last executing test programs: 3m15.114650257s ago: executing program 0 (id=818): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4c20, 0x7, @mcast1, 0x1}, 0x1c) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r3, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/210, 0xd2}, {&(0x7f0000000200)=""/136, 0x88}], 0x2, 0x1, 0x804) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b '], 0xa) 3m15.027623352s ago: executing program 0 (id=820): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) set_mempolicy(0x6005, &(0x7f00000001c0)=0x1003, 0x4) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c00028008000500010000001400070000000000"], 0x74}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 3m14.937851346s ago: executing program 0 (id=821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x40, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) 3m14.920056577s ago: executing program 0 (id=822): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 3m14.894844799s ago: executing program 0 (id=823): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0xe0b, 0xfefffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_type(r3, &(0x7f0000000240), 0x9) 3m14.68963024s ago: executing program 0 (id=825): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000600)="06", 0x1}], 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$FIONREAD(r1, 0x541b, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xb) 3m14.67563251s ago: executing program 32 (id=825): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000600)="06", 0x1}], 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$FIONREAD(r1, 0x541b, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file0'}, 0xb) 3m14.325702769s ago: executing program 4 (id=832): memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) 3m13.910993571s ago: executing program 4 (id=837): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xfffffffffffffffc}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 3m11.600868503s ago: executing program 4 (id=857): socket$inet6(0xa, 0x2, 0x0) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m11.572370175s ago: executing program 4 (id=858): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0003009}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000680)='./file0\x00', 0x12148c5, &(0x7f0000000380)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x30a}}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@rodir}, {@fat=@quiet}, {@uni_xlate}, {@shortname_mixed}, {@fat=@errors_continue}, {@fat=@discard}, {@rodir}, {@rodir}, {@utf8}]}, 0x0, 0x2ce, &(0x7f0000000700)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) 3m11.46821798s ago: executing program 4 (id=859): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/if_inet6\x00') fcntl$setstatus(r0, 0x4, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x4abe, &(0x7f0000000040)={0x0, 0x502b, 0xc000, 0x8, 0x11d}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m10.683936392s ago: executing program 4 (id=869): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m10.642511704s ago: executing program 33 (id=869): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x28, 0x5, 0x0) socket(0x28, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x1ff, 0x7fffffff}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m44.371169552s ago: executing program 2 (id=2059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newlink={0x20, 0x10, 0x1, 0x70bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x3}}, 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x40000) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r2, 0x209, 0x0, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x38}}, 0x0) 1m44.272325407s ago: executing program 2 (id=2061): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3be2b02884f95c63}]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) syz_emit_ethernet(0x0, 0x0, 0x0) 1m43.377314795s ago: executing program 2 (id=2072): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {}, {}, 0xfffffffc}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b800000015000501"], 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) 1m43.268728971s ago: executing program 2 (id=2075): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x1a1046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m43.262131111s ago: executing program 2 (id=2076): socket(0x10, 0x3, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) close(0x4) 1m43.129530918s ago: executing program 2 (id=2078): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="95", 0x1}], 0x1, 0x3, 0x8800007c) close(0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendfile(r1, r0, 0x0, 0xf03a0005) 1m43.112175319s ago: executing program 34 (id=2078): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000280)="95", 0x1}], 0x1, 0x3, 0x8800007c) close(0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendfile(r1, r0, 0x0, 0xf03a0005) 6.871379406s ago: executing program 3 (id=3344): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bond_slave_0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0xa7, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="5b5e26bd5000ffdbdf2501000000050004000200000008000b00", @ANYRES32=r5, @ANYBLOB="08000600ac141414"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1c8, 0x20a, 0x278, 0x1c8, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0x0, 0x0, 0x22}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xff000000, 0x0, 0xff000000], 'batadv_slave_1\x00', 'dvmrp0\x00', {0xff}, {}, 0x2c, 0x21, 0x0, 0x1}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="8d164c3b3f85a42b4d07d9486aaa6a1c90bf839b7789127ed6f0578d486318e9f613725264489b975e89a868cf42fa4798", 0x31}], 0x2}, 0x6004043) 5.812023532s ago: executing program 3 (id=3350): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r2) r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x219) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540) 4.876792061s ago: executing program 3 (id=3364): r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6004a, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x7, 0x491, 0x0, 0x10000000, 0x0, 0x400984, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0x8, 0x1, 'u32\x00'}, @NFTA_MATCH_INFO={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 3.726057612s ago: executing program 3 (id=3372): socket$rds(0x15, 0x5, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x8000}}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x18, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @void}, 0x10) sendmsg$NFT_BATCH(r0, 0x0, 0x40) 3.521426963s ago: executing program 3 (id=3373): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@errors_remount}]}, 0x7, 0x4d4, &(0x7f0000000180)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="7f", 0x1}], 0x1, 0x5412, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.847377489s ago: executing program 3 (id=3375): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.318912797s ago: executing program 1 (id=3389): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x40009}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000400ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 2.231983191s ago: executing program 1 (id=3392): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc01, 0x0, @perf_config_ext={0xd07, 0x20040}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x49845) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x1, 0x20002f7}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.89446696s ago: executing program 1 (id=3387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYRES16=r1, @ANYRES32=r0]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x4010045, &(0x7f0000000140)={0x11, 0xf6, r3, 0x1, 0x80, 0x6, @multicast}, 0x14) 1.799516275s ago: executing program 6 (id=3391): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x60000600) sync() preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x8800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc854) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps_rollup\x00') readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) 1.665534162s ago: executing program 1 (id=3394): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu +pids'], 0xb) 1.664894252s ago: executing program 7 (id=3396): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r2, 0x2000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 1.469435702s ago: executing program 1 (id=3399): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) close(r2) 1.446299053s ago: executing program 7 (id=3400): syz_open_dev$evdev(&(0x7f0000000000), 0xb, 0x18000) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000280)="$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") setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000000000000a0000020000ffffff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a00000000000000fe8000000000000000000000000000bbfeffffff00"/244], 0x10c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events.local\x00', 0x275a, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x6b2881, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, 0x0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="be39", 0xffeb}, {0x0}], 0x2, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0x20}, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) recvmmsg(r1, &(0x7f000000cf00)=[{{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000006d00)=""/4096, 0x1000}], 0x1}, 0x1d}], 0x1, 0x10102, 0x0) 1.308299781s ago: executing program 1 (id=3402): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x26}, 0x28) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.251021094s ago: executing program 5 (id=3403): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) close(r0) 1.157733829s ago: executing program 6 (id=3404): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x804406, &(0x7f00000007c0)=ANY=[@ANYBLOB="646f74732c646f747300646d61736b3d30303030303030303003994db69d6fadd9fe8357bb9b326973636172642c0166733d6e6f7774066c655f726f2c6769643d8bde74b54a903862b1d491a0644fd032adf103782b3e6ab9bb8b7d5a000000800000000083fbbe712b3588cd20fd6b4fa30f99796b63d0000200006bf7964f30b515830fe521179cb856fcec51525e76986850e3c2079c07811902047009a8bd311ec4398a92a06f061a5a0ba1eb2b3db991e65cb55232662ecb874cb1ea47734fd6c56b06c03f20235fad7299622ac7c70fbb5466c8f69e506f15f9048273682c4abdddc8cbc849980b03000000000000000000000063e0c97554c132b6effff3b3e0c109c72f794db4da27b9108716f1877464f58d22d0ea6e75321d887a6a375c5cf8cce358a8df2720e76ce466c78c7901cc6071bc2eafaa394d4290e95d4db56b59ed5d9bd10d94b075a7ace6d3f19993baa452c9ecc39f61cc383b51b627ad3b736c045f8c784b64bbaac710f4372841998dee85b80f515bdeba72caeb00c76ae7cb06986d7e9f9fec03b990c1fc56d5161ae3c622a649f9f95781dd32bc8e4090861fcad6bed6a3be33f3602b136695e7543543b93f62312f5387cd4c6d1aa22271ec1be39d675c08f44ed601b6c8fbf92f448158194570618bfd504dfd0ff459eff7bc34e453816efefe372fcecc66f0956afbe155f1f53d0eff4872d6921804209e82af2ed0a588b8ebbef33bbbc3d495d110acf1a7537f33a8f5a82a29e2d6761b50d3db9dae0a9606eb4b0a92cdb504659776a21344b8fdc9ca3851a76938dd00e59cb1d1ad7ec9ac6e19d3244e209fd56e67caf895cf9f8507b063cac9ddc2ae46f7dff3f9b86b5b3838383015a502f3540a8a796580c78737b10f54977af5cee89e91cc54e21101973aed1e03820294e9811ef0c389ec53e04e14f226213fa4fd2f9c32cd317f936edcf16bffd78d69907336f1e4cf69c22d2e8f0a1caa2623483b45be9f59f1b74cd3f19a92db916f959d4bcb800c50bfabd4d63861e036ef6d614d46c31ab711ad2ead248d781e89017fc7c22d22be274e450e5f1837bf10921f4b117439ad4503f11682542bdba745be99695d4c3d64b96997f1a6f8f3145f94f227694be7682e8a2a1a288b69474164171c6dc00e770cb068702087467ee08643516fbc3f5f71715559152dbdb61082060c73a9338db0407ed89b6941d034f623a6643e39445600"/895, @ANYRES8, @ANYBLOB="3314f54e5fd2edf68f060b6dc46e6726b43f6ee9ddde462c40e60f24007b2bab9e62e0cb8f8765d8cbe7f5463bcb92c74efb73ef0f526fe4056777ed73b012c79f7de0f43b0840ffd77dc59c2f080b4e37bbf7b0a7c58486ec28cc997fb50b582ce980b04cde0666cb1514340a36a20c20bc6ec73af2f34d53b12df083d642568e1b89fb5c988944d8dba6d1a9de"], 0x1, 0x2b1, &(0x7f0000000100)="$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") r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 1.13945385s ago: executing program 5 (id=3405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x20000000, &(0x7f0000000140)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 1.1225108s ago: executing program 6 (id=3406): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x8}, 0x11278e, 0x10003, 0xfffffff8, 0x3, 0x100007, 0x20006, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1020802, &(0x7f00000001c0)=ANY=[], 0x1, 0x25a, &(0x7f0000001040)="$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") syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000001000)='./file1\x00', 0x8000, &(0x7f0000000200)=ANY=[@ANYRES8=r0, @ANYRES16], 0x3, 0x7be, &(0x7f00000005c0)="$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") setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) r1 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000040)='status\x00') pread64(r3, &(0x7f0000000140)=""/25, 0x19, 0x4) 984.261028ms ago: executing program 6 (id=3407): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 983.782838ms ago: executing program 5 (id=3408): open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x2681, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x3d8}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x4c140}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 969.675219ms ago: executing program 6 (id=3409): signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) shmdt(0x0) 573.242149ms ago: executing program 7 (id=3410): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu +pids'], 0xb) 570.61744ms ago: executing program 5 (id=3420): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002940)=@delchain={0x38, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r5, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x10, 0xf}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 353.913452ms ago: executing program 7 (id=3411): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) pipe2$9p(&(0x7f00000001c0), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$vcsa(&(0x7f0000000080), 0x1, 0x40402) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r1, 0xfffffffffffffffe, 0x3}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 342.608672ms ago: executing program 5 (id=3412): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) set_mempolicy(0x4000, &(0x7f0000000100)=0x10, 0x7fffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x6001, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0xff000000, 0x2, 0x7, {@empty, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, 0x7ff, 0x9d, 0xf9, 0xd, 0x0, 0x7, 'ip6tnl0\x00', 'hsr0\x00', {}, {0xfd}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}, {{@arp={@multicast2, @remote, 0x0, 0x0, 0x0, 0x8, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 'veth1_vlan\x00', 'team_slave_0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="f9bcdc63c0c8", @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x3, 0x8, 0x7}, 0x10, 0x23c6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000016000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x3}}, 0x1c, 0x0}}], 0x1, 0x5c) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 237.535768ms ago: executing program 7 (id=3413): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") setpriority(0x1, 0xffffffffffffffff, 0x4af) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) r2 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x7cb7562f2d67) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x3, 0x100000002, 0x1000000000000004, 0x3ff}) 102.472564ms ago: executing program 7 (id=3414): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000800)={{0x2, 0x4e23, @remote}, {0x1, @local}, 0x2c, {0x2, 0x4e22, @empty}, 'lo\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000080)=')@/#-^^\x00', &(0x7f0000000140)='!