ 2127.545965][T31148] bridge_slave_0: entered allmulticast mode [ 2127.553114][T31148] bridge_slave_0: entered promiscuous mode [ 2127.561215][T31148] bridge0: port 2(bridge_slave_1) entered blocking state [ 2127.568279][T31148] bridge0: port 2(bridge_slave_1) entered disabled state [ 2127.579273][T31148] bridge_slave_1: entered allmulticast mode [ 2127.586030][T31148] bridge_slave_1: entered promiscuous mode [ 2127.611354][T31148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2127.624756][T31148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2127.654702][T31148] team0: Port device team_slave_0 added [ 2127.661880][T31148] team0: Port device team_slave_1 added [ 2127.686760][T31148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2127.693782][T31148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2127.719679][T31148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2127.733924][T31148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2127.740934][T31148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2127.766849][T31148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2127.819960][T31148] hsr_slave_0: entered promiscuous mode [ 2127.826229][T31148] hsr_slave_1: entered promiscuous mode [ 2127.832254][T31148] debugfs: 'hsr0' already exists in 'hsr' [ 2127.837981][T31148] Cannot create hsr debugfs directory [ 2127.906296][T31148] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2127.969139][T31148] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2128.042772][T31148] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2128.112375][T31148] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2128.187173][T31148] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2128.253006][T31148] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2128.262172][T31148] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2128.272484][T31148] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2128.285015][T31171] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20049'. [ 2129.322420][T31148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2129.334811][T31148] 8021q: adding VLAN 0 to HW filter on device team0 [ 2129.344106][ T5978] bridge0: port 1(bridge_slave_0) entered blocking state [ 2129.351224][ T5978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2129.362007][T28305] bridge0: port 2(bridge_slave_1) entered blocking state [ 2129.369230][T28305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2129.635129][T31187] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2129.920841][T31148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2129.931241][T31148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2130.014301][T31197] netlink: 'syz.9.20055': attribute type 3 has an invalid length. [ 2130.089076][T31148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2130.203074][T31148] veth0_vlan: entered promiscuous mode [ 2130.554778][T31148] veth1_vlan: entered promiscuous mode [ 2130.570088][T31148] veth0_macvtap: entered promiscuous mode [ 2130.579554][T31148] veth1_macvtap: entered promiscuous mode [ 2130.610228][T31148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2130.618803][T31148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2130.632689][T28305] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2130.652678][T28305] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2130.663201][T28305] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2130.679152][T28305] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2131.045377][T31235] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20061'. [ 2131.901844][T31248] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2133.656296][T31263] netlink: 'syz.4.20069': attribute type 3 has an invalid length. [ 2135.927519][T31284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2135.946145][T31284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2136.778486][T31298] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2138.221341][T31323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.20086'. [ 2140.020482][T31364] tipc: New replicast peer: 255.255.255.255 [ 2140.026793][T31364] tipc: Enabled bearer , priority 10 [ 2146.676824][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 2146.676883][ T29] audit: type=1400 audit(2402.657:7877): avc: denied { create } for pid=31438 comm="syz.0.20123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2147.684379][ T29] audit: type=1400 audit(2403.657:7878): avc: denied { write } for pid=31438 comm="syz.0.20123" path="socket:[210527]" dev="sockfs" ino=210527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2149.181217][T31469] netlink: 'syz.6.20128': attribute type 16 has an invalid length. [ 2149.200387][T31469] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2149.755516][T31474] xt_socket: unknown flags 0x50 [ 2151.497831][T31492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2151.919336][T31492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2152.474900][ T29] audit: type=1326 audit(2408.117:7879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31491 comm="syz.9.20137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2395efc9 code=0x7ffc0000 [ 2152.498034][ T29] audit: type=1326 audit(2408.117:7880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31491 comm="syz.9.20137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2395efc9 code=0x7ffc0000 [ 2152.521164][ T29] audit: type=1326 audit(2408.117:7881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31491 comm="syz.9.20137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a2395efc9 code=0x7ffc0000 [ 2152.544295][ T29] audit: type=1326 audit(2408.117:7882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31491 comm="syz.9.20137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2395efc9 code=0x7ffc0000 [ 2152.567458][ T29] audit: type=1326 audit(2408.117:7883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31491 comm="syz.9.20137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2395efc9 code=0x7ffc0000 [ 2152.590526][ T29] audit: type=1326 audit(2408.117:7884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31491 comm="syz.9.20137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8a2395efc9 code=0x7ffc0000 [ 2152.613604][ T29] audit: type=1326 audit(2408.117:7885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31491 comm="syz.9.20137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2395efc9 code=0x7ffc0000 [ 2152.636667][ T29] audit: type=1326 audit(2408.117:7886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31491 comm="syz.9.20137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2395efc9 code=0x7ffc0000 [ 2153.497409][T31502] tmpfs: Unsupported parameter 'huge' [ 2154.648111][T31523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2154.676911][T31523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2155.092399][ T29] audit: type=1326 audit(2411.047:7887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31521 comm="syz.9.20148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2395efc9 code=0x7ffc0000 [ 2155.115519][ T29] audit: type=1326 audit(2411.047:7888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31521 comm="syz.9.20148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a2395efc9 code=0x7ffc0000 [ 2155.594487][T31536] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2156.033708][T31540] bridge0: port 1(bridge_slave_0) entered disabled state [ 2156.080531][T31543] xt_socket: unknown flags 0x50 [ 2156.283819][T31550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.292568][T31550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2156.330201][T31552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2156.338730][T31552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2157.312908][T31570] netlink: 'syz.6.20163': attribute type 16 has an invalid length. [ 2157.334801][T31570] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2159.347461][T31591] xt_socket: unknown flags 0x50 [ 2160.942936][T31634] netlink: 'syz.6.20184': attribute type 16 has an invalid length. [ 2160.961445][T31634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2161.304289][T31641] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2162.698580][T31658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2162.729325][T31658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2164.165659][T31696] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2164.827565][T31712] xt_socket: unknown flags 0x50 [ 2165.639574][T31725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2165.667771][T31725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2169.451714][T31768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2169.460194][T31768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2171.672278][T31796] syzkaller0: entered promiscuous mode [ 2171.677800][T31796] syzkaller0: entered allmulticast mode [ 2172.713635][T31812] netlink: 'syz.8.20240': attribute type 3 has an invalid length. [ 2173.700688][T31829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2173.724129][T31829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2173.819243][T31834] syzkaller0: entered promiscuous mode [ 2173.824759][T31834] syzkaller0: entered allmulticast mode [ 2177.117218][T31870] netlink: 'syz.4.20254': attribute type 16 has an invalid length. [ 2178.049401][T31870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2180.579262][T31889] netlink: 