last executing test programs: 6m47.551605185s ago: executing program 3 (id=375): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$inet6(0xa, 0x3, 0x7) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56741, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000680)="05031400d3fc140000004788031c", 0xe, 0x20040010, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @remote}, 0x14) 6m46.44288426s ago: executing program 3 (id=384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x50, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x50}}, 0x20040010) 6m46.318747196s ago: executing program 3 (id=385): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x10000, &(0x7f0000000000)={[{@nolazytime}]}, 0x1, 0x84d, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) 6m45.798794071s ago: executing program 3 (id=392): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0), 0x5, 0x557, &(0x7f0000000fc0)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m45.701462737s ago: executing program 3 (id=393): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x6) socket$netlink(0x10, 0x3, 0xb) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) memfd_create(0x0, 0x0) pipe2(&(0x7f0000000040), 0x80000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 6m45.437887069s ago: executing program 3 (id=394): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@getstats={0x1c, 0x5e, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x404c004) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000200)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[], 0x2, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 6m45.298837796s ago: executing program 32 (id=394): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@getstats={0x1c, 0x5e, 0x100, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x404c004) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000200)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[], 0x2, 0x242, &(0x7f0000000300)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) 4m3.240456079s ago: executing program 0 (id=2121): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f00000001c0)=ANY=[], 0x1, 0x296, &(0x7f0000000740)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 4m3.038740139s ago: executing program 0 (id=2123): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r1, &(0x7f00000008c0)="bae2bf808214ff98d8d00b4e4aa5b63a86342a471feaedd023fe0d23081a02d33e4a469ab9d700b98dbc637a1ab17ee404dfa6c5d5a144ee59221d4b94680ba508343a208a525cff39a2733191ec729e1ed6ee89970d901cdde9274de2a14d16d4b60efff4a823051100a4766a36baa70307cd088fcc9e7146a60c52282f525d113a20c411358bfa0b288791cc9dba6ba75a160cb7beda4a2a7f1a2fa5c565ff344c6b7550c85aeec24195055e0cb2b5ed37875be4e627ef1027ef44c76edb024b67d2dd316c9025880d70300e9ac5abae459e1de4d6868facadaf5c07042ba04768b47d542ef67510bc6a31e1c671cd366d1060843996078b8bceab4299a1fd7ff0318b010dfc8a95b9163505bdde7f92bccfb94a227d620c7fbf355564d75dadaeb40bfa148575d175ba6b276dd1f08de275305c679ed2ca319a0d0ea310eee868429deb863319197812d62a2961765536e8b81edabf419b3ee6c60e17b9c61353366cb3e11572e94b996053feb7854704a86cd638976f8373557ca455e43463252bff8f4835f05ac57cc3e29031d648a942c4f83823378367ff5ff6157e59ccb6b7236eeca6a5f962d3f79b677fa1d2b8baa374f5aab9ecabd7f024941d73db13ba01090a7544d51c2e1ffc35d383b355c359568623715caadca70f1125419af0a5ec9832a5885c29ac40b3fe2f9f173934bb57eef3c9ab71d1b747554fb403d22cd39f98d2ac6df121c75ea827d1790db6fc7c21f601f75bc9b7d5facd83cf77e4b666e3257fb81ac213d2afccd3cc5e2bab7db075d051cd5c9f860f421e672e6d3c2ffce5f51b45e24a1dcf27de17e47ad0d34fa1ead3fc3892593f29f94f26413603c490f9c7d0682de6f9048ae911615975cee4e8b1349133192bfe71130368238688b67b74631a1a524699d28d86427694f753daf88e009c4d34ed310fea1c7356e5abc256595589f704a69b36b6dd05060f3abd79af70d2eb438b85b3d35d300eabaf51bdf479e07ff1338eba821f0c2a395cd355103df33032c1cd8edcdc5425f4418f18b7c1e85fceeb6f41fbaed2573052cf087659520618fe64ec82ae8484b2ddb50a41762fc3f90b3ceb8b2d10bac688e2d35d35e93639ab72384bebe7690c467f0f678bd75c9aa67bc96d94c98ced73d22c6776c918fe50143b80dc80d97326858cbbff3d66f7dc788b788ef275c5037081e9f025e3becca7cf496f7cddd0da37a4ea323d5037bfbcb61edf8b5980269c788605be92bd56b2399e1d5c6dfb43b65d6c9fb9a1ea1c8c548833c48a255b81ac0f7029be6234823bcf232efdc8116d530b652bc6aeab4367f7a33b4d152646003c2064a0b1cabaef6c2391e71c822409130fc4d0a3c9d2895b3f3468a51b33c512711e36632597b3e582af545f29b698d2d41f8362080977d0a0d48d492cc4f61816b7fedd27b826f81e1cbffed54c31dc6ef4b986bad01da626237a2e6bca61e2329bc4e06de64fa68d371a2f0b5dfe017d321e09bd5fc8fba5416e8d7ea329ec0f9be877dc406b6f592dfb3176cffcd9a82ac7479e674d6f3c346fcd3cd2f65e724693b5ace04bb74c2e8a47717162a3b14fcd0b9045b48545ec9dd4d2d1926da207371dbb8e339bd5456f7e00dfb73a9ad86e5e902311644a9a0ce2cb9483b90c25c8e30984bac1c462c06f1