\x00', &(0x7f0000000180)='syztnl0\x00']}, &(0x7f0000000300)={[&(0x7f0000000200)=',)\x00', &(0x7f0000000240)='syztnl1\x00', &(0x7f0000000280)='syztnl0\x00', &(0x7f00000002c0)='syztnl1\x00']}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) r2 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f6, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}) 31.457319ms ago: executing program 5 (id=3415): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x60000600) sync() preadv(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, 0x8800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc854) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps_rollup\x00') readv(r0, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2) 0s ago: executing program 6 (id=3416): timer_create(0x3, &(0x7f0000000240)={0x0, 0x16, 0x0, @thr={&(0x7f0000000040)="85c6d8a55370179a6ed0a83d481f134a1ecbdc0cb5937f40f06f07f2481ef4464b69438fd0b6c94f8c79933234acef4cb4bc1871d1079ed45f", &(0x7f0000000140)="7be395ab278471f7140b7cb038d169adf5eaf5eda85517661b2ad7de9014c8eb8d2aca5f422ec9821e42debe48b912a5e23ac875389176d2eaef5e8b053966177ce4e1f633c763eee2b6483a3014124b4e19e1ecceebf6ec8ca10780e10537a0c365875ec768043ebfce2273297bbad06cefc24ced514941ef983e770fbdad5da10b5027"}}, &(0x7f0000000280)) clock_gettime(0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x17440000) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x3003, 0x0, 0x0, 0x4, 0x9, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f0000000f40)={[{@jqfmt_vfsold}, {@noblock_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000001680)="$eJzs3EtvG1UbAOB3xk16+3L5Srn0AjUUREQhadICFWIDAqkbJCRYwDKkoQpNW9QEiVYVLQgVsUL8AmCJxC9gBRsErEBsYY+QKtQNhQUymvEMceIkOHZdN/XzSGOfM5ec887Mic/M8TiAvlXNXpKIWkT8HBEj9ezyFar1t+vXLs78ee3iTBK12ku/J/l6f1y7OFOuWm63s8iMpRHp+0nsW6XchfMXTk3Pz8+eK/ITi6ffnFg4f+GxudPTJ2dPzp6ZOnbs6JHJJ5+YevyGxDmU1XXvO2f37zn+6scvzNTite++yOr7v2J5Yxx1ox2XWY3q8n2ZG8xfH+r4r99ahhrSyZYeVoQNqUREdrgG8vY/EpVYOngj8fx7Pa0c0FW1Wq22tWlupUxcrgG3sSR6XQOgN8oP+uz6t5xuYvej564+U78AyuK+Xkz1JVsizd621a/Yh7pUfjUiXrn81yfZFKveh1jdti7VBwC4/X2V9X8eXa3/N5zc1bDecDE2NBoRhyJiV0TcERG7I+LOiMjWvTsi7tlg+dUV+eb+z4/b2wqsRVn/7+libGt5/y8tVxmtFLmhPP6B5PW5+dnDxT4Zi4GtWX5ynTK+fu6nj9Za1tj/y6as/LIvWNTjty0rbtCdmF6c7iTmRk/N1d+b41+6L5BExJ6I2Lt0udCybJ/NPfL5/iw9vLN5+X/Hv44bMM5U+yzi4Xr8l2NF/KWkXtJa45MT22J+9vBEeVY0+/6HKy825gca0h3FfwNcfTdixxrHP1c2g3K8dmHjZVz55YM1r2naPf8Hk5fz9GAx7+3pxcVzkxGDxYxl86eWti3z5fpZ/GMHV4t/ONkV8fenxXb7IiI7ie+NiPsi4kBR9/sj4oGIOLhO/N8+++Ab6++h3h7/E+sd/4jRpHG8vo1E5dQ3X65VfmvH/2ieGivmtPL/r9UKdrLvAAAAYLNI8+/AJ+n4v+k0HR+vf4d/d+xI588uLB6qxltnTtS/Kz8aA2l5p2uk4X7oZHFvuMxPrcgfiYj/53cUt+f58Zmz890aUwdas3ON9p/5tdLr2gFdt6FxtOYn2oBNzPOa0KcGtH/oZ9o/9C/tH/rXau3/UsT1HlQFuMl8/kP/0v6hf2n/0L+0f+hLzY/Elz+30s6T/kuJXcc72nxTJT6M9jbfnicqXapYNP5oRxcSkfZ+z7edSG+FahwoElsjotWtLnX1mK48fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa/fwIAAP//5w/pXg==") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000003c0), 0x111}}, 0x20) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) kernel console output (not intermixed with test programs): 2][ T9487] hsr0: entered allmulticast mode [ 179.714767][ T9487] veth1_virt_wifi: entered allmulticast mode [ 179.720855][ T9487] veth0_virt_wifi: entered allmulticast mode [ 179.727116][ T9487] veth1_vlan: entered allmulticast mode [ 179.732766][ T9487] veth0_vlan: entered allmulticast mode [ 179.738584][ T9487] vlan0: entered allmulticast mode [ 179.743917][ T9487] vlan1: entered allmulticast mode [ 179.749553][ T9487] macvlan0: entered allmulticast mode [ 179.756035][ T9487] macvlan1: entered allmulticast mode [ 179.771069][ T9487] ipvlan0: entered allmulticast mode [ 179.776585][ T9487] ipvlan1: entered allmulticast mode [ 179.782094][ T9487] veth1_macvtap: entered allmulticast mode [ 179.788450][ T9487] veth0_macvtap: entered allmulticast mode [ 179.794634][ T9487] macvtap0: entered allmulticast mode [ 179.800284][ T9487] macsec0: entered allmulticast mode [ 179.809835][ T9487] geneve0: entered allmulticast mode [ 179.816127][ T9487] geneve1: entered allmulticast mode [ 179.821914][ T9487] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 179.829875][ T9487] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 179.837712][ T9487] netdevsim netdevsim5 netdevsim2: entered allmulticast mode [ 179.845395][ T9487] netdevsim netdevsim5 netdevsim3: entered allmulticast mode [ 179.852918][ T9487] veth2: entered allmulticast mode [ 179.858299][ T9487] veth3: entered allmulticast mode [ 179.863569][ T9487] vlan2: entered allmulticast mode [ 179.868891][ T9487] bridge1: entered allmulticast mode [ 179.874444][ T9487] bridge2: entered allmulticast mode [ 179.879975][ T9487] bond1: entered allmulticast mode [ 179.885260][ T9487] ip6gre1: entered allmulticast mode [ 179.890820][ T9487] bridge3: entered allmulticast mode [ 179.896367][ T9487] vxlan0: entered allmulticast mode [ 179.901784][ T9487] vxlan1: entered allmulticast mode [ 179.907205][ T9487] bond2: entered allmulticast mode [ 179.938688][ T9451] chnl_net:caif_netlink_parms(): no params data found [ 180.068032][ T9451] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.097723][ T9451] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.124629][ T9451] bridge_slave_0: entered allmulticast mode [ 180.151100][ T9451] bridge_slave_0: entered promiscuous mode [ 180.186359][ T9451] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.213338][ T9451] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.235940][ T9451] bridge_slave_1: entered allmulticast mode [ 180.250542][ T9451] bridge_slave_1: entered promiscuous mode [ 180.261882][ T3040] 8021q: adding VLAN 0 to HW filter on device eth10 [ 180.285817][ T5210] IPVS: stop unused estimator thread 0... [ 180.332094][ T9451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.350591][ T9451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.397667][ T9451] team0: Port device team_slave_0 added [ 180.404813][ T9451] team0: Port device team_slave_1 added [ 180.421226][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.432601][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.463693][ T9451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.480222][ T9451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.487453][ T9451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.513560][ T9451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.575158][ T9451] hsr_slave_0: entered promiscuous mode [ 180.589705][ T9451] hsr_slave_1: entered promiscuous mode [ 180.600964][ T9451] debugfs: 'hsr0' already exists in 'hsr' [ 180.612352][ T9451] Cannot create hsr debugfs directory [ 180.680510][ T3040] 8021q: adding VLAN 0 to HW filter on device eth11 [ 180.897482][ T9451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 180.909124][ T9451] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.926399][ T9451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 180.943994][ T9451] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.962879][ T9451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.982761][ T9451] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.010348][ T9451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.026973][ T9451] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.111405][ T9451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.125292][ T9451] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.138716][ T5210] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.145849][ T5210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.176080][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.183297][ T5216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.219972][ T9657] smc: net device bond0 applied user defined pnetid SYZ2 [ 181.246880][ T9451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.420428][ T9451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.493015][ T9689] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.2052'. [ 181.533707][ T9689] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2052'. [ 181.651067][ T9451] veth0_vlan: entered promiscuous mode [ 181.685066][ T9451] veth1_vlan: entered promiscuous mode [ 181.727117][ T9451] veth0_macvtap: entered promiscuous mode [ 181.747525][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 181.747619][ T28] audit: type=1400 audit(1776488644.358:1078): avc: denied { watch } for pid=9717 comm="syz.2.2058" path="/" dev="configfs" ino=1101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 181.761281][ T9451] veth1_macvtap: entered promiscuous mode [ 181.818492][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.847688][ T9451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.866220][ T5206] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.885465][ T5206] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.895736][ T5206] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.951998][ T5206] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.130736][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2065'. [ 182.163092][ T28] audit: type=1326 audit(1776488644.768:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ec36c819 code=0x7ffc0000 [ 182.217448][ T28] audit: type=1326 audit(1776488644.768:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ec36c819 code=0x7ffc0000 [ 182.242807][ T28] audit: type=1326 audit(1776488644.798:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f84ec36c819 code=0x7ffc0000 [ 182.267226][ T28] audit: type=1326 audit(1776488644.798:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ec36c819 code=0x7ffc0000 [ 182.320106][ T28] audit: type=1326 audit(1776488644.798:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ec36c819 code=0x7ffc0000 [ 182.345790][ T28] audit: type=1326 audit(1776488644.798:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f84ec36c819 code=0x7ffc0000 [ 182.397239][ T9776] batman_adv: batadv0: Removing interface: dummy0 [ 182.412484][ T9776] bridge_slave_0: left allmulticast mode [ 182.431762][ T9776] bridge_slave_0: left promiscuous mode [ 182.444396][ T9776] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.453656][ T28] audit: type=1326 audit(1776488644.798:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ec36c819 code=0x7ffc0000 [ 182.478184][ T9776] bridge_slave_1: left allmulticast mode [ 182.484011][ T9776] bridge_slave_1: left promiscuous mode [ 182.490153][ T9776] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.505641][ T28] audit: type=1326 audit(1776488644.798:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ec36c819 code=0x7ffc0000 [ 182.531019][ T9776] bond0: (slave bond_slave_0): Releasing backup interface [ 182.555330][ T28] audit: type=1326 audit(1776488644.798:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9762 comm="syz.5.2066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f84ec36c819 code=0x7ffc0000 [ 182.557364][ T9776] bond0: (slave bond_slave_1): Releasing backup interface [ 182.589509][ T9776] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.601832][ T9776] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.611678][ T9776] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 182.661325][ T9781] loop1: detected capacity change from 0 to 128 [ 182.697371][ T9781] msdos: Bad value for 'gid' [ 182.702875][ T9781] msdos: Bad value for 'gid' [ 182.717833][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 182.735471][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 182.745547][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 182.756759][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 182.765936][ T9781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2071'. [ 182.952465][ T7171] bond0: (slave syz_tun): Releasing backup interface [ 183.402439][ T9797] lo speed is unknown, defaulting to 1000 [ 183.598820][ T9797] chnl_net:caif_netlink_parms(): no params data found [ 183.657715][ T9797] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.667491][ T9797] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.676871][ T9797] bridge_slave_0: entered allmulticast mode [ 183.684779][ T9797] bridge_slave_0: entered promiscuous mode [ 183.691899][ T9797] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.699397][ T9797] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.706674][ T9797] bridge_slave_1: entered allmulticast mode [ 183.713294][ T9797] bridge_slave_1: entered promiscuous mode [ 183.738759][ T9797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.758811][ T9797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.795355][ T9797] team0: Port device team_slave_0 added [ 183.803022][ T9797] team0: Port device team_slave_1 added [ 183.819951][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.827134][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.853476][ T9797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.865224][ T9797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.872427][ T9797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.902867][ T9797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.960140][ T9797] hsr_slave_0: entered promiscuous mode [ 183.973019][ T9797] hsr_slave_1: entered promiscuous mode [ 183.986971][ T9797] debugfs: 'hsr0' already exists in 'hsr' [ 183.998545][ T9797] Cannot create hsr debugfs directory [ 184.199156][ T9797] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 184.238799][ T9797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.259512][ T9797] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 184.400081][ T9797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.408593][ T9797] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 184.419367][ T9797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.436819][ T9797] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 184.454994][ T9797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.489560][ T9829] loop3: detected capacity change from 0 to 764 [ 184.572173][ T9836] xt_hashlimit: size too large, truncated to 1048576 [ 184.591556][ T9797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.616171][ T9797] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.640803][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.647962][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.686220][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.693369][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.740338][ T9842] loop3: detected capacity change from 0 to 512 [ 184.757184][ T9842] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #11: block 10: comm syz.3.2089: lblock 0 mapped to illegal pblock 10 (length 1) [ 184.782964][ T9842] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 184.783152][ T9842] EXT4-fs (loop3): Remounting filesystem read-only [ 184.792362][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 184.792379][ C1] EXT4-fs (loop3): initial error at time 1776488647: ext4_map_blocks:791: inode 11: block 10 [ 184.792421][ C1] EXT4-fs (loop3): last error at time 1776488647: ext4_map_blocks:791: inode 11: block 10 [ 184.826195][ T9842] EXT4-fs warning (device loop3): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 184.836344][ T9842] EXT4-fs (loop3): 1 orphan inode deleted [ 184.842543][ T9842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.951794][ T9797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.984903][ T9451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.033285][ T9859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2093'. [ 185.080025][ T9859] bond1: entered promiscuous mode [ 185.085317][ T9859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.122949][ T9859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.130508][ T9859] bond1: (slave sit1): The