'syz.6.20260': attribute type 16 has an invalid length. [ 2180.631724][T31889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2180.876875][T31897] syzkaller0: entered promiscuous mode [ 2180.882393][T31897] syzkaller0: entered allmulticast mode [ 2182.124317][T31915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2182.309335][T31915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.280867][T31922] netlink: 44 bytes leftover after parsing attributes in process `syz.4.20272'. [ 2183.679829][T22110] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2183.804197][T22110] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2183.903054][T22110] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2183.992222][T22110] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2184.121408][T22110] bridge_slave_1: left allmulticast mode [ 2184.127116][T22110] bridge_slave_1: left promiscuous mode [ 2184.132837][T22110] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.173656][T22110] bridge_slave_0: left allmulticast mode [ 2184.179583][T22110] bridge_slave_0: left promiscuous mode [ 2184.185275][T22110] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.731409][T22110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2184.741875][T22110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2184.751801][T22110] bond0 (unregistering): Released all slaves [ 2184.791430][T31925] chnl_net:caif_netlink_parms(): no params data found [ 2184.837440][T22110] tipc: Disabling bearer [ 2184.842769][T22110] tipc: Left network mode [ 2184.860160][T22110] hsr_slave_0: left promiscuous mode [ 2184.866008][T22110] hsr_slave_1: left promiscuous mode [ 2184.874063][T22110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2184.881603][T22110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2184.889487][T22110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2184.896867][T22110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2184.907489][T22110] veth1_macvtap: left promiscuous mode [ 2184.913013][T22110] veth0_macvtap: left promiscuous mode [ 2184.975181][T22110] team0 (unregistering): Port device team_slave_1 removed [ 2184.992181][T22110] team0 (unregistering): Port device team_slave_0 removed [ 2185.034399][T31968] syzkaller0: entered promiscuous mode [ 2185.040035][T31968] syzkaller0: entered allmulticast mode [ 2185.211736][T31925] bridge0: port 1(bridge_slave_0) entered blocking state [ 2185.218811][T31925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2185.276828][T31925] bridge_slave_0: entered allmulticast mode [ 2185.302616][T31925] bridge_slave_0: entered promiscuous mode [ 2185.325830][T31925] bridge0: port 2(bridge_slave_1) entered blocking state [ 2185.332908][T31925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2185.375826][T31925] bridge_slave_1: entered allmulticast mode [ 2185.401756][T31925] bridge_slave_1: entered promiscuous mode [ 2185.466044][T31925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2185.505898][T31925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2185.568882][T31925] team0: Port device team_slave_0 added [ 2185.591833][T31925] team0: Port device team_slave_1 added [ 2185.654647][T31925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2185.661655][T31925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2185.687616][T31925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2185.862952][T31925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2185.869925][T31925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2185.895919][T31925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2186.050853][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 2186.050868][ T29] audit: type=1400 audit(2441.927:7900): avc: denied { write } for pid=31982 comm="syz.9.20287" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 2186.368232][T31925] hsr_slave_0: entered promiscuous mode [ 2186.378426][T31925] hsr_slave_1: entered promiscuous mode [ 2186.391543][T31925] debugfs: 'hsr0' already exists in 'hsr' [ 2186.397295][T31925] Cannot create hsr debugfs directory [ 2186.660816][T22110] ------------[ cut here ]------------ [ 2186.666726][T22110] WARNING: CPU: 1 PID: 22110 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 2186.676583][T22110] Modules linked in: [ 2186.680670][T22110] CPU: 1 UID: 0 PID: 22110 Comm: kworker/u8:20 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 2186.692360][T22110] Tainted: [W]=WARN [ 2186.696166][T22110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2186.706720][T22110] Workqueue: netns cleanup_net [ 2186.711528][T22110] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 2186.717129][T22110] Code: 48 8d bb 70 0e 00 00 e8 e5 4b b7 fc 48 8b bb 70 0e 00 00 e8 99 f8 c3 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 98 f2 9b fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 8a f2 9b fc 90 0f 0b 90 4c 89 f7 e8 ae [ 2186.736851][T22110] RSP: 0018:ffffc90006bbfc60 EFLAGS: 00010293 [ 2186.742980][T22110] RAX: ffffffff84bb5588 RBX: ffff88810a569800 RCX: ffff88811064c200 [ 2186.750975][T22110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810a56a640 [ 2186.758959][T22110] RBP: ffffffff86c90e80 R08: 0001ffff8684802f R09: 0000000000000000 [ 2186.767155][T22110] R10: ffffc90006bbfbe8 R11: 0001c90006bbfbe8 R12: ffffffff86c90ea0 [ 2186.775184][T22110] R13: ffff88810a569828 R14: ffff88810a56a640 R15: ffff88810a569800 [ 2186.783286][T22110] FS: 0000000000000000(0000) GS:ffff8882aef13000(0000) knlGS:0000000000000000 [ 2186.792231][T22110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2186.798844][T22110] CR2: 0000001b34322ff8 CR3: 000000011a45c000 CR4: 00000000003506f0 [ 2186.806887][T22110] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 2186.814881][T22110] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 2186.822963][T22110] Call Trace: [ 2186.826266][T22110] [ 2186.829218][T22110] xfrm_net_exit+0x2d/0x60 [ 2186.833646][T22110] ops_undo_list+0x27b/0x410 [ 2186.838286][T22110] cleanup_net+0x2f4/0x4f0 [ 2186.842729][T22110] process_scheduled_works+0x4ce/0x9d0 [ 2186.848255][T22110] worker_thread+0x582/0x770 [ 2186.852865][T22110] kthread+0x489/0x510 [ 2186.856962][T22110] ? finish_task_switch+0xad/0x2b0 [ 2186.862096][T22110] ? __pfx_worker_thread+0x10/0x10 [ 2186.867206][T22110] ? __pfx_kthread+0x10/0x10 [ 2186.871805][T22110] ret_from_fork+0x122/0x1b0 [ 2186.876400][T22110] ? __pfx_kthread+0x10/0x10 [ 2186.881188][T22110] ret_from_fork_asm+0x1a/0x30 [ 2186.885953][T22110] [ 2186.888987][T22110] ---[ end trace 0000000000000000 ]--- [ 2187.135184][T31925] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2187.141279][T31925] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2187.150228][T31925] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2187.152167][T31925] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2187.619204][T31925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2187.658076][T31925] 8021q: adding VLAN 0 to HW filter on device team0 [ 2187.672905][T28305] bridge0: port 1(bridge_slave_0) entered blocking state [ 2187.679984][T28305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2187.949901][T22110] bridge0: port 2(bridge_slave_1) entered blocking state [ 2187.957074][T22110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2187.982897][T31925] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2187.993413][T31925] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2188.060383][T31925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2188.196679][T31925] veth0_vlan: entered promiscuous mode [ 2188.214100][T31925] veth1_vlan: entered promiscuous mode [ 2188.237880][T31925] veth0_macvtap: entered promiscuous mode [ 2188.246327][T31925] veth1_macvtap: entered promiscuous mode [ 2188.259196][T31925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2188.278122][T31925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2188.296859][T28303] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2188.306148][T28303] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2188.326397][T28303] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2188.335732][T28303] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2189.176756][T32057] syzkaller0: entered promiscuous mode [ 2189.182274][T32057] syzkaller0: entered allmulticast mode [ 2189.696417][T32068] netlink: 44 bytes leftover after parsing attributes in process `syz.6.20302'. [ 2191.188367][T32075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2191.197023][T32075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2191.795633][T32080] xt_socket: unknown flags 0x50 [ 2193.361342][T32101] syzkaller0: entered promiscuous mode [ 2193.366836][T32101] syzkaller0: entered allmulticast mode [ 2193.503353][T32108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2193.513092][T32108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2194.097862][T32118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2194.106543][T32118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2194.543500][T32126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2194.552053][T32126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2197.142474][T32152] netlink: 'syz.0.20328': attribute type 16 has an invalid length. [ 