b76c68f5a8ef8e6414c67b6a0f77e9eb2e56a8b9ebe6af0a8fa69a92ea6ffde0eee16696a065da53bb4cb51c5985fcb0434589b4628efcf14ddd5f17ec6bd1f219096e02dc364d036b21df65c16a7a83a2145996f2154719317f49444f6ba380b821e4ca10ebba5795d6f04fe252cfabc4ffba1ae5938450b6da37ad734cf298029bfdac3b28cf86f27696fb2b7707702606e3bf5ae65e0d74b3ba450cb36af1c975aead56e69d4e61d3b1941b15d4e017f46552caf43c5ac8beafcf4c0e64c8247136d8e36409ef2986b79c806f4122a44cf988ce789797ec8919f6daff8e353e2391e45f4a2dd9984fbc8646132e2502d462d04b2d7be73cca3ede4240e3368585083f7721da55c95fc49b43a28c3e09c5fb7b43e4dc48d1095d7327ec859d657cf9cc8eef62aac5f1948358727267b87741c27fcc4b3577552e8ad3393a28261a1f754e8130c5b696509b608eb18a0cea00709ec2698527182412559deb8158e2caac436d000b4fb0f98cf920be07f0cbf3eb042bf865f68ca9295e541ae1ec6620b657ffd021794c9e2af3fdaeb5d453c30f8f915b28f230deb1f0717992d9b33425b79106de94e1cdb79dd14627413af70a2d34c908d0c165a3601b0339a335bb44ae635fe96c932111f6eef5216e32a46085216ad85423ef9b0e335ff7028464ccaaaf146d846c436e1db3c77877dce48b92d6b7e1d04f455f66093a9b24c07ef58cbfa7626c03cdf2153f14b055eb6c3c98a28ca85a74c48773f829a35433f11078249dd0a4295dbc3cf539a2b68c472a3000bb1b8e0faee8ea405270532c20ef4955b54d768d99d83ba165f37061bad1d1dcb1d90162b2a6c7678068e665dfa9501d367e4ba272238a3f8919d7f19cb692f2679fb1ea43d3fcf7119ce967529450de7fb3a2bb9902bf5b146e37661a934554f12dfec8647a96c5efc7bf3256af35cc94b64ad1a6902c6b052bb7334a364b0eaa485dee260d1331620e59260517f5d79c5eefc11148062fc6d8296d40a0e832b406c39440945ef986f7bd5beeef8954a86d4efb2f0b1215a3860df643bfa2f8bc99113ea1401188b580ee168a3b62201529b581e360754ae9528f9a2339e9b91a60111bd31a0079f739219cc44f909291b62f120154f6b52acde04dbccf990fcc7a69ce2038abcb3a67c6486096646dda436b4a95e50c18756554c60c6c1cc54ce217b56bdc191ed7eb7878913203bc227b28d5fdf65953a59a2ee1e1238e2c661777a9159a101fccee86d1ce2b95f5ad3d91466d9c466f5eca143b29c2609c13f708d1467c3be9834a7846eb6914861aa7b44f63c509484ffca1cfb2e561af51cbde7ee3fc2e07fc5e0e81df9d935b09f9f9476b1f3dd14952ca4d110933ee4d92eb98ea6fac1111a33e4a23a8a0c8542d5351cf34820daf5b4b805b7e70e47daa9e2dad1f8c8bb88d49322c0b40b9d7517aeee63f2167aff6cbd520a7703b38f5fb1b35437b78749c884aeec19d39a27703422dca08f5ab657bd5fd49710b7ae5da0ebd1f8846bc2d52550a576ebd6d40e6ad3c4dfc6333a244aac3f37d2c4fba92a0a9fbee36a3aa25c3bb992bb427a8f5e5b7711b2dcf2dd6e4b539d480547cffed5d71ee72f6f9de2ff259582bfd1a30d555529f49b2736addfbfe2c41112b4d303f47eca8efa1f6352a732825e98a8492a9822d91ecf3ac3328cd35c65f2c0a66f63b3c99a1366281790302a81dad6e40927e2ba721d45f9b3872900afabbd43d2b58164f7e32ca1ce161e7b3a1e05e749b99bac07f491958dd690d91e642f5c7dc560a71c56e9da22f914b15aac87c34bdc97a81a76fc083786709faf2253f90ec09708376092cc0fd168f1c8a28b70c633b7332409e09c8ebc6f44140661b43d68cb38fed68b16ab576ae2968c9d0f919cf353bdcba23a604bd501b467e8f87fd4dc6a1f411c8cee636239246054c86011f36d789233458fda552462448b4c8ffb7fb1266f0ba9b2445dc6646739f014244370940d7478aef9b59149666d8611df11dd9a188bbdb74605bf6948c75d3254b50520e4478029137386507f14fe07eb290f58d657c3d652c79684177f2086d4f8ee233d01843b5072f68bf954683daa28df895a8a61dc6ce683d388c0231d971c76509826de3df51fdfbbaaab194f0d7833e0af79004c1e1ef1849aa92598cd59e4a6e772e408791409ce179376020ebd176eeb5f1a0210bc203e4eb7caab029dab9e630463dda20f4ccaf65b1a16c1f5c84e58ee82d718c8f486ea3b7da88689a52eb38e91cd9366b1bc406e78e18964aedc915fc4fa15567276cb15d75c71eb566a8bff6e96666616c88312071c98c97ab74116e131a8aeef4bd278ae292f8bd9677e2c6b7d4a541475c20824c10da9ae336a32c51e25e58c6658d0404af0a64518bf6338fdee18cabb1373d1fdf1381f40c3408239bccfb601dfde6f76199e06023544a216749bcdde531655f7a4bc275ec02001aad0d232c82f07a9bd679ec406bf076a21be31f896885cc3189b61ab7170fb798670777e7863f4d6b171e697031b73ab8c207b83e4454018894c97f4f80c0f8a7538a395e3a5fb9d9de5c82f34b4f412a12c106bcbfb9289802c66948eca04d37afb1e496bcfdea5d4b26dfcbde0ee7c5967f20a5ab546b843082ea5fc188db08be145c05d4303b95478317e25d89a974b6bb40695cac52497f37a22b7fc580e3fff572fb953f3d83ad4ccee8497dda59ea1ecc2f5ad86b516f46889aff394d8c3e82ceaa013d299c0b461677ad5a49311f32799f44e504f15265ac587344b519c60273c2a0fdbd4e3f15fb0b27308cf5d8ee031fa8d2c6d6af5cac4760edef7e7733bff3417432a7a3a145035d238cffb60621c9836b51889cf4439dc927dbeb0277e9b", 0xcac) 4m2.829261939s ago: executing program 0 (id=2124): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) 4m2.618681339s ago: executing program 0 (id=2126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0xcb, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000000c0)={{0x1, 0x2, 0x4, 0x3, 0x8000}, 0x1ff, 0x10, 'id0\x00', 'timer1\x00', 0x0, 0x1, 0x5, 0x8000, 0x4}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x29, 0x0, @private}}}}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x4001, 0x3, 0x298, 0x250, 0x700001b, 0x148, 0x0, 0x148, 0x350, 0x206, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'macvlan1\x00', {0xff}, {}, 