slave device specified does not support setting the MAC address [ 185.142429][ T9859] bond1: (slave sit1): Error -95 calling set_mac_address [ 185.149771][ T9859] sit1: mtu greater than device maximum [ 185.169329][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'. [ 185.247071][ T9797] veth0_vlan: entered promiscuous mode [ 185.264115][ T9797] veth1_vlan: entered promiscuous mode [ 185.291053][ T9797] veth0_macvtap: entered promiscuous mode [ 185.308652][ T9797] veth1_macvtap: entered promiscuous mode [ 185.322431][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.341474][ T9797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.356463][ T5206] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.371970][ T5206] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.396085][ T5212] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.433578][ T5212] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.466593][ T9891] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.592290][ T9891] bond2: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 185.662872][ T9895] bridge_slave_0: left allmulticast mode [ 185.668997][ T9895] bridge_slave_0: left promiscuous mode [ 185.675335][ T9895] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.683670][ T9895] bridge_slave_1: left allmulticast mode [ 185.690402][ T5206] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 185.701486][ T9895] bridge_slave_1: left promiscuous mode [ 185.707975][ T9895] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.718666][ T9895] bond0: (slave bond_slave_0): Releasing backup interface [ 185.737361][ T9895] bond0: (slave bond_slave_1): Releasing backup interface [ 185.746845][ T9895] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 185.815302][ T5210] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 187.189117][ T9950] IPv6: sit1: Disabled Multicast RS [ 187.197686][ T9951] __nla_validate_parse: 1 callbacks suppressed [ 187.197701][ T9951] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2124'. [ 187.290139][ T9953] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2125'. [ 187.586868][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'. [ 188.067662][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2139'. [ 188.112805][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2139'. [ 188.235358][ T9998] lo speed is unknown, defaulting to 1000 [ 188.559723][T10013] loop7: detected capacity change from 0 to 512 [ 188.768757][T10026] netlink: 'syz.7.2153': attribute type 4 has an invalid length. [ 188.932711][ T28] kauditd_printk_skb: 184 callbacks suppressed [ 188.932745][ T28] audit: type=1400 audit(1776488651.538:1272): avc: denied { name_bind } for pid=10040 comm="syz.7.2159" src=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 189.006240][T10043] Cannot find add_set index 2 as target [ 189.147182][ T28] audit: type=1400 audit(1776488651.758:1273): avc: denied { bind } for pid=10050 comm="syz.7.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.182342][ T28] audit: type=1400 audit(1776488651.788:1274): avc: denied { listen } for pid=10050 comm="syz.7.2164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 189.378300][T10056] loop1: detected capacity change from 0 to 164 [ 189.406603][T10056] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 189.445636][T10056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2166'. [ 189.905296][T10073] netlink: 'syz.6.2172': attribute type 1 has an invalid length. [ 189.928425][T10073] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.942378][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2172'. [ 189.951709][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2172'. [ 189.976643][T10073] macsec1: entered promiscuous mode [ 189.984265][T10073] bond3: entered promiscuous mode [ 189.990389][T10073] macsec1: entered allmulticast mode [ 190.003120][T10073] bond3: entered allmulticast mode [ 190.017517][T10073] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 190.441618][T10101] loop1: detected capacity change from 0 to 512 [ 191.099932][T10145] loop1: detected capacity change from 0 to 512 [ 191.133693][T10145] EXT4-fs: Ignoring removed oldalloc option [ 191.176440][T10145] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.205784][T10145] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2199: iget: bad i_size value: 38620345925642 [ 191.230255][T10145] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 191.234173][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 191.249936][ C1] EXT4-fs (loop1): initial error at time 1776488653: ext4_orphan_get:1397: inode 15 [ 191.259386][ C1] EXT4-fs (loop1): last error at time 1776488653: ext4_orphan_get:1397: inode 15 [ 191.262115][T10145] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2199: couldn't read orphan inode 15 (err -117) [ 191.304260][T10145] loop1: lost filesystem error report for type 5 error -117 [ 191.306239][T10145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.336047][ T28] audit: type=1326 audit(1776488653.948:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f144c819 code=0x7ffc0000 [ 191.406114][ T28] audit: type=1326 audit(1776488653.948:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f144c819 code=0x7ffc0000 [ 191.440167][ T28] audit: type=1326 audit(1776488653.948:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f144c819 code=0x7ffc0000 [ 191.503893][ T28] audit: type=1326 audit(1776488653.978:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f00f144c819 code=0x7ffc0000 [ 191.572823][ T28] audit: type=1326 audit(1776488653.978:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f144c819 code=0x7ffc0000 [ 191.613494][ T28] audit: type=1326 audit(1776488653.978:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f144c819 code=0x7ffc0000 [ 191.674007][ T28] audit: type=1326 audit(1776488653.978:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10159 comm="syz.6.2207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f144c819 code=0x7ffc0000 [ 191.795987][T10172] tipc: Failed to remove unknown binding: 66,1,1/0:448145739/448145741 [ 191.804395][T10172] tipc: Failed to remove unknown binding: 66,1,1/0:448145739/448145741 [ 192.001459][T10180] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2215'. [ 192.067926][ T5212] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:23: bg 0: block 5: invalid block bitmap [ 192.081334][ T5212] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 192.116548][ T5212] EXT4-fs (loop1): This should not happen!! Data will be lost [ 192.116548][ T5212] [ 192.151546][ T5212] EXT4-fs (loop1): Total free blocks count 0 [ 192.164715][ T5212] EXT4-fs (loop1): Free/Dirty block details [ 192.172758][ T5212] EXT4-fs (loop1): free_blocks=0 [ 192.178548][ T5212] EXT4-fs (loop1): dirty_blocks=9548 [ 192.184576][ T5212] EXT4-fs (loop1): Block reservation details [ 192.191250][ T5212] EXT4-fs (loop1): i_reserved_data_blocks=9548 [ 192.223301][ T5196] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 192.257294][ T3318] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 192.433695][T10205] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2223'. [ 192.756254][T10203] Set syz1 is full, maxelem 65536 reached [ 192.907910][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2227'. [ 193.076329][ T5210] bridge_slave_1: left allmulticast mode [ 193.088688][ T5210] bridge_slave_1: left promiscuous mode [ 193.104398][ T5210] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.122989][ T5210] bridge_slave_0: left allmulticast mode [ 193.128862][ T5210] bridge_slave_0: left promiscuous mode [ 193.144428][ T5210] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.176185][ T5210] bond1 (unregistering): (slave geneve2): Releasing active interface [ 193.282615][ T5210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.292183][ T5210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.307724][ T5210] bond0 (unregistering): Released all slaves [ 193.316439][ T5210] bond1 (unregistering): Released all slaves [ 193.414585][ T5210] hsr_slave_0: left promiscuous mode [ 193.420635][ T5210] hsr_slave_1: left promiscuous mode [ 193.432666][ T5210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.485871][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2241'. [ 193.495691][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2241'. [ 193.525952][ T5210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.575868][ T5210] team0 (unregistering): Port device team_slave_1 removed [ 193.595963][ T5210] team0 (unregistering): Port device team_slave_0 removed [ 194.722642][T10269] loop1: detected capacity change from 0 to 764 [ 194.796880][T10274] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.976651][T10182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.080489][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 195.080507][ T28] audit: type=1400 audit(1776488657.688:1334): avc: denied { checkpoint_restore } for pid=10287 comm="syz.7.2257" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 195.695194][T10313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.716968][T10313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.486387][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2271'. [ 196.496379][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2271'. [ 196.571844][T10337] loop1: detected capacity change from 0 to 512 [ 196.581348][T10337] EXT4-fs (loop1): 1 truncate cleaned up [ 196.587689][T10337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.603295][ T28] audit: type=1400 audit(1776488659.208:1335): avc: denied { rename } for pid=10336 comm="syz.1.2274" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 196.626064][ T28] audit: type=1400 audit(1776488659.208:1336): avc: denied { unlink } for pid=10336 comm="syz.1.2274" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 196.649608][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.967897][T10351] syzkaller0: entered promiscuous mode [ 196.973560][T10351] syzkaller0: entered allmulticast mode [ 197.180560][T10358] loop1: detected capacity change from 0 to 512 [ 197.219396][T10358] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 197.245133][T10358] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 197.257166][T10358] System zones: 0-1, 15-15, 18-18, 34-34 [ 197.263175][T10358] EXT4-fs (loop1): orphan cleanup on readonly fs [ 197.269899][T10358] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 197.279672][T10358] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 197.294533][T10358] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 197.301778][T10358] EXT4-fs (loop1): 1 truncate cleaned up [ 197.314431][T10358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.341637][ T28] audit: type=1400 audit(1776488659.948:1337): avc: denied { remount } for pid=10357 comm="syz.1.2282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 197.342166][T10358] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 197.369418][T10358] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 197.397367][ T28] audit: type=1326 audit(1776488660.008:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ec36c819 code=0x7ffc0000 [ 197.422257][ T28] audit: type=1326 audit(1776488660.008:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ec36c819 code=0x7ffc0000 [ 197.446315][ T28] audit: type=1326 audit(1776488660.028:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ec36c819 code=0x7ffc0000 [ 197.469967][ T28] audit: type=1326 audit(1776488660.028:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ec36c819 code=0x7ffc0000 [ 197.504816][ T28] audit: type=1326 audit(1776488660.028:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.5.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f84ec36c819 code=0x7ffc0000 [ 197.535974][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.594675][T10373] loop1: detected capacity change from 0 to 512 [ 197.606655][T10373] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.2286: inode has both inline data and extents flags [ 197.638796][T10373] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 197.638958][T10373] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.2286: couldn't read orphan inode 15 (err -117) [ 197.648273][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 197.648293][ C0] EXT4-fs (loop1): initial error at time 1776488660: ext4_orphan_get:1397: inode 15 [ 197.648322][ C0] EXT4-fs (loop1): last error at time 1776488660: ext4_orphan_get:1397: inode 15 [ 197.697326][T10373] loop1: lost filesystem error report for type 5 error -117 [ 197.700680][T10373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.774317][T10381] netlink: 'syz.7.2289': attribute type 4 has an invalid length. [ 197.790247][T10381] netlink: 'syz.7.2289': attribute type 4 has an invalid length. [ 197.828453][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.888854][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2292'. [ 197.899637][T10391] netlink: 'syz.5.2292': attribute type 5 has an invalid length. [ 197.913525][T10391] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2292'. [ 197.940545][T10391] geneve2: entered promiscuous mode [ 197.946146][T10391] geneve2: entered allmulticast mode [ 198.000679][T10399] loop7: detected capacity change from 0 to 512 [ 198.017546][T10399] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 198.029251][T10399] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 198.037603][T10399] System zones: 0-1, 15-15, 18-18, 34-34 [ 198.043467][T10396] bond3: left allmulticast mode [ 198.043622][T10399] EXT4-fs (loop7): orphan cleanup on readonly fs [ 198.050325][T10396] bond3: left promiscuous mode [ 198.054985][T10399] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 198.074323][ T5216] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 37284 - 0 [ 198.083163][T10399] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 198.090467][T10399] EXT4-fs (loop7): 1 truncate cleaned up [ 198.096796][T10399] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.113923][T10399] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 198.121933][T10399] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 198.157351][ T9797] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.134287][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2305'. [ 199.187133][T10419] 8021q: adding VLAN 0 to HW filter on device bond3 [ 199.243684][T10423] loop7: detected capacity change from 0 to 512 [ 199.250632][T10421] macsec1: entered promiscuous mode [ 199.263552][T10421] bond3: entered promiscuous mode [ 199.269478][T10421] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 199.278446][T10421] bond3: left promiscuous mode [ 199.565299][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2310'. [ 199.635535][T10387] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 37284 - 0 [ 199.712070][ T1579] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 37284 - 0 [ 199.731743][ T1579] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 37284 - 0 [ 199.753515][ T1579] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 37284 - 0 [ 199.777101][ T1579] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 37284 - 0 [ 200.266004][T10463] netlink: 'syz.6.2322': attribute type 3 has an invalid length. [ 200.273902][T10463] netlink: 'syz.6.2322': attribute type 1 has an invalid length. [ 200.282973][T10463] netlink: 60387 bytes leftover after parsing attributes in process `syz.6.2322'. [ 200.372492][T10472] netlink: 'syz.7.2326': attribute type 12 has an invalid length. [ 200.455410][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 200.455429][ T28] audit: type=1400 audit(1776488663.068:1393): avc: denied { read } for pid=10482 comm="syz.3.2330" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 200.495940][ T28] audit: type=1400 audit(1776488663.068:1394): avc: denied { open } for pid=10482 comm="syz.3.2330" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 200.529113][ T28] audit: type=1400 audit(1776488663.068:1395): avc: denied { ioctl } for pid=10482 comm="syz.3.2330" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 200.706305][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2338'. [ 200.728710][T10497] vlan0: entered allmulticast mode [ 200.737824][T10497] macvtap0: entered allmulticast mode [ 201.020029][T10519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2346'. [ 201.088803][T10520] bridge4: entered promiscuous mode [ 201.113026][T10520] bridge4: port 1(macvtap1) entered blocking state [ 201.144972][T10520] bridge4: port 1(macvtap1) entered disabled state [ 201.163443][T10520] macvtap1: entered allmulticast mode [ 201.180208][T10520] bridge4: entered allmulticast mode [ 201.199169][T10520] macvtap1: left allmulticast mode [ 201.217257][T10520] bridge4: left allmulticast mode [ 201.235881][T10520] bridge4: left promiscuous mode [ 201.854382][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2351'. [ 201.874942][T10533] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2351'. [ 202.204384][ T28] audit: type=1326 audit(1776488664.808:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.7.