2197.169371][T32152] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2199.903705][T32183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2199.912125][T32183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2199.979071][T32185] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2203.634704][T32221] netlink: 'syz.4.20348': attribute type 16 has an invalid length. [ 2203.756686][T32223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2203.785174][T32223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2203.827225][T32221] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2210.552210][T32288] netlink: 'syz.8.20368': attribute type 16 has an invalid length. [ 2210.578109][T32288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2211.900933][T32303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2211.909504][T32303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2212.093947][T32306] syzkaller0: entered promiscuous mode [ 2212.099460][T32306] syzkaller0: entered allmulticast mode [ 2212.204836][T32312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2212.227820][T32312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2215.286530][T32348] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20386'. [ 2215.830890][T32351] bridge0: port 1(bridge_slave_0) entered disabled state [ 2215.903706][T32359] syzkaller0: entered promiscuous mode [ 2215.909296][T32359] syzkaller0: entered allmulticast mode [ 2218.496997][T32395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2218.505502][T32395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2219.789635][ T29] audit: type=1326 audit(2475.727:7901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32408 comm="syz.8.20405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cd54efc9 code=0x7ffc0000 [ 2219.813092][ T29] audit: type=1326 audit(2475.727:7902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32408 comm="syz.8.20405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cd54efc9 code=0x7ffc0000 [ 2219.836279][ T29] audit: type=1326 audit(2475.727:7903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32408 comm="syz.8.20405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f32cd54efc9 code=0x7ffc0000 [ 2219.859338][ T29] audit: type=1326 audit(2475.727:7904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32408 comm="syz.8.20405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cd54efc9 code=0x7ffc0000 [ 2219.882407][ T29] audit: type=1326 audit(2475.727:7905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32408 comm="syz.8.20405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f32cd54efc9 code=0x7ffc0000 [ 2219.905570][ T29] audit: type=1326 audit(2475.727:7906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32408 comm="syz.8.20405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cd54efc9 code=0x7ffc0000 [ 2219.928657][ T29] audit: type=1326 audit(2475.727:7907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32408 comm="syz.8.20405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32cd54efc9 code=0x7ffc0000 [ 2221.439299][T32421] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2226.019246][T32461] netlink: 'syz.6.20419': attribute type 16 has an invalid length. [ 2226.521162][T32461] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2227.372421][T32475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2227.404787][T32475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.200626][T32528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2230.209130][T32528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.659714][T32536] syzkaller0: entered promiscuous mode [ 2230.665215][T32536] syzkaller0: entered allmulticast mode [ 2232.534964][T32577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2232.543537][T32577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2232.970345][T32580] syzkaller0: entered promiscuous mode [ 2232.975844][T32580] syzkaller0: entered allmulticast mode [ 2233.720054][T32592] netlink: 'syz.6.20463': attribute type 16 has an invalid length. [ 2233.739786][T32592] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2233.810688][T32596] netlink: 44 bytes leftover after parsing attributes in process `syz.0.20464'. [ 2235.262192][T32609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2235.270641][T32609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2235.869975][T32617] netlink: 'syz.9.20471': attribute type 3 has an invalid length. [ 2236.570754][T32637] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2238.992746][T32665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2239.001326][T32665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2239.043738][T32666] netlink: 'syz.8.20482': attribute type 16 has an invalid length. [ 2239.062769][T32666] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2240.454465][ T29] audit: type=1400 audit(2496.437:7908): avc: denied { mounton } for pid=32675 comm="syz.9.20488" path="/proc/756/task" dev="proc" ino=214596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2242.571131][T32716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2242.581958][T32716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2243.937621][ T29] audit: type=1400 audit(2499.917:7909): avc: denied { connect } for pid=32731 comm="syz.0.20504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2244.705579][ T29] audit: type=1400 audit(2500.687:7910): avc: denied { read write } for pid=28140 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2244.779641][ T29] audit: type=1400 audit(2500.687:7911): avc: denied { open } for pid=28140 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1747 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2244.885683][T32756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.894276][T32756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2245.708697][T32758] netlink: 'syz.8.20512': attribute type 3 has an invalid length. [ 2248.098079][ T313] netlink: 44 bytes leftover after parsing attributes in process `syz.6.20514'. [ 2248.345627][ T333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2248.355399][ T333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2248.404670][ T336] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20522'. [ 2250.392888][ T346] netlink: 'syz.0.20527': attribute type 3 has an invalid length. [ 2250.553807][ T353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.562613][ T353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2251.855860][ T375] netlink: 44 bytes leftover after parsing attributes in process `syz.4.20535'. [ 2252.411795][ T384] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2256.160896][ T423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2256.189274][ T423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2257.181828][ T433] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2259.349828][ T454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2259.367748][ T454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2260.578374][ T29] audit: type=1400 audit(2516.557:7912): avc: denied { ioctl } for pid=28140 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1751 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2260.945258][ T487] netlink: 'syz.9.20569': attribute type 3 has an invalid length. [ 2262.007031][ T510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2262.047133][ T510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2262.841031][ T532] netlink: 'syz.4.20581': attribute type 3 has an invalid length. [ 2264.493108][ T553] loop0: detected capacity change from 0 to 1024 [ 2264.741317][ T553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2265.927387][T28140] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2266.293097][ T585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2266.313283][ T585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2267.311955][ T598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2267.429346][ T598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2267.653697][ T607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2267.719278][ T607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2268.776770][ T627] xt_socket: unknown flags 0x50 [ 2269.442744][ T641] netlink: 'syz.6.20613': attribute type 3 has an invalid length. [ 2272.883437][ T673] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2274.741833][ T699] netlink: 'syz.6.20625': attribute type 3 has an invalid length. [ 2275.684586][ T714] xt_socket: unknown flags 0x50 [ 2275.761322][ T725] tipc: Started in network mode [ 2275.766231][ T725] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 2275.773562][ T725] tipc: Enabled bearer , priority 10 [ 2275.797172][ T727] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 2276.889202][T23904] tipc: Node number set to 9611946 [ 2277.297455][ T746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2277.326714][ T746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2278.609080][ T769] xt_socket: unknown flags 0x50 [ 2279.967390][ T800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2279.992130][ T800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2280.185176][ T805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2280.219510][ T805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2280.716556][ T813] netlink: 'syz.6.20662': attribute type 3 has an invalid length. [ 2282.223497][ T846] netlink: 'syz.9.20674': attribute type 3 has an invalid length. [ 2285.789165][ T29] audit: type=1400 audit(2541.767:7913): avc: denied { create } for pid=911 comm="syz.6.20697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2285.956253][ T29] audit: type=1400 audit(2541.797:7914): avc: denied { bind } for pid=911 comm="syz.6.20697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2286.632494][ T29] audit: type=1400 audit(2542.617:7915): avc: denied { create } for pid=928 comm="syz.9.20703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2286.758335][ T29] audit: type=1400 audit(2542.617:7916): avc: denied { connect } for pid=928 comm="syz.9.20703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2287.056760][ T946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2287.079290][ T946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2289.453269][ T982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2289.461845][ T982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2291.955528][ T1011] netlink: 'syz.9.20729': attribute type 16 has an invalid length. [ 2291.975601][ T1011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2294.857104][ T1038] netlink: 40 bytes leftover after parsing attributes in process `syz.8.20739'. [ 2295.818921][ T1050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2295.838022][ T1050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2297.830963][ T1074] netlink: 'syz.4.20746': attribute type 16 has an invalid length. [ 2297.849811][ T1074] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2304.015608][ T1130] loop0: detected capacity change from 0 to 512 [ 2304.124926][ T1130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2304.139163][ T1130] netlink: 'syz.0.20762': attribute type 16 has an invalid length. [ 2304.156911][ T1130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2305.974933][T28140] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2306.241740][ T1159] loop0: detected capacity change from 0 to 128 [ 2306.248655][ T1159] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2306.336326][ T1159] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 2309.276261][ T1189] netlink: 'syz.4.20778': attribute type 16 has an invalid length. [ 2309.295781][ T1189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2310.635853][ T1195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2310.679798][ T1195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2311.513353][ T1219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2311.521903][ T1219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2312.289276][ T1228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20790'. [ 2312.665410][ T29] audit: type=1400 audit(2568.647:7917): avc: denied { create } for pid=1242 comm="syz.9.20794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 2312.800065][ T29] audit: type=1400 audit(2568.677:7918): avc: denied { create } for pid=1242 comm="syz.9.20794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2312.958458][ T1249] netlink: 16 bytes leftover after parsing attributes in process `syz.9.20796'. [ 2316.338106][ T1315] team0: No ports can be present during mode change [ 2316.399601][ T1318] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20816'. [ 2318.117610][ T1308] netlink: 'syz.8.20813': attribute type 16 has an invalid length. [ 2318.140018][ T1308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2319.822058][ T29] audit: type=1400 audit(2575.807:7919): avc: denied { create } for pid=1355 comm="syz.8.20830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2320.983998][ T1375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2321.019235][ T1375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2322.220285][ T1386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2322.228787][ T1386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2324.259787][ T29] audit: type=1400 audit(2580.247:7920): avc: denied { ioctl } for pid=1407 comm="syz.0.20844" path="socket:[218052]" dev="sockfs" ino=218052 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2324.417016][ T1421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2324.425576][ T1421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2324.458331][ T1417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2324.488070][ T1417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2324.873991][ T1427] netlink: 164 bytes leftover after parsing attributes in process `syz.9.20851'. [ 2328.605205][ T1515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2328.613832][ T1515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2330.828104][ T1557] netlink: 52 bytes leftover after parsing attributes in process `syz.6.20893'. [ 2330.837302][ T1557] netlink: 52 bytes leftover after parsing attributes in process `syz.6.20893'. [ 2334.562381][ T29] audit: type=1400 audit(2590.547:7921): avc: denied { create } for pid=1631 comm="syz.8.20916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2334.609247][ T29] audit: type=1400 audit(2590.577:7922): avc: denied { write } for pid=1631 comm="syz.8.20916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2335.257179][ T1649] netlink: 44 bytes leftover after parsing attributes in process `syz.0.20921'. [ 2336.685962][ T29] audit: type=1400 audit(2592.667:7923): avc: denied { create } for pid=1688 comm="syz.4.20935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2336.706620][ T29] audit: type=1400 audit(2592.687:7924): avc: denied { write } for pid=1688 comm="syz.4.20935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2336.971713][ T29] audit: type=1400 audit(2592.957:7925): avc: denied { read write } for pid=1703 comm="syz.9.20940" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2336.995483][ T29] audit: type=1400 audit(2592.957:7926): avc: denied { open } for pid=1703 comm="syz.9.20940" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2338.201703][ T1718] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20944'. [ 2343.556575][ T29] audit: type=1400 audit(2599.537:7927): avc: denied { watch } for pid=1777 comm="syz.9.20961" path="/341/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 2343.975368][ T29] audit: type=1400 audit(2599.627:7928): avc: denied { unmount } for pid=28512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2344.155141][ T1802] netlink: 44 bytes leftover after parsing attributes in process `syz.8.20967'. [ 2346.103496][ T29] audit: type=1400 audit(2602.087:7929): avc: denied { setopt } for pid=1816 comm="syz.8.20974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2347.284307][ T1832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2347.292827][ T1832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2348.444251][ T1856] netlink: 44 bytes leftover after parsing attributes in process `syz.9.20983'. [ 2351.578598][ T1914] netlink: 592 bytes leftover after parsing attributes in process `syz.0.21002'. [ 2354.919610][ T1974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2354.928211][ T1974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2356.174454][ T1994] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21028'. [ 2357.357833][ T2007] bridge_slave_0: left allmulticast mode [ 2357.363623][ T2007] bridge_slave_0: left promiscuous mode [ 2357.369380][ T2007] bridge0: port 1(bridge_slave_0) entered disabled state [ 2357.380686][ T2007] bridge_slave_1: left allmulticast mode [ 2357.386442][ T2007] bridge_slave_1: left promiscuous mode [ 2357.392146][ T2007] bridge0: port 2(bridge_slave_1) entered disabled state [ 2357.499574][ T2007] bond0: (slave bond_slave_0): Releasing backup interface [ 2357.515399][ T2007] bond0: (slave bond_slave_1): Releasing backup interface [ 2357.540480][ T2007] team0: Port device team_slave_0 removed [ 2357.561827][ T2007] team0: Port device team_slave_1 removed [ 2357.582274][ T2007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2357.589771][ T2007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2357.614149][ T2007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2357.621584][ T2007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2357.646428][ T2007] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2357.669391][ T2010] team0: Mode changed to "loadbalance" [ 2358.866886][ T2043] netlink: 44 bytes leftover after parsing attributes in process `syz.8.21042'. [ 2359.642377][ T2061] tmpfs: Unknown parameter 'quota' [ 2361.706822][ T2102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2361.718479][ T2102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2362.012175][ T2114] veth0_to_bridge: entered promiscuous mode [ 2362.020991][ T2114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21065'. [ 2362.030181][ T2114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2362.043466][ T2114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2362.098613][ T2113] veth0_to_bridge: left promiscuous mode [ 2362.784656][ T2128] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2362.945053][ T2137] netlink: 44 bytes leftover after parsing attributes in process `syz.8.21071'. [ 2363.869807][ T2149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2363.878689][ T2149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2366.705968][ T2176] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2367.292135][ T2195] netlink: 44 bytes leftover after parsing attributes in process `syz.9.21086'. [ 2368.841583][ T2207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2368.867647][ T2207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2370.662918][T23904] IPVS: starting estimator thread 0... [ 2370.669381][ T2229] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 2370.769154][ T2230] IPVS: using max 2928 ests per chain, 146400 per kthread [ 2371.525223][ T2251] netlink: 44 bytes leftover after parsing attributes in process `syz.9.21101'. [ 2373.067604][ T2278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21109'. [ 2373.577292][ T2292] bridge_slave_0: left allmulticast mode [ 2373.583023][ T2292] bridge_slave_0: left promiscuous mode [ 2373.588640][ T2292] bridge0: port 1(bridge_slave_0) entered disabled state [ 2373.661179][ T2292] bridge_slave_1: left allmulticast mode [ 2373.666853][ T2292] bridge_slave_1: left promiscuous mode [ 2373.672605][ T2292] bridge0: port 2(bridge_slave_1) entered disabled state [ 2373.684763][ T2292] bond0: (slave bond_slave_0): Releasing backup interface [ 2373.704174][ T2292] bond0: (slave bond_slave_1): Releasing backup interface [ 2373.727380][ T2292] team0: Port device team_slave_0 removed [ 2373.742178][ T2292] team0: Port device team_slave_1 removed [ 2373.757552][ T2292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2373.765028][ T2292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2373.787166][ T2292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2373.891257][ T2301] netlink: 44 bytes leftover after parsing attributes in process `syz.8.21116'. [ 2373.934115][ T2300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2373.959048][ T2300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2375.593174][T15527] IPVS: starting estimator thread 0... [ 2375.619436][ T2337] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21128'. [ 2375.689179][ T2338] IPVS: using max 2880 ests per chain, 144000 per kthread [ 2376.999022][ T2352] netlink: 44 bytes leftover after parsing attributes in process `syz.6.21131'. [ 2377.633424][ T2361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2377.641892][ T2361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2378.289188][ T2374] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21138'. [ 2378.754398][T23904] IPVS: starting estimator thread 0... [ 2378.820037][ T2384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2378.828778][ T2384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2378.849746][ T2380] IPVS: using max 2880 ests per chain, 144000 per kthread [ 2379.889214][ T2399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21145'. [ 2380.066579][ T2401] bridge_slave_0: left allmulticast mode [ 2380.072311][ T2401] bridge_slave_0: left promiscuous mode [ 2380.078127][ T2401] bridge0: port 1(bridge_slave_0) entered disabled state [ 2380.091097][ T2401] bridge_slave_1: left allmulticast mode [ 2380.096771][ T2401] bridge_slave_1: left promiscuous mode [ 2380.102538][ T2401] bridge0: port 2(bridge_slave_1) entered disabled state [ 2380.133489][ T2401] bond0: (slave bond_slave_0): Releasing backup interface [ 2380.152354][ T2401] bond0: (slave bond_slave_1): Releasing backup interface [ 2380.166831][ T2401] team0: Port device team_slave_0 removed [ 2380.176651][ T2401] team0: Port device team_slave_1 removed [ 2380.184199][ T2401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2380.191686][ T2401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2380.249041][ T2401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2380.256553][ T2401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2380.268037][ T2401] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2380.292500][ T2402] team0: Mode changed to "loadbalance" [ 2380.697256][ T29] audit: type=1400 audit(2636.677:7930): avc: denied { create } for pid=2417 comm="syz.9.21153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2381.530797][ T2421] netlink: 'syz.6.21150': attribute type 16 has an invalid length. [ 2381.575196][ T2418] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 2381.632660][ T29] audit: type=1400 audit(2637.617:7931): avc: denied { read } for pid=2417 comm="syz.9.21153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 2381.750970][ T2421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2382.554043][ T2437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2382.571813][ T2437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2383.947364][ T2459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21164'. [ 2385.616890][ T2493] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2385.650492][ T2496] team0: Mode changed to "loadbalance" [ 2385.691089][ T2493] tipc: Enabled bearer , priority 0 [ 2385.888363][ T2500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21179'. [ 2388.025892][ T2529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2388.043127][ T2529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2391.548546][ T2583] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21207'. [ 2392.132361][ T2597] bridge_slave_0: left allmulticast mode [ 2392.138086][ T2597] bridge_slave_0: left promiscuous mode [ 2392.143926][ T2597] bridge0: port 1(bridge_slave_0) entered disabled state [ 2392.154793][ T2597] bridge_slave_1: left allmulticast mode [ 2392.160512][ T2597] bridge_slave_1: left promiscuous mode [ 2392.166183][ T2597] bridge0: port 2(bridge_slave_1) entered disabled state [ 2392.263708][ T2597] bond0: (slave bond_slave_0): Releasing backup interface [ 2392.273708][ T2597] bond0: (slave bond_slave_1): Releasing backup interface [ 2392.288667][ T2597] team0: Port device team_slave_0 removed [ 2392.296829][ T2597] team0: Port device team_slave_1 removed [ 2392.303522][ T2597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2392.310932][ T2597] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2392.319056][ T2597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2392.326480][ T2597] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2392.440677][ T2597] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2393.165630][ T2600] team0: Mode changed to "loadbalance" [ 2393.353190][ T2615] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21219'. [ 2393.981587][ T2634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21226'. [ 2394.103788][ T2639] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2394.180019][ T2641] team0: Unable to change to the same mode the team is in [ 2395.162551][ T2679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2395.187057][ T2679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2398.606290][ T2860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21260'. [ 2398.975063][ T2870] netlink: 80 bytes leftover after parsing attributes in process `syz.4.21264'. [ 2399.839919][ T2885] netlink: 'syz.0.21267': attribute type 16 has an invalid length. [ 2399.857664][ T2885] tipc: Resetting bearer [ 2399.864753][ T2885] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2400.180168][ T2890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2400.188741][ T2890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2400.235444][ T2892] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2400.430089][ T2895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21273'. [ 2400.997321][ T2912] netlink: 20 bytes leftover after parsing attributes in process `syz.6.21270'. [ 2401.019540][ T2912] veth1_macvtap: left promiscuous mode [ 2403.812279][ T2982] netlink: 44 bytes leftover after parsing attributes in process `syz.8.21298'. [ 2404.146975][ T2987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2404.221967][ T2987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2404.933209][ T29] audit: type=1400 audit(2660.917:7932): avc: denied { create } for pid=3020 comm="syz.9.21309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2404.958767][T15527] kernel write not supported for file /1292/gid_map (pid: 15527 comm: kworker/1:4) [ 2405.756397][ T3041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2405.765128][ T3041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2408.210814][ T3055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2408.219253][ T3055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2408.788491][ T3071] 9pnet_fd: Insufficient options for proto=fd [ 2410.495965][ T29] audit: type=1400 audit(2666.477:7933): avc: denied { listen } for pid=3090 comm="syz.6.21330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2410.572915][ T29] audit: type=1400 audit(2666.507:7934): avc: denied { ioctl } for pid=3090 comm="syz.6.21330" path="socket:[225355]" dev="sockfs" ino=225355 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 2410.686472][ T3095] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2410.715956][ T3096] team0: Unable to change to the same mode the team is in [ 2410.732446][ T3096] tipc: Enabled bearer , priority 0 [ 2411.107940][ T3107] 9pnet_fd: Insufficient options for proto=fd [ 2413.391266][ T3150] 9pnet_fd: Insufficient options for proto=fd [ 2413.727622][ T3162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2413.736223][ T3162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2415.265381][ T3199] netlink: 80 bytes leftover after parsing attributes in process `syz.6.21367'. [ 2417.787424][ T3253] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21387'. [ 2420.944598][ T3312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2420.953248][ T3312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2422.208521][ T3353] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21423'. [ 