0xff84}, 0x1ea, 0x98, 0x100, 0x0, {0x390, 0x8f00}, [@common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0\x00', {0xff}, 'vxcan1\x00', {0xff}, 0x9}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x6e20, @broadcast}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r5, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000400)={r6, 0x58, &(0x7f00000000c0)}, 0x10) 4m1.658831267s ago: executing program 0 (id=2127): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f0000000480)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x4, 0x0, 0xf4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, @perf_config_ext={0x80, 0x4}, 0x0, 0x3, 0xffdffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffef3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xe4, 0x0, 0x0, 0x41000, 0x18}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f3, &(0x7f0000000080)) 4m0.837969317s ago: executing program 0 (id=2134): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4m0.571159611s ago: executing program 33 (id=2134): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3m51.398008644s ago: executing program 5 (id=2216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r5, 0xc}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 3m50.842383761s ago: executing program 5 (id=2218): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) capset(0x0, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="43447a7c52bdddda071049c7fb167492a56b07ab991472a43c8c2e0f19c0325da7c945509bf4a7feee89cc014794f84170ba4d9b4406a42f9a2e2206c8", 0x3d}], 0x1) 3m50.782837984s ago: executing program 5 (id=2219): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x1) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) openat(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) setregid(0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) 3m49.937767755s ago: executing program 5 (id=2233): mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000140)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 3m49.423516951s ago: executing program 5 (id=2234): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noquota}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file2\x00', 0x100, 0xfffbfffe) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x2) 3m49.24280491s ago: executing program 5 (id=2235): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r3, &(0x7f00000008c0)="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", 0xcac) 3m49.24252396s ago: executing program 34 (id=2235): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r3, &(0x7f00000008c0)="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", 0xcac) 6.754031506s ago: executing program 1 (id=4265): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 5.890586249s ago: executing program 7 (id=4268): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x1) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x15) syz_io_uring_setup(0x2532, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0x20e}, &(0x7f0000000080), 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x1, 0x123840) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5.890244519s ago: executing program 1 (id=4269): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x64, 0x10, 0x403, 0x2, 0xfffffffd, {0x0, 0x0, 0x4, 0x0, 0x4300}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xd}, @IFLA_BR_MCAST_HASH_MAX={0x8, 0x1b, 0xfffffffb}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) 5.85857825s ago: executing program 1 (id=4270): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@deltaction={0x84, 0x31, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r3 = socket(0x400000000010, 0x3, 0x0) setuid(0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) 5.355175325s ago: executing program 6 (id=4275): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, 0x0, 0x0) 4.349147855s ago: executing program 6 (id=4276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x68, 0x2, [@TCA_MATCHALL_ACT={0x64, 0x2, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x4, 0x3ff, 0x10001}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x7ee}]}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x9c}}, 0x800) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 3.601448772s ago: executing program 1 (id=4279): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1a}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3.599864132s ago: executing program 7 (id=4280): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, r3, 0x20, 0x0, @val=@tracing={0xffffffffffffffff, 0x5}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000680)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) 3.548037695s ago: executing program 7 (id=4281): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r2, 0xc, 0x0, @val=@iter={0x0}}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r7 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x8) r9 = openat$cgroup(r8, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) sendto$packet(r5, &(0x7f00000001c0)="100314000500020002004788aa96a13bb100001100007fca1a00ddb7e3ac11ac2c3465e98e73cd02a680e61b484c", 0x2e, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/disk', 0x200800, 0x0) fcntl$getflags(r11, 0x1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8008080}, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) 3.538280715s ago: executing program 6 (id=4282): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x62000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) 3.499297007s ago: executing program 1 (id=4283): socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) io_setup(0x9, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000840)='./bus\x00', 0x11, &(0x7f0000000100)={[{@usrjquota_path={'usrjquota', 0x3d, './file0'}}, {@nobh}]}, 0x1, 0x616, &(0x7f0000000b40)="$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") sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x5b, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000321000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f00004d3000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000100060000000000040005000000000010000700000000002000020000000000"], 0x24, 0x2) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)=""/2, 0x2) setsockopt$inet_msfilter(r0, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) 3.368721713s ago: executing program 7 (id=4285): open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/4111, 0x100f}], 0x1, 0x144, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1}, 0x0, &(0x7f0000000040)}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r3, 0x4, 0xfb, 0x53, 0x3, 0x58, @local, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xd01}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x10000, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="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", @ANYRES32=r9], 0x22c}}, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x8}, 0x1280, 0x0, 0x0, 0x1, 0x4, 0x0, 0x8, 0x0, 0x40000008, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x7, [@datasec={0x2, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x3}, {}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "84"}]}, {0x0, [0x0, 0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000040)=""/2, 0x53, 0x2, 0x1}, 0x28) r10 = socket(0xa, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}]}, &(0x7f0000000080)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2.976302323s ago: executing program 4 (id=4286): socket$nl_generic(0x10, 0x3, 0x10) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000001) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x40) fallocate(r0, 0x0, 0x8e14, 0x8ffff) copy_file_range(r0, 0x0, r0, 0x0, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x4, 0x1, 0x69b, 0x1fb, 0xffffffff, 0xfffffff7}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x5, 0x8}}]}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x0) 2.904334576s ago: executing program 4 (id=4287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sched_rr_get_interval(r0, &(0x7f0000000280)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) socket(0x10, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x20, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}]}, 0x20}}, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, 0x0) 2.865527628s ago: executing program 7 (id=4288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, 0x0, 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 2.538467194s ago: executing program 2 (id=4289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, 0x0, 0x0) 2.264667898s ago: executing program 1 (id=4290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@deltaction={0x84, 0x31, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) r3 = socket(0x400000000010, 0x3, 0x0) setuid(0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000140)=@ethtool_cmd={0xb, 0x0, 0x8, 0x4, 0x5, 0xd, 0x6, 0x7, 0x3, 0x50, 0xf, 0xfffffff9, 0x222, 0x0, 0xa, 0xb701, [0xcf, 0x59c]}}) 1.554465283s ago: executing program 7 (id=4291): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x15) syz_io_uring_setup(0x2532, 0x0, &(0x7f0000000080), 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x1, 0x123840) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1.553889953s ago: executing program 2 (id=4292): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = fsmount(r2, 0x0, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r4, r3, 