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f7e4c819 code=0x7ffc0000 [ 202.295463][T10549] loop7: detected capacity change from 0 to 2048 [ 202.315762][T10512] syz.6.2344 (10512) used greatest stack depth: 8056 bytes left [ 202.323798][ T28] audit: type=1326 audit(1776488664.848:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.7.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f7e4c819 code=0x7ffc0000 [ 202.385154][T10549] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.391915][ T28] audit: type=1326 audit(1776488664.848:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.7.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f7e4c819 code=0x7ffc0000 [ 202.524230][ T28] audit: type=1326 audit(1776488664.808:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.7.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f7e4c819 code=0x7ffc0000 [ 202.557701][T10559] Process accounting resumed [ 202.573422][ T9797] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.628706][ T28] audit: type=1326 audit(1776488664.848:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.7.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f77f7e4c819 code=0x7ffc0000 [ 202.672061][T10565] xt_limit: Overflow, try lower: 0/0 [ 202.699647][ T28] audit: type=1326 audit(1776488664.848:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.7.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f7e4c819 code=0x7ffc0000 [ 202.708917][T10565] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 202.749472][ T28] audit: type=1326 audit(1776488664.848:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10548 comm="syz.7.2356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f7e4c819 code=0x7ffc0000 [ 202.868324][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2362'. [ 203.402106][T10587] bridge3: entered promiscuous mode [ 203.407687][T10587] bridge3: entered allmulticast mode [ 205.118196][T10540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 205.159850][T10608] loop1: detected capacity change from 0 to 512 [ 205.196781][T10608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.457997][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2385'. [ 205.468450][ T5212] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 205.591346][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.319743][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2406'. [ 207.354353][T10697] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2406'. [ 207.950590][T10719] loop7: detected capacity change from 0 to 512 [ 207.958362][T10719] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 207.966942][T10719] EXT4-fs (loop7): orphan cleanup on readonly fs [ 207.973351][T10719] EXT4-fs error (device loop7): ext4_quota_enable:7221: comm syz.7.2414: Bad quota inum: 393216, type: 0 [ 207.984762][T10719] loop7: lost filesystem error report for type 5 error -117 [ 207.985792][T10719] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=393216). Please run e2fsck to fix. [ 208.008256][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 208.008279][ C1] EXT4-fs (loop7): initial error at time 1776488670: ext4_quota_enable:7221 [ 208.008303][ C1] EXT4-fs (loop7): last error at time 1776488670: ext4_quota_enable:7221 [ 208.032027][T10719] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 208.039261][T10719] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.055145][T10719] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #16: comm syz.7.2414: corrupted xattr block 31: invalid header [ 208.069272][T10719] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=16 [ 208.078518][T10719] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #16: comm syz.7.2414: corrupted xattr block 31: invalid header [ 208.092179][T10719] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=16 [ 208.101357][T10719] EXT4-fs error (device loop7): ext4_get_link:106: inode #16: comm syz.7.2414: bad symlink. [ 208.101369][ T28] kauditd_printk_skb: 296 callbacks suppressed [ 208.101386][ T28] audit: type=1400 audit(1776488670.718:1699): avc: denied { read } for pid=10718 comm="syz.7.2414" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 208.141591][T10723] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #16: comm syz.7.2414: corrupted xattr block 31: invalid header [ 208.156947][T10723] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=16 [ 208.174483][T10723] EXT4-fs error (device loop7): ext4_get_link:106: inode #16: comm syz.7.2414: bad symlink. [ 208.211662][ T9797] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.392827][T10631] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 208.532406][T10747] macsec0: left allmulticast mode [ 208.619770][T10758] netlink: 'syz.7.2429': attribute type 1 has an invalid length. [ 208.673153][T10758] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 208.702217][T10758] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 208.726589][T10758] bond1: (slave vxcan3): making interface the new active one [ 208.743412][T10758] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 208.787936][T10766] bond1: (slave vxcan5): The slave device specified does not support setting the MAC address [ 208.800080][T10766] bond1: (slave vxcan5): Enslaving as a backup interface with an up link [ 208.950253][T10776] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2433'. [ 208.959322][ T5212] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 209.315351][T10796] vhci_hcd vhci_hcd.3: default hub control req: 8015 vfffc i0001 l1 [ 209.406075][ T28] audit: type=1326 audit(1776488672.008:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10802 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2543c819 code=0x7ffc0000 [ 209.473870][ T28] audit: type=1326 audit(1776488672.048:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10802 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2543c819 code=0x7ffc0000 [ 209.535603][ T28] audit: type=1326 audit(1776488672.048:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10802 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdc2543c819 code=0x7ffc0000 [ 209.576372][ T28] audit: type=1326 audit(1776488672.048:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10802 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2543c819 code=0x7ffc0000 [ 209.624696][ T28] audit: type=1326 audit(1776488672.048:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10802 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc2543c819 code=0x7ffc0000 [ 209.667078][ T28] audit: type=1326 audit(1776488672.048:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10802 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2543c819 code=0x7ffc0000 [ 209.713800][T10807] lo speed is unknown, defaulting to 1000 [ 209.722138][ T3375] IPVS: starting estimator thread 0... [ 209.728447][ T28] audit: type=1326 audit(1776488672.048:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10802 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2543c819 code=0x7ffc0000 [ 209.787529][ T28] audit: type=1326 audit(1776488672.048:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10802 comm="syz.1.2444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdc2543c819 code=0x7ffc0000 [ 209.833595][T10808] IPVS: sed: FWM 3 0x00000003 - no destination available [ 209.840460][ T28] audit: type=1400 audit(1776488672.048:1708): avc: denied { bind } for pid=10802 comm="syz.1.2444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 209.861925][T10809] IPVS: using max 2448 ests per chain, 122400 per kthread [ 209.863189][T10811] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2447'. [ 209.895179][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2448'. [ 210.017424][T10816] bridge_slave_1: left allmulticast mode [ 210.023216][T10816] bridge_slave_1: left promiscuous mode [ 210.029064][T10816] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.037077][T10816] bridge_slave_0: left allmulticast mode [ 210.045057][T10816] bridge_slave_0: left promiscuous mode [ 210.055840][T10816] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.282512][T10831] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2456'. [ 210.337689][T10833] lo speed is unknown, defaulting to 1000 [ 210.702236][T10848] program syz.3.2462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.097413][T10871] loop3: detected capacity change from 0 to 4096 [ 211.104282][T10871] EXT4-fs: quotafile must be on filesystem root [ 211.335856][T10884] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 211.861669][T10925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.890355][T10772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 211.992690][ T3423] kernel read not supported for file [fscontext] (pid: 3423 comm: kworker/0:4) [ 212.217361][T10953] syzkaller0: entered promiscuous mode [ 212.223244][T10953] syzkaller0: entered allmulticast mode [ 212.571484][T10966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.591372][T10966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.796095][T10983] loop1: detected capacity change from 0 to 256 [ 212.807150][T10983] FAT-fs (loop1): error, corrupted file size (i_pos 196, 2097152) [ 212.815150][T10983] FAT-fs (loop1): Filesystem has been set read-only [ 212.911427][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'. [ 212.919044][T10989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10989 comm=syz.3.2513 [ 212.933175][T10989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10989 comm=syz.3.2513 [ 212.933264][T10987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2512'. [ 212.946561][T10989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10989 comm=syz.3.2513 [ 212.967293][T10989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10989 comm=syz.3.2513 [ 212.982827][T10989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10989 comm=syz.3.2513 [ 212.996015][T10989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10989 comm=syz.3.2513 [ 213.009774][T10989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10989 comm=syz.3.2513 [ 213.022956][T10989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10989 comm=syz.3.2513 [ 213.036616][T10989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10989 comm=syz.3.2513 [ 213.055171][T10989] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10989 comm=syz.3.2513 [ 213.257378][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2516'. [ 213.271091][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2516'. [ 213.280857][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2516'. [ 213.290255][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2516'. [ 213.299742][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2516'. [ 213.309354][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2516'. [ 213.318700][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2516'. [ 213.328967][T10995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2516'. [ 213.518820][T11019] lo speed is unknown, defaulting to 1000 [ 213.539057][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 213.539074][ T28] audit: type=1400 audit(1776488676.148:1725): avc: denied { setopt } for pid=11020 comm="syz.5.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 213.552083][ T23] IPVS: starting estimator thread 0... [ 213.578430][T11022] loop7: detected capacity change from 0 to 1024 [ 213.674246][T11023] IPVS: using max 2304 ests per chain, 115200 per kthread [ 216.497369][T11019] IPVS: sed: FWM 3 0x00000003 - no destination available [ 216.622231][T11046] netlink: 'syz.6.2537': attribute type 4 has an invalid length. [ 216.633420][T11046] netlink: 'syz.6.2537': attribute type 4 has an invalid length. [ 217.037760][T11055] netlink: 'syz.6.2539': attribute type 7 has an invalid length. [ 217.774376][T11070] lo speed is unknown, defaulting to 1000 [ 217.937995][T11081] loop1: detected capacity change from 0 to 512 [ 217.967697][T11081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.999474][T11081] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.072552][T11081] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 218.150736][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.222778][T11097] __nla_validate_parse: 69 callbacks suppressed [ 218.222797][T11097] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2556'. [ 218.484625][ T28] audit: type=1326 audit(1776488681.098:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11123 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77f7e4c819 code=0x7fc00000 [ 218.535613][ T28] audit: type=1326 audit(1776488681.128:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11123 comm="syz.7.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f77f7e4c819 code=0x7fc00000 [ 218.822261][T11146] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 219.312194][T11153] loop3: detected capacity change from 0 to 512 [ 219.348962][T11153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.361837][T11153] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.376699][ T28] audit: type=1400 audit(1776488681.988:1728): avc: denied { ioctl } for pid=11151 comm="syz.3.2575" path="/99/file1/file1" dev="loop3" ino=15 ioctlcmd=0x6607 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 219.434315][ T9451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.115671][T11192] loop3: detected capacity change from 0 to 128 [ 220.825787][T11222] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) ! [ 220.978884][T11233] sctp: [Deprecated]: syz.6.2608 (pid 11233) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.978884][T11233] Use struct sctp_sack_info instead [ 221.712215][T11253] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2616'. [ 222.726696][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2638'. [ 223.092348][T11322] lo speed is unknown, defaulting to 1000 [ 223.396941][T11328] tipc: Started in network mode [ 223.412061][T11328] tipc: Node identity 020e1fa1817b, cluster identity 4711 [ 223.429311][T11328] tipc: Enabled bearer , priority 0 [ 223.485125][T11328] syzkaller0: entered promiscuous mode [ 223.495695][T11328] syzkaller0: entered allmulticast mode [ 223.510867][T11328] tipc: Resetting bearer [ 223.530245][T11327] tipc: Resetting bearer [ 223.557699][T11327] tipc: Disabling bearer [ 223.970409][T11359] lo speed is unknown, defaulting to 1000 [ 224.023235][T11362] geneve1: entered promiscuous mode [ 224.049869][T11364] netlink: 'syz.6.2658': attribute type 29 has an invalid length. [ 224.066213][T11364] netlink: 'syz.6.2658': attribute type 29 has an invalid length. [ 224.082324][T11364] netlink: 'syz.6.2658': attribute type 29 has an invalid length. [ 224.096316][T11364] netlink: 'syz.6.2658': attribute type 29 has an invalid length. [ 225.176169][ T28] audit: type=1400 audit(1776488687.788:1729): avc: denied { write } for pid=11426 comm="syz.3.