2423.790270][ T29] audit: type=1400 audit(2679.767:7935): avc: denied { ioctl } for pid=3388 comm="syz.8.21438" path="socket:[225200]" dev="sockfs" ino=225200 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2423.821806][ T3390] pim6reg: entered allmulticast mode [ 2424.190304][ T3415] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21446'. [ 2426.613976][ T3444] netlink: 44 bytes leftover after parsing attributes in process `syz.9.21457'. [ 2427.823201][ T3466] netlink: 60 bytes leftover after parsing attributes in process `syz.4.21462'. [ 2430.619799][ T3511] pim6reg: entered allmulticast mode [ 2430.740930][ T3518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2430.749406][ T3518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2431.434990][ T3542] pim6reg: entered allmulticast mode [ 2433.374607][ T3581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2433.383428][ T3581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2435.046223][ T3615] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21516'. [ 2435.254283][ T3625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2435.262937][ T3625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2435.279154][ T3624] netlink: 12 bytes leftover after parsing attributes in process `syz.9.21518'. [ 2435.740205][ T3630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2435.748619][ T3630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2438.403661][ T3678] netlink: 44 bytes leftover after parsing attributes in process `syz.6.21536'. [ 2438.803048][ T29] audit: type=1400 audit(2694.787:7936): avc: denied { ioctl } for pid=3686 comm="syz.4.21539" path="socket:[226799]" dev="sockfs" ino=226799 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2439.011613][ T3695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21541'. [ 2439.496979][ T3701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2439.505553][ T3701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2440.533169][ T3710] bridge_slave_0: left allmulticast mode [ 2440.538848][ T3710] bridge_slave_0: left promiscuous mode [ 2440.544613][ T3710] bridge0: port 1(bridge_slave_0) entered disabled state [ 2440.555853][ T3710] bridge_slave_1: left allmulticast mode [ 2440.561565][ T3710] bridge_slave_1: left promiscuous mode [ 2440.567329][ T3710] bridge0: port 2(bridge_slave_1) entered disabled state [ 2440.577970][ T3710] bond0: (slave bond_slave_0): Releasing backup interface [ 2440.587505][ T3710] bond0: (slave bond_slave_1): Releasing backup interface [ 2440.598465][ T3710] team0: Port device team_slave_0 removed [ 2440.606411][ T3710] team0: Port device team_slave_1 removed [ 2440.613603][ T3710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2440.621102][ T3710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2440.630606][ T3710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2440.638120][ T3710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2440.648278][ T3710] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2440.671294][ T3714] team0: Mode changed to "loadbalance" [ 2440.686463][ T3710] tipc: Started in network mode [ 2440.691364][ T3710] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 2440.698506][ T3710] tipc: Enabled bearer , priority 0 [ 2440.781515][ T3722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2440.789958][ T3722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2441.809248][T23904] tipc: Node number set to 11578026 [ 2442.340053][ T3748] netlink: 60 bytes leftover after parsing attributes in process `syz.8.21556'. [ 2443.846951][ T3780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2443.855420][ T3780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2444.693625][ T3797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2444.702342][ T3797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2446.102172][ T3821] netlink: 'syz.9.21580': attribute type 16 has an invalid length. [ 2446.117766][ T3821] tipc: Resetting bearer [ 2446.150068][ T3821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2446.213464][ T3824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2446.222450][ T3824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2447.087894][ T3838] pim6reg: entered allmulticast mode [ 2447.850749][ T3862] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3862 comm=syz.4.21595 [ 2448.204154][ T3884] tipc: Resetting bearer [ 2448.622071][ T3884] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2448.638232][ T3885] team0: Unable to change to the same mode the team is in [ 2448.725126][ T3897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2448.733779][ T3897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2448.825516][ T29] audit: type=1400 audit(2704.807:7937): avc: denied { map } for pid=3910 comm="syz.0.21615" path="socket:[227127]" dev="sockfs" ino=227127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 2448.876245][ T3916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2448.884895][ T3916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2449.004355][ T3918] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2449.027301][ T3918] team0: Unable to change to the same mode the team is in [ 2449.035740][ T3918] tipc: Started in network mode [ 2449.040809][ T3918] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 2449.047934][ T3918] tipc: Enabled bearer , priority 0 [ 2449.379237][ T3930] netlink: 24 bytes leftover after parsing attributes in process `syz.9.21622'. [ 2449.457691][ T3938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21625'. [ 2450.160525][T15528] tipc: Node number set to 11578026 [ 2450.258481][ T3978] syzkaller0: entered promiscuous mode [ 2450.264085][ T3978] syzkaller0: entered allmulticast mode [ 2451.144863][ T4019] team0: Unable to change to the same mode the team is in [ 2451.153095][ T4019] tipc: Enabling of bearer rejected, already enabled [ 2452.269001][ T4040] pim6reg: entered allmulticast mode [ 2452.583507][ T4050] netlink: 'syz.9.21668': attribute type 16 has an invalid length. [ 2454.680662][ T4091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21685'. [ 2454.972393][ T4105] netlink: 'syz.6.21690': attribute type 16 has an invalid length. [ 2454.988809][ T4105] tipc: Resetting bearer [ 2454.995837][ T4105] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2456.358542][ T4110] syzkaller0: entered promiscuous mode [ 2456.364118][ T4110] syzkaller0: entered allmulticast mode [ 2456.692186][ T4124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2456.747769][ T4124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2457.672370][ T4163] netlink: 'syz.9.21709': attribute type 16 has an invalid length. [ 2457.688159][ T4163] tipc: Resetting bearer [ 2457.695156][ T4163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2457.912165][ T4171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21714'. [ 2459.397964][ T4203] bridge0: entered allmulticast mode [ 2460.786913][ T4229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2460.811960][ T4229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2461.897566][ T4260] 9pnet_fd: Insufficient options for proto=fd [ 2461.956984][ T4272] syzkaller0: entered promiscuous mode [ 2461.962517][ T4272] syzkaller0: entered allmulticast mode [ 2462.703942][ T29] audit: type=1400 audit(2718.687:7938): avc: denied { create } for pid=4287 comm="syz.6.21756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2462.723107][ T29] audit: type=1400 audit(2718.687:7939): avc: denied { write } for pid=4287 comm="syz.6.21756" path="socket:[229474]" dev="sockfs" ino=229474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 2462.746250][ T29] audit: type=1400 audit(2718.687:7940): avc: denied { view } for pid=4287 comm="syz.6.21756" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 2463.265517][ T4297] 9pnet_fd: Insufficient options for proto=fd [ 2467.001841][ T4386] syzkaller0: entered promiscuous mode [ 2467.007438][ T4386] syzkaller0: entered allmulticast mode [ 2468.335423][ T4413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21800'. [ 2468.424550][ T4420] syzkaller0: entered promiscuous mode [ 2468.430078][ T4420] syzkaller0: entered allmulticast mode [ 2470.111571][ T4454] 9pnet_fd: Insufficient options for proto=fd [ 2470.877705][ T4475] syzkaller0: entered promiscuous mode [ 2470.883325][ T4475] syzkaller0: entered allmulticast mode [ 2471.145474][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21825'. [ 2471.177165][ T4483] team0: Unable to change to the same mode the team is in [ 2471.185290][ T4483] tipc: Enabling of bearer rejected, already enabled [ 2471.299718][ T29] audit: type=1400 audit(2727.277:7941): avc: denied { relabelfrom } for pid=4489 comm="syz.8.21829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2471.319865][ T29] audit: type=1400 audit(2727.277:7942): avc: denied { relabelto } for pid=4489 comm="syz.8.21829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 2471.563037][ T3402] kernel write not supported for file /1529/gid_map (pid: 3402 comm: kworker/0:5) [ 2471.604232][ T4516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21839'. [ 2471.614500][ T4516] team0: Unable to change to the same mode the team is in [ 2471.623210][ T4516] tipc: Enabling of bearer rejected, already enabled [ 2472.438429][ T29] audit: type=1400 audit(2728.277:7943): avc: denied { create } for pid=4528 