0x20, 0x0, @val=@tracing={0xffffffffffffffff, 0x5}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000680)={0x0, {{0xa, 0x0, 0x3, @mcast1={0xff, 0x7}, 0xfffffffe}}, {{0xa, 0x0, 0x2, @loopback}}}, 0x108) 1.472023207s ago: executing program 6 (id=4293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x2000c090) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4) 1.356395773s ago: executing program 2 (id=4294): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1a}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 568.549552ms ago: executing program 2 (id=4295): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000003800)='net/igmp6\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r0, &(0x7f0000002140)=""/17, 0x11, 0x0) 412.42334ms ago: executing program 2 (id=4296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x6c}}, 0x0) 411.55488ms ago: executing program 4 (id=4297): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x64, 0x10, 0x403, 0x2, 0xfffffffd, {0x0, 0x0, 0x4, 0x0, 0x4300}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}, @IFLA_BR_VLAN_STATS_ENABLED={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x101}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xd}, @IFLA_BR_MCAST_STATS_ENABLED={0x5}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000044}, 0x8044) 294.051985ms ago: executing program 2 (id=4298): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$inet(0x2, 0x3, 0x2) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 270.454067ms ago: executing program 4 (id=4299): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ppoll(&(0x7f00000000c0)=[{r0, 0x4}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 220.388159ms ago: executing program 6 (id=4300): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 205.22344ms ago: executing program 4 (id=4301): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xe147, 0x2, 0x20000000, 0x101, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x800) 100.031375ms ago: executing program 6 (id=4302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 0s ago: executing program 4 (id=4303): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x0, 0x0) unshare(0x62000000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x238, 0x11, 0x148, 0x238, 0x0, 0x2d8, 0x2a8, 0x2a8, 0x2d8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f0, 0x238, 0x0, {}, [@common=@inet=@socket2={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x3, 0x5, 0x8, 0x0, 0x20}, {0x5}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffffe}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'vlan0\x00', 'macvlan1\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) kernel console output (not intermixed with test programs): 66.262:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9880 comm="syz.2.2113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb6d3bc799 code=0x0 [ 225.825160][ T28] audit: type=1400 audit(1774027066.342:2916): avc: denied { associate } for pid=9880 comm="syz.2.2113" name="file1" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 225.853604][ T28] audit: type=1400 audit(1774027066.362:2917): avc: denied { listen } for pid=9888 comm="syz.4.2115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.875668][ T28] audit: type=1400 audit(1774027066.392:2918): avc: denied { create } for pid=9890 comm="syz.4.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 225.895511][ T28] audit: type=1400 audit(1774027066.392:2919): avc: denied { bind } for pid=9890 comm="syz.4.2116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 226.422996][ T9917] loop4: detected capacity change from 0 to 512 [ 226.599706][ T9917] EXT4-fs: test_dummy_encryption option not supported [ 226.676973][ T4458] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.961055][T10008] tipc: Started in network mode [ 227.988413][T10008] tipc: Node identity ac1414aa, cluster identity 4711 [ 228.009900][T10008] tipc: New replicast peer: 100.1.1.1 [ 228.036149][T10008] tipc: Enabled bearer , priority 10 [ 228.050858][ T28] audit: type=1400 audit(1774027068.562:2920): avc: denied { read } for pid=10015 comm="syz.4.2131" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 228.116731][ T28] audit: type=1400 audit(1774027068.562:2921): avc: denied { open } for pid=10015 comm="syz.4.2131" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 228.546390][T10022] 9pnet_virtio: no channels available for device ./bus [ 228.592944][ T28] audit: type=1400 audit(1774027069.062:2922): avc: denied { mounton } for pid=10009 comm="syz.5.2130" path="/316/bus" dev="tmpfs" ino=1644 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 229.624751][ T23] tipc: Node number set to 2886997162 [ 