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 225.279764][T11430] loop7: detected capacity change from 0 to 512 [ 225.297746][T11430] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.310462][T11430] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.346685][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'. [ 225.997715][T11467] loop1: detected capacity change from 0 to 8192 [ 226.265153][ T9797] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.651488][T11483] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 227.494974][T11488] VFS: Mount too revealing [ 227.502814][ T28] audit: type=1400 audit(1776488690.108:1730): avc: denied { mounton } for pid=11487 comm="syz.5.2707" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.712260][T11505] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 227.724188][ T3375] IPVS: starting estimator thread 0... [ 227.742304][T11501] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 227.759768][T11505] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 227.844307][T11507] IPVS: using max 2256 ests per chain, 112800 per kthread [ 227.861698][T11501] syzkaller0: entered promiscuous mode [ 227.879223][T11501] syzkaller0: entered allmulticast mode [ 228.030492][T11513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.062946][T11513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.097529][T11513] tipc: Enabled bearer , priority 10 [ 228.334281][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2720'. [ 228.510967][T11537] RDS: rds_bind could not find a transport for 7230::f2b7:0:0:0, load rds_tcp or rds_rdma? [ 228.522424][ T3426] IPVS: starting estimator thread 0... [ 228.528637][T11537] IPVS: lc: FWM 3 0x00000003 - no destination available [ 228.614240][T11540] IPVS: using max 2448 ests per chain, 122400 per kthread [ 229.104269][ T3482] tipc: Node number set to 2205491105 [ 229.360894][T11546] lo speed is unknown, defaulting to 1000 [ 229.368604][T11552] loop1: detected capacity change from 0 to 1764 [ 229.410124][ T28] audit: type=1400 audit(1776488692.018:1731): avc: denied { remount } for pid=11551 comm="syz.1.2730" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 229.712772][ T28] audit: type=1326 audit(1776488692.318:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11545 comm="syz.7.2728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77f7e4c819 code=0x0 [ 229.891925][ T28] audit: type=1400 audit(1776488692.498:1733): avc: denied { prog_load } for pid=11566 comm="syz.1.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 229.943146][ T28] audit: type=1400 audit(1776488692.498:1734): avc: denied { bpf } for pid=11566 comm="syz.1.2736" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 229.976399][ T28] audit: type=1400 audit(1776488692.528:1735): avc: denied { perfmon } for pid=11566 comm="syz.1.2736" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 230.036458][ T28] audit: type=1400 audit(1776488692.528:1736): avc: denied { prog_run } for pid=11566 comm="syz.1.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 230.067220][ T28] audit: type=1400 audit(1776488692.528:1737): avc: denied { open } for pid=11566 comm="syz.1.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 230.086855][ T28] audit: type=1400 audit(1776488692.528:1738): avc: denied { kernel } for pid=11566 comm="syz.1.2736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 230.125223][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2739'. [ 230.199698][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 230.199717][ T28] audit: type=1400 audit(1776488692.808:1759): avc: denied { getopt } for pid=11582 comm="syz.1.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 230.245804][ T28] audit: type=1400 audit(1776488692.808:1760): avc: denied { bind } for pid=11582 comm="syz.1.2742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 230.265931][ T28] audit: type=1400 audit(1776488692.808:1761): avc: denied { create } for pid=11586 comm="syz.6.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.305720][T11593] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 230.322730][ T28] audit: type=1400 audit(1776488692.828:1762): avc: denied { bind } for pid=11586 comm="syz.6.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.343339][ T28] audit: type=1400 audit(1776488692.828:1763): avc: denied { listen } for pid=11586 comm="syz.6.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.359772][T11597] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 230.393239][ T28] audit: type=1400 audit(1776488692.828:1764): avc: denied { connect } for pid=11586 comm="syz.6.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.444801][ T28] audit: type=1400 audit(1776488692.828:1765): avc: denied { write } for pid=11586 comm="syz.6.2744" path="socket:[31812]" dev="sockfs" ino=31812 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.495378][ T28] audit: type=1400 audit(1776488692.828:1766): avc: denied { shutdown } for pid=11586 comm="syz.6.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 230.523332][ T28] audit: type=1400 audit(1776488692.848:1767): avc: denied { name_bind } for pid=11584 comm="syz.3.2743" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 230.546290][ T28] audit: type=1400 audit(1776488692.848:1768): avc: denied { create } for pid=11584 comm="syz.3.2743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 230.936352][T11644] lo speed is unknown, defaulting to 1000 [ 231.236931][T11682] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 231.256055][T11682] IPVS: sed: FWM 3 0x00000003 - no destination available [ 232.188397][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 232.210103][T11755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 232.293599][T11761] lo speed is unknown, defaulting to 1000 [ 232.608427][T11771] loop1: detected capacity change from 0 to 2048 [ 232.649937][T11771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.676854][T11771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.769956][T11789] netlink: 'syz.1.2778': attribute type 1 has an invalid length. [ 232.808431][T11789] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.847299][T11797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.888723][T11789] bond4: (slave veth9): Enslaving as an active interface with a down link [ 232.903713][T11798] bond2: left promiscuous mode [ 232.936943][T11798] vlan0: left allmulticast mode [ 232.956639][T11798] macvtap0: left allmulticast mode [ 232.963578][T11802] netlink: 'syz.7.2784': attribute type 1 has an invalid length. [ 232.977283][T11789] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 232.986199][T11789] bond4: (slave batadv1): making interface the new active one [ 232.999435][T11789] batadv1: entered promiscuous mode [ 233.005274][T11789] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 233.032738][T11797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.054700][T11805] bond2: entered promiscuous mode [ 233.063993][T11805] bond2: entered allmulticast mode [ 233.072141][T11805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.104058][T11802] bridge1: entered promiscuous mode [ 233.110116][T11802] bridge1: entered allmulticast mode [ 233.118997][T11802] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 233.168007][T11797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.174395][ T5196] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 233.305152][ T5196] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 233.322136][T11797] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.363319][ T5196] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.375841][ T5196] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.408142][ T5196] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.435522][ T5210] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.479862][T11820] loop1: detected capacity change from 0 to 128 [ 233.821300][T11847] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2801'. [ 233.840484][T11845] netlink: 'syz.6.2800': attribute type 4 has an invalid length. [ 233.875491][T11845] netlink: 'syz.6.2800': attribute type 4 has an invalid length. [ 234.091245][T11865] loop1: detected capacity change from 0 to 512 [ 234.106021][T11865] EXT4-fs: Ignoring removed i_version option [ 234.119180][T11865] EXT4-fs: Ignoring removed nomblk_io_submit option [ 234.144200][T11865] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.2807: bad orphan inode 1 [ 234.171284][T11865] loop1: lost filesystem error report for type 5 error -117 [ 234.180003][T11865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.555608][T11878] netlink: 'syz.3.2812': attribute type 1 has an invalid length. [ 234.570719][T11878] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.708526][T11890] bond2: entered allmulticast mode [ 234.732110][T11890] bridge0: entered promiscuous mode [ 234.738263][T11890] bridge0: entered allmulticast mode [ 234.745922][T11890] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 234.783813][T11900] loop3: detected capacity change from 0 to 128 [ 234.795893][T11900] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.811336][T11900] ext4 filesystem being mounted at /166/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.935223][ T9451] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.946982][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.659247][T11926] loop7: detected capacity change from 0 to 128 [ 235.680125][T11926] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.705422][T11926] ext4 filesystem being mounted at /136/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 235.741935][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 235.741989][ T28] audit: type=1400 audit(1776488698.348:1837): avc: denied { setattr } for pid=11925 comm="syz.7.2831" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.796702][ T28] audit: type=1400 audit(1776488698.368:1838): avc: denied { setattr } for pid=11925 comm="syz.7.2831" name="bus" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 236.004733][T11908] kexec: Could not allocate control_code_buffer [ 236.081338][ T28] audit: type=1400 audit(1776488698.688:1839): avc: denied { read } for pid=11937 comm="syz.1.2835" dev="nsfs" ino=4026532377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 236.107429][T11939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2836'. [ 236.116812][ T28] audit: type=1400 audit(1776488698.688:1840): avc: denied { open } for pid=11937 comm="syz.1.2835" path="pid:[4026532377]" dev="nsfs" ino=4026532377 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 236.212338][ T28] audit: type=1400 audit(1776488698.818:1841): avc: denied { create } for pid=11946 comm="syz.1.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 236.219311][T11948] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2841'. [ 236.279123][ T28] audit: type=1400 audit(1776488698.818:1842): avc: denied { write } for pid=11946 comm="syz.1.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 236.337122][ T28] audit: type=1400 audit(1776488698.818:1843): avc: denied { nlmsg_write } for pid=11946 comm="syz.1.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 236.392647][ T28] audit: type=1400 audit(1776488698.988:1844): avc: denied { shutdown } for pid=11954 comm="syz.3.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 236.448089][ T28] audit: type=1400 audit(1776488698.988:1845): avc: denied { getopt } for pid=11954 comm="syz.3.2843" lport=45011 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 236.520010][ T9797] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.536063][T11957] loop3: detected capacity change from 0 to 512 [ 236.613031][T11957] FAT-fs (loop3): Directory bread(block 199916) failed [ 236.629001][T11957] FAT-fs (loop3): Directory bread(block 199917) failed [ 236.642867][T11957] FAT-fs (loop3): Directory bread(block 199918) failed [ 236.657922][T11957] FAT-fs (loop3): Directory bread(block 199919) failed [ 236.676520][T11957] FAT-fs (loop3): Directory bread(block 199920) failed [ 236.694336][T11957] FAT-fs (loop3): Directory bread(block 199921) failed [ 236.702197][T11957] FAT-fs (loop3): Directory bread(block 199922) failed [ 236.724787][T11957] FAT-fs (loop3): Directory bread(block 199923) failed [ 236.751479][ T28] audit: type=1400 audit(1776488699.358:1846): avc: denied { execmem } for pid=11956 comm="syz.3.2844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 237.511267][T11990] netlink: 'syz.5.2857': attribute type 2 has an invalid length. [ 237.530250][T11990] netlink: 'syz.5.2857': attribute type 2 has an invalid length. [ 237.573186][T11992] loop3: detected capacity change from 0 to 512 [ 237.609739][T11992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.642283][T11992] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.698668][ T9451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.110959][T12017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2867'. [ 238.160246][T12017] bridge5: port 1(veth7) entered blocking state [ 238.169986][T12017] bridge5: port 1(veth7) entered disabled state [ 238.181813][T12017] veth7: entered allmulticast mode [ 238.194905][T12017] veth7: entered promiscuous mode [ 238.206926][T12017] bridge5: port 1(veth7) entered blocking state [ 238.213285][T12017] bridge5: port 1(veth7) entered forwarding state [ 238.250683][ T49] bridge5: port 1(veth7) entered disabled state [ 238.648082][T12036] infiniband syz0: set down [ 238.656020][T12036] infiniband syz0: added bridge_slave_1 [ 238.682021][T12036] RDS/IB: syz0: added [ 238.700019][T12036] smc: adding ib device syz0 with port count 1 [ 238.708935][T12036] smc: ib device syz0 port 1 has no pnetid [ 239.332104][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2880'. [ 239.365998][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2880'. [ 241.062407][T12102] kexec: Could not allocate control_code_buffer [ 241.677571][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 241.677588][ T28] audit: type=1400 audit(1776488704.288:1864): avc: denied { mounton } for pid=12145 comm="syz.7.2917" path="/file0" dev="autofs" ino=33529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 241.802574][ T28] audit: type=1400 audit(1776488704.408:1865): avc: denied { setopt } for pid=12151 comm="syz.7.2920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 242.159083][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2926'. [ 242.194546][ T28] audit: type=1400 audit(1776488704.808:1866): avc: denied { connect } for pid=12169 comm="syz.7.2928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 242.366713][T12174] netlink: 'syz.6.2929': attribute type 1 has an invalid length. [ 242.384383][T12165] bond5: option ad_actor_sys_prio: invalid value (0) [ 242.392076][T12165] bond5: option ad_actor_sys_prio: allowed values 1 - 65535 [ 242.420560][T12165] bond5 (unregistering): Released all slaves [ 242.454573][ T28] audit: type=1400 audit(1776488705.068:1867): avc: denied { create } for pid=12173 comm="syz.6.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 242.490375][T12174] bond4: entered promiscuous mode [ 242.507639][T12174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.528951][ T28] audit: type=1400 audit(1776488705.068:1868): avc: denied { write } for pid=12173 comm="syz.6.2929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 243.253636][T12190] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2934'. [ 243.383777][T12162] kexec: Could not allocate control_code_buffer [ 243.438305][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2938'. [ 243.754135][ T28] audit: type=1400 audit(1776488706.358:1869): avc: denied { create } for pid=12207 comm="syz.5.