comm="syz.9.21843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2472.973041][ T4549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21851'. [ 2472.983093][ T4549] team0: Unable to change to the same mode the team is in [ 2472.991391][ T4549] tipc: Enabling of bearer rejected, already enabled [ 2474.767080][ T4591] 9pnet_fd: Insufficient options for proto=fd [ 2475.033710][ T4611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2475.059387][ T4611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2475.679388][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21876'. [ 2476.223681][ T29] audit: type=1400 audit(2732.207:7944): avc: denied { write } for pid=4633 comm="syz.8.21880" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2476.247130][ T29] audit: type=1400 audit(2732.207:7945): avc: denied { open } for pid=4633 comm="syz.8.21880" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2476.270927][ T29] audit: type=1400 audit(2732.247:7946): avc: denied { ioctl } for pid=4633 comm="syz.8.21880" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 2476.663697][ T4650] netlink: 44 bytes leftover after parsing attributes in process `syz.8.21884'. [ 2477.403348][ T4662] syzkaller0: entered promiscuous mode [ 2477.408847][ T4662] syzkaller0: entered allmulticast mode [ 2477.531077][ T4664] netlink: 'syz.8.21888': attribute type 16 has an invalid length. [ 2477.549060][ T4664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2478.350347][ T4675] 9pnet_fd: Insufficient options for proto=fd [ 2478.484283][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21897'. [ 2481.261056][ T4703] syzkaller0: entered promiscuous mode [ 2481.266871][ T4703] syzkaller0: entered allmulticast mode [ 2481.337696][ T4707] netlink: 44 bytes leftover after parsing attributes in process `syz.8.21899'. [ 2481.790344][ T4738] 9pnet_fd: Insufficient options for proto=fd [ 2481.902041][ T4748] syzkaller0: entered promiscuous mode [ 2481.907542][ T4748] syzkaller0: entered allmulticast mode [ 2482.814254][ T4768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2482.822901][ T4768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2482.853711][ T29] audit: type=1400 audit(2738.837:7947): avc: denied { mount } for pid=4782 comm="syz.6.21927" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2482.877459][ T29] audit: type=1400 audit(2738.837:7948): avc: denied { mounton } for pid=4782 comm="syz.6.21927" path="/350/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 2482.906304][ T29] audit: type=1400 audit(2738.857:7949): avc: denied { unmount } for pid=31925 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 2482.934839][ T4787] netlink: 80 bytes leftover after parsing attributes in process `syz.6.21928'. [ 2482.966313][ T4790] netlink: 16 bytes leftover after parsing attributes in process `syz.8.21930'. [ 2482.992922][ T4790] team0: Unable to change to the same mode the team is in [ 2483.013102][ T4790] tipc: Started in network mode [ 2483.018175][ T4790] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 2483.025378][ T4790] tipc: Enabled bearer , priority 0 [ 2483.033053][ T29] audit: type=1400 audit(2739.017:7950): avc: denied { append } for pid=4794 comm="syz.9.21932" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 2483.718298][ T4827] netlink: 80 bytes leftover after parsing attributes in process `syz.4.21942'. [ 2483.778864][ T4833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21945'. [ 2483.788935][ T4833] team0: Unable to change to the same mode the team is in [ 2483.797299][ T4833] tipc: Enabling of bearer rejected, already enabled [ 2484.139064][T15528] tipc: Node number set to 11578026 [ 2484.817204][ T4864] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21954'. [ 2484.868167][ T4868] netlink: 16 bytes leftover after parsing attributes in process `syz.6.21957'. [ 2484.878422][ T4868] team0: Unable to change to the same mode the team is in [ 2484.886953][ T4868] tipc: Enabling of bearer rejected, already enabled [ 2486.069918][ T4901] netlink: 16 bytes leftover after parsing attributes in process `syz.8.21971'. [ 2486.098769][ T4901] team0: Unable to change to the same mode the team is in [ 2486.100293][ T4901] tipc: Enabling of bearer rejected, already enabled [ 2486.242689][ T4913] netlink: 80 bytes leftover after parsing attributes in process `syz.9.21975'. [ 2487.079791][ T4935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21983'. [ 2487.139307][ T4935] team0: Unable to change to the same mode the team is in [ 2487.184629][ T4935] tipc: Enabling of bearer rejected, already enabled [ 2487.345581][ T4945] netlink: 80 bytes leftover after parsing attributes in process `syz.4.21987'. [ 2487.431161][ T4949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2487.439768][ T4949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2487.954242][ T4966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.21995'. [ 2487.965887][ T4966] team0: Unable to change to the same mode the team is in [ 2487.995274][ T4966] tipc: Enabling of bearer rejected, already enabled [ 2492.270573][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22040'. [ 2492.503069][ T5104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2492.511621][ T5104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2492.684436][ T5108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22049'. [ 2492.704211][ T5108] team0: Unable to change to the same mode the team is in [ 2492.721095][ T5108] tipc: Enabling of bearer rejected, already enabled [ 2493.268371][ T5142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22063'. [ 2494.732691][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22082'. [ 2494.899110][ T5200] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2495.612146][ T5225] syzkaller0: entered promiscuous mode [ 2495.617650][ T5225] syzkaller0: entered allmulticast mode [ 2495.951668][ T5237] tipc: Resetting bearer [ 2495.966577][ T5237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2496.025386][ T5244] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2497.046060][ T5308] netlink: 112 bytes leftover after parsing attributes in process `syz.6.22127'. [ 2498.559228][ T5381] netlink: 4 bytes leftover after parsing attributes in process `syz.8.22155'. [ 2498.856300][ T5386] syzkaller0: entered promiscuous mode [ 2498.862070][ T5386] syzkaller0: entered allmulticast mode [ 2498.891681][ T5389] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22158'. [ 2498.902858][ T5389] team0: Unable to change to the same mode the team is in [ 2498.911689][ T5389] tipc: Enabling of bearer rejected, already enabled [ 2500.105493][ T5418] tipc: Resetting bearer [ 2500.110682][ T5420] netlink: 8 bytes leftover after parsing attributes in process `syz.9.22170'. [ 2500.119937][ T5418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2500.136722][ T5421] 9pnet_fd: Insufficient options for proto=fd [ 2500.145418][ T5420] team0: Unable to change to the same mode the team is in [ 2500.154133][ T5420] tipc: Enabling of bearer rejected, already enabled [ 2500.188331][ T29] audit: type=1400 audit(2756.167:7951): avc: denied { ioctl } for pid=5426 comm="syz.0.22173" path="socket:[232446]" dev="sockfs" ino=232446 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 2500.923762][ T5459] netlink: 16 bytes leftover after parsing attributes in process `syz.6.22183'. [ 2500.934004][ T5459] team0: Unable to change to the same mode the team is in [ 2500.942206][ T5459] tipc: Enabling of bearer rejected, already enabled [ 2500.997783][ T5465] tipc: Resetting bearer [ 2501.004504][ T5465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2501.022160][ T5465] 9pnet_fd: Insufficient options for proto=fd [ 2501.357359][ T5486] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22195'. [ 2501.380052][ T5486] team0: Unable to change to the same mode the team is in [ 2501.393406][ T5486] tipc: Enabling of bearer rejected, already enabled [ 2502.076846][ T5497] tipc: Resetting bearer [ 2502.083667][ T5497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2502.102645][ T5497] 9pnet_fd: Insufficient options for proto=fd [ 2503.369307][ T5524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.22207'. [ 2503.413848][ T5528] syzkaller0: entered promiscuous mode [ 2503.419421][ T5528] syzkaller0: entered allmulticast mode [ 2503.451988][ T5529] team0: Unable to change to the same mode the team is in [ 2503.482689][ T5524] tipc: Enabling of bearer rejected, already enabled [ 2503.569778][ T29] audit: type=1400 audit(2759.557:7952): avc: denied { associate } for pid=5516 comm="syz.9.22204" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 2503.650272][ T5548] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22214'. [ 2504.494705][ T5568] team0: Unable to change to the same mode the team is in [ 2504.503695][ T5568] tipc: Enabling of bearer rejected, already enabled [ 2504.668090][ T5598] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2504.693037][ T5603] team0: Unable to change to the same mode the team is in [ 2504.711211][ T5603] tipc: Enabling of bearer rejected, already enabled [ 2504.840066][ T5629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2504.869003][ T5629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2505.547628][ T5644] team0: Unable to change to the same mode the team is in [ 2505.556108][ T5644] tipc: Enabling of bearer rejected, already enabled [ 2505.738287][ T5668] team0: Unable to change to the same mode the team is in [ 2505.765022][ T5668] tipc: Enabling of bearer rejected, already enabled [ 2505.844294][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.8.22274'. [ 2505.908285][ T29] audit: type=1400 audit(3017.884:7953): avc: denied { create } for pid=5700 comm="syz.0.22279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2505.957322][ T29] audit: type=1400 audit(3017.894:7954): avc: denied { setopt } for pid=5700 comm="syz.0.22279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 2505.977856][ T29] audit: type=1326 audit(3017.924:7955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.0.22280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347408efc9 code=0x7ffc0000 [ 2506.001129][ T29] audit: type=1326 audit(3017.934:7956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.0.22280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347408efc9 code=0x7ffc0000 [ 2506.024293][ T29] audit: type=1326 audit(3017.934:7957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.0.22280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347408efc9 code=0x7ffc0000 [ 2506.047338][ T29] audit: type=1326 audit(3017.934:7958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.0.22280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f347408efc9 code=0x7ffc0000 [ 2506.070467][ T29] audit: type=1326 audit(3017.934:7959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.0.22280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347408efc9 code=0x7ffc0000 [ 2506.093442][ T29] audit: type=1326 audit(3017.934:7960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.0.22280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f347408efc9 code=0x7ffc0000 [ 2506.116440][ T29] audit: type=1326 audit(3017.934:7961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.0.22280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f347408efc9 code=0x7ffc0000 [ 2506.139536][ T29] audit: type=1326 audit(3017.934:7962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5703 comm="syz.0.22280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f347408efc9 code=0x7ffc0000 [ 2506.173237][ T5709] team0: Unable to change to the same mode the team is in [ 2506.186044][ T5709] tipc: Enabling of bearer rejected, already enabled [ 2507.227621][ T5751] netlink: 'syz.0.22299': attribute type 1 has an invalid length. [ 2507.259747][ T5751] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22299'. [ 2507.290117][ T5755] netlink: 36 bytes leftover after parsing attributes in process `syz.0.22301'. [ 2507.790387][ T5779] netlink: 'syz.6.22312': attribute type 1 has an invalid length. [ 2507.798719][ T5779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22312'. [ 2509.150047][ T5806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2509.158565][ T5806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2509.224513][T22127] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2509.273355][T22127] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2509.332447][T22127] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2509.393301][T22127] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2509.408859][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 2509.640874][T22127] bond0 (unregistering): Released all slaves [ 2509.660749][ T5810] syzkaller0: entered promiscuous mode [ 2509.666260][ T5810] syzkaller0: entered allmulticast mode [ 2509.684457][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 2509.691578][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 2509.699432][ T5793] bridge_slave_0: entered allmulticast mode [ 2509.706092][ T5793] bridge_slave_0: entered promiscuous mode [ 2509.713310][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 2509.720403][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 2509.727786][ T5793] bridge_slave_1: entered allmulticast mode [ 2509.734628][ T5793] bridge_slave_1: entered promiscuous mode [ 2509.741116][ T5823] netlink: 16 bytes leftover after parsing attributes in process `syz.6.22324'. [ 2509.750566][T22127] tipc: Disabling bearer [ 2509.758999][T22127] tipc: Left network mode [ 2509.772031][ T5823] team0: Unable to change to the same mode the team is in [ 2509.780221][T22127] hsr_slave_0: left promiscuous mode [ 2509.785818][T22127] hsr_slave_1: left promiscuous mode [ 2509.793680][T22127] veth1_macvtap: left promiscuous mode [ 2509.799251][T22127] veth0_macvtap: left promiscuous mode [ 2509.825614][T22127] pim6reg (unregistering): left allmulticast mode [ 2509.870131][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2509.879554][ T5827] tipc: Enabling of bearer rejected, already enabled [ 2509.888829][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2509.917793][ T5793] team0: Port device team_slave_0 added [ 2509.924675][ T5793] team0: Port device team_slave_1 added [ 2509.936759][ T5831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2509.945293][ T5831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2509.959160][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2509.966119][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2509.992183][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2510.003576][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2510.010752][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2510.010860][ T2993] ================================================================== [ 2510.036776][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2510.044805][ T2993] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 2510.062281][ T2993] [ 2510.064608][ T2993] write to 0xffffffff868f6c10 of 88 bytes by task 5793 on cpu 0: [ 2510.072319][ T2993] prb_reserve+0x695/0xaf0 [ 2510.076736][ T2993] vprintk_store+0x56d/0x860 [ 2510.081333][ T2993] vprintk_emit+0x10d/0x580 [ 2510.085836][ T2993] vprintk_default+0x26/0x30 [ 2510.090424][ T2993] vprintk+0x1d/0x30 [ 2510.094318][ T2993] _printk+0x79/0xa0 [ 2510.098226][ T2993] batadv_hardif_enable_interface+0x527/0x660 [ 2510.104314][ T2993] batadv_meshif_slave_add+0x66/0xe0 [ 2510.109606][ T2993] do_set_master+0x390/0x460 [ 2510.114185][ T2993] do_setlink+0xa43/0x2810 [ 2510.118595][ T2993] rtnl_newlink+0xe75/0x12d0 [ 2510.123173][ T2993] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 2510.128102][ T2993] netlink_rcv_skb+0x123/0x220 [ 2510.132952][ T2993] rtnetlink_rcv+0x1c/0x30 [ 2510.137354][ T2993] netlink_unicast+0x5c0/0x690 [ 2510.142115][ T2993] netlink_sendmsg+0x58b/0x6b0 [ 2510.146865][ T2993] __sock_sendmsg+0x145/0x180 [ 2510.151525][ T2993] __sys_sendto+0x268/0x330 [ 2510.156013][ T2993] __x64_sys_sendto+0x76/0x90 [ 2510.160700][ T2993] x64_sys_call+0x2d14/0x3000 [ 2510.165496][ T2993] do_syscall_64+0xd2/0x200 [ 2510.169998][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2510.175888][ T2993] [ 2510.178212][ T2993] read to 0xffffffff868f6c10 of 8 bytes by task 2993 on cpu 1: [ 2510.185830][ T2993] _prb_read_valid+0x1c4/0x920 [ 2510.190591][ T2993] prb_read_valid+0x3c/0x60 [ 2510.195088][ T2993] syslog_print+0x23a/0x540 [ 2510.199763][ T2993] do_syslog+0x52b/0x7e0 [ 2510.204000][ T2993] __x64_sys_syslog+0x41/0x50 [ 2510.208676][ T2993] x64_sys_call+0x2f45/0x3000 [ 2510.213350][ T2993] do_syscall_64+0xd2/0x200 [ 2510.217844][ T2993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2510.223731][ T2993] [ 2510.226050][ T2993] value changed: 0x0000000000003134 -> 0x0000000000005134 [ 2510.233140][ T2993] [ 2510.235451][ T2993] Reported by Kernel Concurrency Sanitizer on: [ 2510.241586][ T2993] CPU: 1 UID: 0 PID: 2993 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 2510.252440][ T2993] Tainted: [W]=WARN [ 2510.256229][ T2993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2510.266284][ T2993] ================================================================== [ 2510.295802][ T5793] hsr_slave_0: entered promiscuous mode [ 2510.302245][ T5793] hsr_slave_1: entered promiscuous mode [ 2510.566191][ T5793] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2510.575671][ T5793] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2510.587726][ T5793] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2510.596577][ T5793] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2510.628914][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2510.640300][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 2510.649454][T13232] bridge0: port 1(bridge_slave_0) entered blocking state [ 2510.656627][T13232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2510.667083][T28305] bridge0: port 2(bridge_slave_1) entered blocking state [ 2510.674154][T28305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2510.730195][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2510.817414][ T5793] veth0_vlan: entered promiscuous mode [ 2510.824873][ T5793] veth1_vlan: entered promiscuous mode [ 2510.838586][ T5793] veth0_macvtap: entered promiscuous mode [ 2510.845859][ T5793] veth1_macvtap: entered promiscuous mode [ 2510.856660][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2510.866951][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2510.877319][T28303] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2510.886638][T28303] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2510.897251][T28303] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2510.908141][T28303] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0