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.808563][ T28] audit: type=1400 audit(1776488706.368:1870): avc: denied { connect } for pid=12207 comm="syz.5.2942" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.830110][ T28] audit: type=1400 audit(1776488706.378:1871): avc: denied { write } for pid=12207 comm="syz.5.2942" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 243.854221][ T28] audit: type=1400 audit(1776488706.458:1872): avc: denied { setopt } for pid=12210 comm="syz.5.2943" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 244.291929][ T28] audit: type=1326 audit(1776488706.898:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12199 comm="syz.6.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00f144c819 code=0x7fc00000 [ 244.344555][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2944'. [ 244.451894][T12226] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2951'. [ 244.684348][ T5216] bond2: (slave bridge1): link status up again after 0 ms [ 244.701788][ T5216] bond2: (slave bridge1): failed to get link speed/duplex [ 244.834417][ T49] bond2: (slave bridge1): failed to get link speed/duplex [ 244.954423][ T49] bond2: (slave bridge1): failed to get link speed/duplex [ 245.074319][ T49] bond2: (slave bridge1): failed to get link speed/duplex [ 245.194232][ T49] bond2: (slave bridge1): failed to get link speed/duplex [ 245.324289][ T5216] bond2: (slave bridge1): failed to get link speed/duplex [ 245.444261][ T49] bond2: (slave bridge1): failed to get link speed/duplex [ 245.471401][T12260] netlink: 'syz.3.2964': attribute type 4 has an invalid length. [ 245.496253][T12260] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2964'. [ 245.512437][T12262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.537837][T12262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.574371][ T49] bond2: (slave bridge1): failed to get link speed/duplex [ 245.682058][T12268] loop7: detected capacity change from 0 to 512 [ 245.694184][ T49] bond2: (slave bridge1): failed to get link speed/duplex [ 245.728230][T12268] FAT-fs (loop7): Directory bread(block 199916) failed [ 245.747075][T12268] FAT-fs (loop7): Directory bread(block 199917) failed [ 245.760722][T12268] FAT-fs (loop7): Directory bread(block 199918) failed [ 245.770933][T12268] FAT-fs (loop7): Directory bread(block 199919) failed [ 245.780871][T12268] FAT-fs (loop7): Directory bread(block 199920) failed [ 245.792225][T12268] FAT-fs (loop7): Directory bread(block 199921) failed [ 245.802810][T12268] FAT-fs (loop7): Directory bread(block 199922) failed [ 245.812558][T12268] FAT-fs (loop7): Directory bread(block 199923) failed [ 246.016972][T12271] netlink: 'syz.6.2968': attribute type 1 has an invalid length. [ 246.041055][T12271] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.056304][T12271] bond5: entered promiscuous mode [ 246.099900][T12271] bond5: (slave dummy0): making interface the new active one [ 246.137965][T12268] FAT-fs (loop7): FAT read failed (blocknr 128) [ 246.158425][T12271] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 246.188286][T12276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2969'. [ 246.201269][T12275] bond5 (unregistering): left promiscuous mode [ 246.233567][T12275] bond5 (unregistering): (slave dummy0): Releasing active interface [ 246.279352][T12275] bond5 (unregistering): Released all slaves [ 246.677418][T12296] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 37284 - 0 [ 246.751069][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 246.751088][ T28] audit: type=1400 audit(1776488709.358:1898): avc: denied { setopt } for pid=12301 comm="syz.3.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 246.813700][T12296] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 37284 - 0 [ 246.820077][ T28] audit: type=1400 audit(1776488709.358:1899): avc: denied { listen } for pid=12301 comm="syz.3.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 246.867033][ T28] audit: type=1400 audit(1776488709.358:1900): avc: denied { accept } for pid=12301 comm="syz.3.2981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 246.908679][T12296] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 37284 - 0 [ 246.956912][T12305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2982'. [ 247.073619][T12296] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 37284 - 0 [ 247.106401][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'. [ 247.152805][ T5210] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 37284 - 0 [ 247.171515][ T5210] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 37284 - 0 [ 247.198542][ T5210] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 37284 - 0 [ 247.224554][ T5210] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 37284 - 0 [ 247.329595][ T3375] kernel write not supported for file bpf-map (pid: 3375 comm: kworker/0:2) [ 247.338741][ T28] audit: type=1400 audit(1776488709.938:1901): avc: denied { mounton } for pid=12320 comm="syz.5.2989" path="/421/file0" dev="tmpfs" ino=2186 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 247.411295][T12324] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2990'. [ 247.483283][ T28] audit: type=1326 audit(1776488710.088:1902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12327 comm="syz.5.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ec36c819 code=0x7fc00000 [ 247.556553][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2996'. [ 247.567913][ T28] audit: type=1326 audit(1776488710.088:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12327 comm="syz.5.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f84ec36c819 code=0x7fc00000 [ 247.603326][ T28] audit: type=1326 audit(1776488710.138:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12327 comm="syz.5.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ec36c819 code=0x7fc00000 [ 247.859381][T12349] netlink: 'syz.3.3001': attribute type 1 has an invalid length. [ 247.904986][T12349] bond3: entered promiscuous mode [ 247.922411][T12349] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.975197][T12351] bond3: (slave bridge2): making interface the new active one [ 247.986492][ T28] audit: type=1400 audit(1776488710.598:1905): avc: denied { bind } for pid=12352 comm="syz.5.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 248.025384][T12351] bridge2: entered promiscuous mode [ 248.032471][T12351] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 248.184772][ T28] audit: type=1400 audit(1776488710.788:1906): avc: denied { create } for pid=12360 comm="syz.3.3005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 248.458186][T12368] __nla_validate_parse: 1 callbacks suppressed [ 248.458287][T12368] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3008'. [ 248.525204][T12366] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3007'. [ 248.600998][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3010'. [ 248.613653][T12366] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3007'. [ 248.843007][ T28] audit: type=1400 audit(1776488711.448:1907): avc: denied { setopt } for pid=12385 comm="syz.6.3014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 249.237647][T12401] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3019'. [ 249.255980][T12401] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3019'. [ 249.271140][T12401] bridge0: left allmulticast mode [ 249.280151][T12401] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3019'. [ 249.941679][T12406] netlink: 'syz.7.3020': attribute type 1 has an invalid length. [ 250.090080][T12406] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.122097][T12407] bond3: entered promiscuous mode [ 250.172943][T12426] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3027'. [ 250.186635][T12409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.195944][T12409] net_ratelimit: 24 callbacks suppressed [ 250.195957][T12409] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.223969][T12410] bond3: (slave dummy0): making interface the new active one [ 250.231761][T12410] dummy0: entered promiscuous mode [ 250.238609][T12410] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 250.247676][ T3426] lo speed is unknown, defaulting to 1000 [ 250.256869][ T3426] lyz2: Port: 1 Link ACTIVE [ 250.267363][T12406] bond3 (unregistering): left promiscuous mode [ 250.274507][T12406] dummy0: left promiscuous mode [ 250.280166][T12406] bond3 (unregistering): (slave dummy0): Releasing active interface [ 250.290350][T12406] bond3 (unregistering): Released all slaves [ 250.304263][T12426] ip6gre1: entered promiscuous mode [ 250.309535][T12426] ip6gre1: entered allmulticast mode [ 250.317459][ T3426] lo speed is unknown, defaulting to 1000 [ 250.317565][T12434] netlink: 'syz.3.3027': attribute type 6 has an invalid length. [ 250.331563][T12434] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3027'. [ 250.364239][ T5206] bond2: (slave bridge1): failed to get link speed/duplex [ 250.484241][ T49] bond2: (slave bridge1): failed to get link speed/duplex [ 250.592643][T12461] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.624298][ T5216] bond2: (slave bridge1): failed to get link speed/duplex [ 250.658409][T12461] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.728781][T12461] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.746706][T12470] loop3: detected capacity change from 0 to 512 [ 250.767309][T12470] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 250.787276][ T5212] bond2: (slave bridge1): failed to get link speed/duplex [ 250.851950][T12461] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.878016][T12470] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 250.889853][T12470] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 250.902445][T12470] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 250.915085][T12470] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 250.929323][T12470] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 250.943686][T12470] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 250.944568][ T5216] bond2: (slave bridge1): failed to get link speed/duplex [ 250.952828][T12470] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 250.970188][T12470] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 250.983600][T12470] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 250.997165][T12470] FAT-fs (loop3): error, invalid access to FAT (entry 0x0fffff00) [ 251.024862][ T5206] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.041607][ T5206] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.053924][ T5206] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.072217][ T5206] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.084072][ T5212] kworker/u8:23: attempt to access beyond end of device [ 251.084072][ T5212] loop3: rw=1, sector=17179852714, nr_sectors = 56 limit=512 [ 251.098389][ T5206] bond2: (slave bridge1): failed to get link speed/duplex [ 251.214536][ T5212] bond2: (slave bridge1): failed to get link speed/duplex [ 251.307762][T12483] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3048'. [ 251.346207][ T5206] bond2: (slave bridge1): failed to get link speed/duplex [ 251.410768][T12490] loop7: detected capacity change from 0 to 128 [ 251.449830][T12490] msdos: Unknown parameter 'E-' [ 251.474841][ T5212] bond2: (slave bridge1): failed to get link speed/duplex [ 251.543798][T12490] loop7: detected capacity change from 0 to 512 [ 251.581850][T12490] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 251.662319][T12490] EXT4-fs (loop7): failed to open journal device unknown-block(0,0) -6 [ 251.825716][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 251.825734][ T28] audit: type=1400 audit(1776488714.438:1913): avc: denied { map } for pid=12493 comm="syz.5.3052" path="socket:[36474]" dev="sockfs" ino=36474 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 251.878339][T12500] loop7: detected capacity change from 0 to 8192 [ 252.031943][ T28] audit: type=1400 audit(1776488714.638:1914): avc: denied { lock } for pid=12507 comm="syz.5.3057" path="socket:[34307]" dev="sockfs" ino=34307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 252.090005][ T28] audit: type=1400 audit(1776488714.638:1915): avc: denied { write } for pid=12509 comm="syz.3.3058" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 252.152605][ T28] audit: type=1400 audit(1776488714.638:1916): avc: denied { open } for pid=12509 comm="syz.3.3058" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 252.222957][ T28] audit: type=1400 audit(1776488714.748:1917): avc: denied { read } for pid=12513 comm="syz.3.3059" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 252.257055][ T28] audit: type=1400 audit(1776488714.798:1918): avc: denied { read } for pid=12513 comm="syz.3.3059" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 252.307213][ T28] audit: type=1400 audit(1776488714.808:1919): avc: denied { open } for pid=12513 comm="syz.3.3059" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 252.349890][ T28] audit: type=1400 audit(1776488714.808:1920): avc: denied { read } for pid=12515 comm="syz.1.3060" lport=35338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 252.397364][T12519] netlink: 'syz.1.3061': attribute type 10 has an invalid length. [ 253.096219][T12529] netlink: 'syz.3.3064': attribute type 4 has an invalid length. [ 253.147535][T12532] netlink: 'syz.3.3064': attribute type 4 has an invalid length. [ 253.340835][ T28] audit: type=1400 audit(1776488715.948:1921): avc: denied { read } for pid=12535 comm="syz.3.3067" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 253.365093][ T28] audit: type=1400 audit(1776488715.948:1922): avc: denied { open } for pid=12535 comm="syz.3.3067" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 253.483230][T12540] loop1: detected capacity change from 0 to 512 [ 253.513793][T12540] FAT-fs (loop1): Directory bread(block 199916) failed [ 253.523682][T12540] FAT-fs (loop1): Directory bread(block 199917) failed [ 253.534454][T12540] FAT-fs (loop1): Directory bread(block 199918) failed [ 253.543365][T12540] FAT-fs (loop1): Directory bread(block 199919) failed [ 253.552332][T12540] FAT-fs (loop1): Directory bread(block 199920) failed [ 253.565826][T12540] FAT-fs (loop1): Directory bread(block 199921) failed [ 253.579406][T12540] FAT-fs (loop1): Directory bread(block 199922) failed [ 253.590036][T12540] FAT-fs (loop1): Directory bread(block 199923) failed [ 253.991235][T12540] FAT-fs (loop1): FAT read failed (blocknr 128) [ 254.168101][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3078'. [ 254.318901][T12573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3081'. [ 254.391010][T12578] netlink: 1319 bytes leftover after parsing attributes in process `syz.7.3085'. [ 254.643237][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 254.714421][T12602] lo: left allmulticast mode [ 254.726502][T12602] tunl0: left allmulticast mode [ 254.736445][T12602] gre0: left allmulticast mode [ 254.748786][T12602] erspan0: left allmulticast mode [ 254.757464][T12602] ip_vti0: left allmulticast mode [ 254.769328][T12602] ip6_vti0: left allmulticast mode [ 254.780460][T12602] sit0: left allmulticast mode [ 254.803135][T12602] ip6tnl0: left allmulticast mode [ 254.819381][T12602] ip6gre0: left allmulticast mode [ 254.844501][T12602] syz_tun: left allmulticast mode [ 254.868533][T12602] ip6gretap0: left allmulticast mode [ 254.890316][T12602] vcan0: left allmulticast mode [ 254.903427][T12602] bond0: left allmulticast mode [ 254.917859][T12602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.937530][T12602] team0: left allmulticast mode [ 254.950039][T12602] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.968656][T12602] dummy0: left allmulticast mode [ 254.982961][T12602] nlmon0: left allmulticast mode [ 254.996841][T12602] caif0: left allmulticast mode [ 255.224306][ T5206] net_ratelimit: 30 callbacks suppressed [ 255.224323][ T5206] bond2: (slave bridge1): failed to get link speed/duplex [ 255.374945][ T5212] bond2: (slave bridge1): failed to get link speed/duplex [ 255.484466][ T5206] bond2: (slave bridge1): failed to get link speed/duplex [ 255.614233][ T5212] bond2: (slave bridge1): failed to get link speed/duplex [ 255.744173][ T5212] bond2: (slave bridge1): failed to get link speed/duplex [ 255.864153][ T5206] bond2: (slave bridge1): failed to get link speed/duplex [ 256.004217][ T5212] bond2: (slave bridge1): failed to get link speed/duplex [ 256.144367][ T5206] bond2: (slave bridge1): failed to get link speed/duplex [ 256.275248][ T5206] bond2: (slave bridge1): failed to get link speed/duplex [ 256.405711][ T5216] bond2: (slave bridge1): failed to get link speed/duplex [ 256.615359][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3105'. [ 257.306413][T12650] ref_ctr increment failed for inode: 0x4d1 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811f081440 [ 257.404179][T12655] infiniband syz1: set active [ 257.413705][T12655] infiniband syz1: added syz_tun [ 257.471834][T12655] RDS/IB: syz1: added [ 257.491672][T12655] smc: adding ib device syz1 with port count 1 [ 257.519723][T12655] smc: ib device syz1 port 1 has no pnetid [ 257.725172][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 257.725188][ T28] audit: type=1400 audit(1776488720.338:1929): avc: denied { name_bind } for pid=12664 comm="syz.5.3116" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 257.899739][T12674] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3118'. [ 257.935074][T12674] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3118'. [ 258.527688][ T28] audit: type=1400 audit(1776488721.138:1930): avc: denied { read } for pid=12691 comm="syz.7.3123" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 258.599957][ T28] audit: type=1400 audit(1776488721.138:1931): avc: denied { open } for pid=12691 comm="syz.7.3123" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 258.671981][ T28] audit: type=1400 audit(1776488721.178:1932): avc: denied { ioctl } for pid=12691 comm="syz.7.3123" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 258.754729][T12701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3126'. [ 258.773930][T12704] loop3: detected capacity change from 0 to 128 [ 258.782084][T12701] bridge_slave_1 (unregistering): left promiscuous mode [ 258.789735][T12704] msdos: Unknown parameter 'E-' [ 258.806841][T12701] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.873435][T12704] loop3: detected capacity change from 0 to 512 [ 258.884107][ T28] audit: type=1400 audit(1776488721.478:1933): avc: denied { write } for pid=12706 comm="syz.1.3128" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 258.916358][T12704] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 258.927367][T12707] loop1: detected capacity change from 0 to 256 [ 258.945153][T12707] vfat: Unknown parameter 'ÿÿ' [ 258.979949][ T28] audit: type=1400 audit(1776488721.588:1934): avc: denied { getopt } for pid=12706 comm="syz.1.3128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 259.018275][T12704] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 260.244384][ T1579] net_ratelimit: 23 callbacks suppressed [ 260.244404][ T1579] bond2: (slave bridge1): failed to get link speed/duplex [ 260.394500][ T1579] bond2: (slave bridge1): failed to get link speed/duplex [ 260.514961][ T5212] bond2: (slave bridge1): failed to get link speed/duplex [ 260.644211][ T1579] bond2: (slave bridge1): failed to get link speed/duplex [ 260.794274][ T5196] bond2: (slave bridge1): failed to get link speed/duplex [ 260.866595][T12774] netlink: 'syz.6.3150': attribute type 1 has an invalid length. [ 260.883328][T12774] netlink: 'syz.6.3150': attribute type 4 has an invalid length. [ 260.900126][T12774] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.3150'. [ 260.914280][ T5196] bond2: (slave bridge1): failed to get link speed/duplex [ 261.034221][ T5212] bond2: (slave bridge1): failed to get link speed/duplex [ 261.154359][ T5212] bond2: (slave bridge1): failed to get link speed/duplex [ 261.284711][ T5196] bond2: (slave bridge1): failed to get link speed/duplex [ 261.404342][ T5196] bond2: (slave bridge1): failed to get link speed/duplex [ 261.430054][ T28] audit: type=1400 audit(1776488724.038:1935): avc: denied { append } for pid=12784 comm="syz.3.3153" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 261.510658][ T28] audit: type=1400 audit(1776488724.038:1936): avc: denied { read } for pid=12784 comm="syz.3.3153" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 261.534495][ T28] audit: type=1400 audit(1776488724.038:1937): avc: denied { open } for pid=12784 comm="syz.3.3153" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 261.821128][ T28] audit: type=1400 audit(1776488724.428:1938): avc: denied { map } for pid=12794 comm="syz.5.3158" path="socket:[36847]" dev="sockfs" ino=36847 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 261.891270][T12797] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3159'. [ 261.915934][T12799] netlink: 'syz.5.3160': attribute type 10 has an invalid length. [ 261.949237][T12799] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3160'. [ 261.979262][T12799] ipvlan0: entered promiscuous mode [ 261.994249][T12799] ipvlan0: left allmulticast mode [ 262.007817][T12799] batman_adv: batadv0: Adding interface: ipvlan0 [ 262.024251][T12799] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.094485][T12799] batman_adv: batadv0: Interface activated: ipvlan0 [ 262.427684][T12816] 9p: Bad value for 'wfdno' [ 262.830701][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 262.830719][ T28] audit: type=1400 audit(1776488725.438:1940): avc: denied { create } for pid=12831 comm="syz.1.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 262.899499][ T28] audit: type=1400 audit(1776488725.478:1941): avc: denied { ioctl } for pid=12831 comm="syz.1.3172" path="socket:[36901]" dev="sockfs" ino=36901 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 263.551450][ T28] audit: type=1400 audit(1776488726.158:1942): avc: denied { bind } for pid=12851 comm="syz.1.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 263.574905][ T28] audit: type=1400 audit(1776488726.188:1943): avc: denied { write } for pid=12851 comm="syz.1.3180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 264.740174][T12882] lo speed is unknown, defaulting to 1000 [ 264.842646][ T28] audit: type=1400 audit(1776488727.448:1944): avc: denied { create } for pid=12889 comm="syz.7.3192" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 264.885620][ T28] audit: type=1400 audit(1776488727.478:1945): avc: denied { write } for pid=12889 comm="syz.7.3192" name="file0" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 264.934076][ T28] audit: type=1400 audit(1776488727.478:1946): avc: denied { open } for pid=12889 comm="syz.7.3192" path="/204/file0" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 264.983991][ T28] audit: type=1400 audit(1776488727.478:1947): avc: denied { ioctl } for pid=12889 comm="syz.7.3192" path="/204/file0" dev="tmpfs" ino=1075 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 265.274269][ T5212] net_ratelimit: 32 callbacks suppressed [ 265.274289][ T5212] bond2: (slave bridge1): failed to get link speed/duplex [ 265.404453][ T5212] bond2: (slave bridge1): failed to get link speed/duplex [ 265.524238][ T5206] bond2: (slave bridge1): failed to get link speed/duplex [ 265.645029][ T5196] bond2: (slave bridge1): failed to get link speed/duplex [ 265.764224][ T5206] bond2: (slave bridge1): failed to get link speed/duplex [ 265.874404][ T28] audit: type=1400 audit(1776488728.488:1948): avc: denied { unlink } for pid=9797 comm="syz-executor" name="file0" dev="tmpfs" ino=1075 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 265.884279][ T5206] bond2: (slave bridge1): failed to get link speed/duplex [ 265.920332][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3204'. [ 265.950678][T12899] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.043994][T12909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3204'. [ 266.156136][T12909] macsec1: entered promiscuous mode [ 266.189291][T12909] bond3: entered promiscuous mode [ 266.203290][T12909] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 266.219495][T12915] netlink: 'syz.7.3200': attribute type 16 has an invalid length. [ 266.234915][ T1579] bond2: (slave bridge1): failed to get link speed/duplex [ 266.372785][T12915] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.380373][T12915] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.693171][T12915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.717082][T12915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.821036][ T28] audit: type=1400 audit(1776488729.428:1949): avc: denied { write } for pid=12931 comm="syz.1.3209" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 266.929935][ T3375] syz1: Port: 1 Link DOWN [ 266.935593][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3207'. [ 266.944981][T12934] lo: Caught tx_queue_len zero misconfig [ 266.968085][ T1579] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.995624][T12928] xfrm1: entered promiscuous mode [ 267.002633][T12928] xfrm1: entered allmulticast mode [ 267.008049][ T1579] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.016577][T12928] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3207'. [ 267.031427][ T1579] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.044435][ T1579] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.126183][T12941] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3212'. [ 267.242778][T12951] selinux_netlink_send: 69 callbacks suppressed [ 267.242804][T12951] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12951 comm=syz.7.3212 [ 267.533826][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3217'. [ 267.598942][T12956] 8021q: adding VLAN 0 to HW filter on device bond4 [ 267.665212][T12956] macvlan2: entered promiscuous mode [ 267.695048][T12966] netlink: 'syz.1.3221': attribute type 1 has an invalid length. [ 267.713064][T12956] macvlan2: entered allmulticast mode [ 267.725682][T12956] bond4: (slave macvlan2): Opening slave failed [ 267.764715][T12966] bond5: entered promiscuous mode [ 267.781270][T12966] 8021q: adding VLAN 0 to HW filter on device bond5 [ 267.811388][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3221'. [ 267.832038][T12964] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3220'. [ 267.895904][T12966] bond5: (slave veth11): making interface the new active one [ 267.910783][T12966] veth11: entered promiscuous mode [ 267.917965][T12966] bond5: (slave veth11): Enslaving as an active interface with an up link [ 268.142007][T12985] netlink: 'syz.5.3227': attribute type 4 has an invalid length. [ 268.153357][T12985] netlink: 'syz.5.3227': attribute type 4 has an invalid length. [ 268.206712][T12988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3228'. [ 268.749668][ T28] audit: type=1400 audit(1776488731.358:1950): avc: denied { getopt } for pid=13000 comm="syz.3.3232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 269.361954][T13009] nft_compat: unsupported protocol 0 [ 269.430033][ T28] audit: type=1400 audit(1776488732.038:1951): avc: denied { create } for pid=13008 comm="syz.7.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 269.483142][ T28] audit: type=1400 audit(1776488732.048:1952): avc: denied { bind } for pid=13008 comm="syz.7.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 269.508185][T13009] loop7: detected capacity change from 0 to 512 [ 269.580375][T13009] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 269.600441][T13009] EXT4-fs (loop7): orphan cleanup on readonly fs [ 269.659576][T13009] Quota error (device loop7): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 269.698167][T13018] tipc: Failed to remove unknown binding: 66,0,0/0:4138455982/4138455984 [ 269.730291][T13018] tipc: Failed to remove unknown binding: 66,0,0/0:4138455982/4138455983 [ 269.740722][T13009] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 269.773309][T13018] tipc: Failed to remove unknown binding: 66,0,0/0:4138455982/4138455984 [ 269.789702][T13018] tipc: Failed to remove unknown binding: 66,0,0/0:4138455982/4138455983 [ 269.791702][T13009] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 269.840558][T13009] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.3234: bg 0: block 15: invalid block bitmap [ 269.876611][T13009] loop7: lost filesystem error report for type 5 error -117 [ 269.879621][T13009] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 269.887471][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 269.887491][ C1] EXT4-fs (loop7): initial error at time 1776488732: ext4_validate_block_bitmap:432 [ 269.887531][ C1] EXT4-fs (loop7): last error at time 1776488732: ext4_validate_block_bitmap:432 [ 269.927879][T13016] loop1: detected capacity change from 0 to 512 [ 269.937049][T13009] loop7: lost filesystem error report for type 5 error -117 [ 269.939436][T13009] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #16: comm syz.7.3234: data will be lost [ 269.962314][T13009] EXT4-fs (loop7): 1 truncate cleaned up [ 269.981292][T13009] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 270.034448][T13016] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 270.056648][ T9797] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.083914][T13026] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3241'. [ 270.086371][T13016] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 270.106277][T13016] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.3237: Corrupt directory, running e2fsck is recommended [ 270.221361][ T28] audit: type=1400 audit(1776488732.828:1953): avc: denied { bind } for pid=13029 comm="syz.6.3242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 270.507715][ T28] audit: type=1400 audit(1776488733.118:1954): avc: denied { connect } for pid=13036 comm="syz.7.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 270.590054][T13016] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 270.599523][T13016] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.3237: corrupted in-inode xattr: invalid ea_ino [ 270.613393][T13016] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 270.614294][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 270.630104][ C1] EXT4-fs (loop1): initial error at time 1776488733: ext4_iget_extra_inode:5128: inode 15 [ 270.640595][ C1] EXT4-fs (loop1): last error at time 1776488733: ext4_iget_extra_inode:5128: inode 15 [ 270.651526][T13016] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.3237: couldn't read orphan inode 15 (err -117) [ 270.664028][T13016] loop1: lost filesystem error report for type 5 error -117 [ 270.667226][T13016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.689593][T13016] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #2: comm syz.1.3237: corrupted xattr block 255: invalid header [ 270.704766][T13016] SELinux: (dev loop1, type ext4) getxattr errno 117 [ 270.750842][T13016] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.914451][ T28] audit: type=1326 audit(1776488733.518:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.5.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84ec36c819 code=0x7fc00000 [ 270.960899][ T28] audit: type=1326 audit(1776488733.518:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13046 comm="syz.5.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f84ec36c819 code=0x7fc00000 [ 271.268003][T13016] loop1: detected capacity change from 0 to 512 [ 271.419514][ T28] audit: type=1400 audit(1776488734.028:1957): avc: denied { create } for pid=13051 comm="syz.7.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 271.494059][ T28] audit: type=1400 audit(1776488734.088:1958): avc: denied { setopt } for pid=13051 comm="syz.7.3249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 271.548580][T13016] ------------[ cut here ]------------ [ 271.556517][T13016] EA inode 11 i_nlink=2 [ 271.557180][T13016] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.1.3237/13016 [ 271.575306][T13016] Modules linked in: [ 271.582229][T13016] CPU: 0 UID: 0 PID: 13016 Comm: syz.1.3237 Tainted: G W syzkaller #0 PREEMPT(full) [ 271.595550][T13016] Tainted: [W]=WARN [ 271.599998][T13016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 271.612971][T13016] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 271.620670][T13016] Code: b4 ab 98 ff 4c 8d 2d 3d e3 5c 05 49 8d 7e 40 e8 e4 69 b6 ff 49 8b 6e 40 4c 89 e7 e8 18 65 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 6f 2d dd 03 66 66 66 66 66 66 2e [ 271.643627][T13016] RSP: 0018:ffffc900014a7778 EFLAGS: 00010246 [ 271.651968][T13016] RAX: ffff88811e6fbdf8 RBX: ffff8881007609b8 RCX: ffffffff81c099d8 [ 271.661700][T13016] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d7d00 [ 271.672370][T13016] RBP: 000000000000000b R08: 000188810076096b R09: 0000000000000000 [ 271.682230][T13016] R10: ffffc900014a76a8 R11: 0001c900014a76a8 R12: ffff888100760968 [ 271.692259][T13016] R13: ffffffff871d7d00 R14: ffff888100760920 R15: 0000000000000001 [ 271.701958][T13016] FS: 00007fdc23e976c0(0000) GS:ffff8882ae8d2000(0000) knlGS:0000000000000000 [ 271.711413][T13016] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.719670][T13016] CR2: 0000200000045030 CR3: 00000001488ca000 CR4: 00000000003506f0 [ 271.730247][T13016] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 271.739747][T13016] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 271.749079][T13016] Call Trace: [ 271.753520][T13016] [ 271.757030][T13016] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 271.763589][T13016] ? errseq_check+0x2c/0x50 [ 271.768953][T13016] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 271.774947][T13016] ? ext4_truncate+0x89f/0xa10 [ 271.782108][T13016] ext4_evict_inode+0xb16/0xe30 [ 271.789618][T13016] ? __pfx_ext4_evict_inode+0x10/0x10 [ 271.800009][T13016] evict+0x2af/0x510 [ 271.805260][T13016] ? iput+0x1b1/0x580 [ 271.812523][T13016] iput+0x41a/0x580 [ 271.817830][T13016] ext4_process_orphan+0x1a9/0x1c0 [ 271.826609][T13016] ext4_orphan_cleanup+0x69c/0x9f0 [ 271.833500][T13016] ext4_fill_super+0x3408/0x37c0 [ 271.839929][T13016] ? set_blocksize+0x14c/0x270 [ 271.846840][T13016] ? setup_bdev_super+0x30e/0x370 [ 271.853787][T13016] ? __pfx_ext4_fill_super+0x10/0x10 [ 271.859738][T13016] get_tree_bdev_flags+0x291/0x300 [ 271.867933][T13016] ? __pfx_ext4_fill_super+0x10/0x10 [ 271.874710][T13016] get_tree_bdev+0x1f/0x30 [ 271.879859][T13016] ext4_get_tree+0x1c/0x30 [ 271.884909][T13016] vfs_get_tree+0x57/0x1d0 [ 271.890440][T13016] do_new_mount+0x288/0x8d0 [ 271.895930][T13016] path_mount+0x4d0/0xbc0 [ 271.902448][T13016] __se_sys_mount+0x28c/0x2e0 [ 271.907850][T13016] ? __se_sys_mkdirat+0xa2/0xf0 [ 271.913290][T13016] ? kmem_cache_free+0xca/0x380 [ 271.919927][T13016] __x64_sys_mount+0x67/0x80 [ 271.926980][T13016] x64_sys_call+0x2d61/0x3020 [ 271.932368][T13016] do_syscall_64+0x12c/0x3b0 [ 271.937796][T13016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.945530][T13016] RIP: 0033:0x7fdc2543da8a [ 271.950699][T13016] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.972918][T13016] RSP: 002b:00007fdc23e96e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 271.987227][T13016] RAX: ffffffffffffffda RBX: 00007fdc23e96ee0 RCX: 00007fdc2543da8a [ 271.996058][T13016] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007fdc23e96ea0 [ 272.006260][T13016] RBP: 00002000000009c0 R08: 00007fdc23e96ee0 R09: 0000000000800718 [ 272.015239][T13016] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 272.023920][T13016] R13: 00007fdc23e96ea0 R14: 000000000000048d R15: 0000200000000200 [ 272.035660][T13016] [ 272.039918][T13016] ---[ end trace 0000000000000000 ]--- [ 272.075641][T13016] EXT4-fs (loop1): 1 orphan inode deleted [ 272.092835][T13016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.161833][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.179120][T13060] netlink: 'syz.6.3252': attribute type 16 has an invalid length. [ 272.523442][T13077] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3261'. [ 272.647667][T13083] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13083 comm=syz.7.3261 [ 272.868924][T13091] netlink: 'syz.3.3264': attribute type 1 has an invalid length. [ 273.157886][T13091] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.168319][T13094] bond5: entered allmulticast mode [ 273.204649][T13096] bond5: (slave ip6gretap1): making interface the new active one [ 273.237787][T13096] ip6gretap1: entered allmulticast mode [ 273.250227][T13096] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 273.368642][T13110] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3270'. [ 273.415810][T13110] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13110 comm=syz.3.3270 [ 273.585864][T13119] siw: device registration error -23 [ 274.055609][T13149] nft_compat: unsupported protocol 0 [ 274.479599][T13158] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3289'. [ 274.502364][T13158] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13158 comm=syz.5.3289 [ 274.652292][T13166] netlink: 'syz.6.3292': attribute type 21 has an invalid length. [ 274.716402][T13174] netlink: 'syz.6.3296': attribute type 4 has an invalid length. [ 274.813237][T13182] ªªªªªª: renamed from vlan0 (while UP) [ 275.289578][T13193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3304'. [ 275.360173][T13195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13195 comm=syz.3.3304 [ 275.956948][T13202] netlink: 'syz.3.3306': attribute type 13 has an invalid length. [ 275.977648][T13202] netlink: 'syz.3.3306': attribute type 17 has an invalid length. [ 276.623583][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 276.623601][ T28] audit: type=1400 audit(1776488739.228:1963): avc: denied { create } for pid=13212 comm="syz.5.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 276.684238][ T28] audit: type=1400 audit(1776488739.268:1964): avc: denied { setopt } for pid=13212 comm="syz.5.3311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 277.340584][T13201] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.465290][T13202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 277.596442][T13230] loop3: detected capacity change from 0 to 164 [ 277.645503][ T28] audit: type=1400 audit(1776488740.258:1965): avc: denied { mount } for pid=13229 comm="syz.3.3318" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 277.898604][ T28] audit: type=1400 audit(1776488740.508:1966): avc: denied { unmount } for pid=9451 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 278.011009][ T28] audit: type=1400 audit(1776488740.618:1967): avc: denied { create } for pid=13237 comm="syz.3.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 278.076236][ T28] audit: type=1400 audit(1776488740.638:1968): avc: denied { listen } for pid=13237 comm="syz.3.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 278.122617][ T28] audit: type=1400 audit(1776488740.648:1969): avc: denied { accept } for pid=13237 comm="syz.3.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 278.650855][T13258] nft_compat: unsupported protocol 0 [ 278.677433][T13262] netlink: 'syz.5.3340': attribute type 4 has an invalid length. [ 278.709736][T13262] netlink: 'syz.5.3340': attribute type 4 has an invalid length. [ 278.929727][T13274] netlink: 'syz.1.3335': attribute type 16 has an invalid length. [ 279.037245][T13281] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3338'. [ 279.064838][ T3375] lo speed is unknown, defaulting to 1000 [ 279.075601][ T3375] lyz2: Port: 1 Link DOWN [ 279.083029][ T3375] lo speed is unknown, defaulting to 1000 [ 279.145106][T13287] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3339'. [ 279.292548][T13287] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.320185][T13298] xt_TCPMSS: Only works on TCP SYN packets [ 279.591611][T13301] loop7: detected capacity change from 0 to 512 [ 279.638385][T13301] EXT4-fs: Ignoring removed nobh option [ 279.713288][T13301] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 not in group (block 3)! [ 279.786718][T13301] EXT4-fs (loop7): group descriptors corrupted! [ 280.385127][ T28] audit: type=1400 audit(1776488742.988:1970): avc: denied { relabelfrom } for pid=13310 comm="syz.1.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 280.435337][ T28] audit: type=1400 audit(1776488742.988:1971): avc: denied { relabelto } for pid=13310 comm="syz.1.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 280.475966][ T28] audit: type=1400 audit(1776488743.018:1972): avc: denied { name_bind 0x1000000 } for pid=13315 comm="syz.3.3350" path="socket:[37617]" dev="sockfs" ino=37617 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 280.891903][T13342] netlink: 200 bytes leftover after parsing attributes in process `syz.5.3360'. [ 281.286916][T13353] netlink: 'syz.3.3364': attribute type 16 has an invalid length. [ 282.143218][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 282.143235][ T28] audit: type=1400 audit(1776488744.748:1978): avc: denied { watch_reads } for pid=13364 comm="syz.7.3369" path="/247" dev="tmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 282.289815][T13353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.320544][T13353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.396569][ T5212] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.426989][ T5212] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.453382][ T5212] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.478138][ T5212] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.620250][T13375] xt_hashlimit: size too large, truncated to 1048576 [ 282.681562][T13376] loop3: detected capacity change from 0 to 512 [ 282.780507][T13376] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3373: invalid indirect mapped block 256 (level 2) [ 282.914957][T13376] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 282.915196][T13376] EXT4-fs (loop3): Remounting filesystem read-only [ 282.924395][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 282.924436][ C1] EXT4-fs (loop3): initial error at time 1776488745: ext4_free_branches:1023: inode 11 [ 282.924495][ C1] EXT4-fs (loop3): last error at time 1776488745: ext4_free_branches:1023: inode 11 [ 283.009314][T13376] EXT4-fs (loop3): 2 truncates cleaned up [ 283.056278][T13376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.084217][ T28] audit: type=1400 audit(1776488745.688:1979): avc: denied { read write } for pid=13374 comm="syz.3.3373" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 283.167003][ T28] audit: type=1400 audit(1776488745.688:1980): avc: denied { open } for pid=13374 comm="syz.3.3373" path="/292/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 283.244089][ T28] audit: type=1400 audit(1776488745.848:1981): avc: denied { name_bind } for pid=13382 comm="syz.1.3374" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 283.521261][ T9451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.336472][T13432] syzkaller0: entered promiscuous mode [ 284.348831][T13432] syzkaller0: entered allmulticast mode [ 284.440537][T13439] lo speed is unknown, defaulting to 1000 [ 284.590380][ T28] audit: type=1400 audit(1776488747.198:1982): avc: denied { execute } for pid=13448 comm="syz.7.3396" path="/memory.swap.current" dev="ramfs" ino=37769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 284.741884][ T28] audit: type=1400 audit(1776488747.348:1983): avc: denied { ioctl } for pid=13457 comm="syz.1.3399" path="socket:[37796]" dev="sockfs" ino=37796 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 284.770797][T13460] loop7: detected capacity change from 0 to 128 [ 284.786755][T13460] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 284.819818][ T28] audit: type=1400 audit(1776488747.428:1984): avc: denied { read } for pid=13459 comm="syz.7.3400" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 284.949256][T13466] tipc: Failed to remove unknown binding: 66,0,0/0:2637263195/2637263197 [ 284.972958][T13466] tipc: Failed to remove unknown binding: 66,0,0/0:2637263195/2637263196 [ 284.989645][T13466] tipc: Failed to remove unknown binding: 66,0,0/0:2637263195/2637263197 [ 285.001809][T13466] tipc: Failed to remove unknown binding: 66,0,0/0:2637263195/2637263196 [ 285.639255][T13487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3420'. [ 285.728130][T13487] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13487 comm=syz.5.3420 [ 285.917895][T13497] loop7: detected capacity change from 0 to 512 [ 285.935362][T13497] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 285.965689][T13497] EXT4-fs (loop7): 1 truncate cleaned up [ 285.977516][T13497] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.029441][ T28] audit: type=1400 audit(1776488748.638:1985): avc: denied { ioctl } for pid=13496 comm="syz.7.3413" path="/261/file1/file1" dev="loop7" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 286.070338][ T9797] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.186229][T13502] lo speed is unknown, defaulting to 1000 [ 286.319677][T13504] lo speed is unknown, defaulting to 1000 [ 286.501104][T13471] ================================================================== [ 286.509248][T13471] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 286.516216][T13471] [ 286.518562][T13471] read-write to 0xffff8881297507e4 of 4 bytes by task 13464 on cpu 0: [ 286.526746][T13471] fifo_open+0x86/0x5d0 [ 286.530937][T13471] do_dentry_open+0x4be/0xa90 [ 286.535677][T13471] vfs_open+0x37/0x1e0 [ 286.539774][T13471] path_openat+0x1b70/0x2050 [ 286.544414][T13471] do_file_open_root+0x233/0x430 [ 286.549397][T13471] file_open_root+0xfd/0x130 [ 286.554056][T13471] do_handle_open+0x6b6/0x790 [ 286.558783][T13471] __x64_sys_open_by_handle_at+0x44/0x50 [ 286.564454][T13471] x64_sys_call+0x153d/0x3020 [ 286.569182][T13471] do_syscall_64+0x12c/0x3b0 [ 286.573850][T13471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.579771][T13471] [ 286.582110][T13471] read to 0xffff8881297507e4 of 4 bytes by task 13471 on cpu 1: [ 286.589765][T13471] wait_for_partner+0xd5/0x1e0 [ 286.594570][T13471] fifo_open+0x462/0x5d0 [ 286.598853][T13471] do_dentry_open+0x4be/0xa90 [ 286.604003][T13471] vfs_open+0x37/0x1e0 [ 286.608114][T13471] path_openat+0x1b70/0x2050 [ 286.612748][T13471] do_file_open+0x16c/0x290 [ 286.617309][T13471] do_sys_openat2+0x94/0x130 [ 286.621943][T13471] __x64_sys_openat+0xf2/0x120 [ 286.626764][T13471] x64_sys_call+0x1e39/0x3020 [ 286.631498][T13471] do_syscall_64+0x12c/0x3b0 [ 286.636154][T13471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.642103][T13471] [ 286.644451][T13471] value changed: 0x00000001 -> 0x00000002 [ 286.650187][T13471] [ 286.652534][T13471] Reported by Kernel Concurrency Sanitizer on: [ 286.658715][T13471] CPU: 1 UID: 0 PID: 13471 Comm: syz.1.3402 Tainted: G W syzkaller #0 PREEMPT(full) [ 286.669689][T13471] Tainted: [W]=WARN [ 286.673513][T13471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 286.683593][T13471] ==================================================================