229.673129][T10054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.685541][T10054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.946174][T10044] chnl_net:caif_netlink_parms(): no params data found [ 229.986495][T10044] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.993934][T10044] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.001372][T10044] bridge_slave_0: entered allmulticast mode [ 230.007776][T10044] bridge_slave_0: entered promiscuous mode [ 230.014852][T10044] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.022096][T10044] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.029385][T10044] bridge_slave_1: entered allmulticast mode [ 230.036199][T10044] bridge_slave_1: entered promiscuous mode [ 230.145372][T10044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.168538][T10069] loop2: detected capacity change from 0 to 256 [ 230.176436][T10044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.219456][T10044] team0: Port device team_slave_0 added [ 230.226198][T10044] team0: Port device team_slave_1 added [ 230.246354][T10044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.259869][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.358879][T10044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.370322][T10044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.377461][T10044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.403619][T10044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.447124][T10044] hsr_slave_0: entered promiscuous mode [ 230.461912][T10044] hsr_slave_1: entered promiscuous mode [ 230.468135][T10044] debugfs: 'hsr0' already exists in 'hsr' [ 230.490197][T10044] Cannot create hsr debugfs directory [ 230.716459][T10044] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 230.743281][T10044] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 230.752785][T10044] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 230.762067][T10044] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 230.785952][T10044] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.793068][T10044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.800879][T10044] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.807962][T10044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.815696][T10094] 9pnet_virtio: no channels available for device ./bus [ 231.009402][T10044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.054881][T10044] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.337647][T10044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.677167][T10044] veth0_vlan: entered promiscuous mode [ 231.741798][T10044] veth1_vlan: entered promiscuous mode [ 231.811028][T10044] veth0_macvtap: entered promiscuous mode [ 231.841060][T10044] veth1_macvtap: entered promiscuous mode [ 231.941671][T10044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.951771][T10044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.089773][ T4541] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.115195][ T28] audit: type=1400 audit(1774027072.492:2923): avc: denied { mounton } for pid=10044 comm="syz-executor" path="/root/syzkaller.2eyxPU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=26885 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 232.195973][ T4541] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.290731][ T4541] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.424721][ T4541] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.476126][T10153] loop5: detected capacity change from 0 to 512 [ 233.634673][T10153] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 234.114016][T10153] EXT4-fs (loop5): orphan cleanup on readonly fs [ 234.148162][T10153] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.2160: Block bitmap for bg 0 marked uninitialized [ 234.161775][T10153] loop5: lost filesystem error report for type 5 error -117 [ 234.161940][T10153] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 234.177902][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 234.177924][ C0] EXT4-fs (loop5): initial error at time 1774027074: ext4_read_block_bitmap_nowait:517 [ 234.177941][ C0] EXT4-fs (loop5): last error at time 1774027074: ext4_read_block_bitmap_nowait:517 [ 234.203835][T10153] loop5: lost filesystem error report for type 5 error -117 [ 234.295360][T10153] EXT4-fs (loop5): 1 orphan inode deleted [ 234.320970][T10153] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 234.336929][T10153] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 234.369663][T10153] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 234.406023][ T4644] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.895361][ T28] audit: type=1400 audit(1774027075.412:2924): avc: denied { append } for pid=10178 comm="syz.4.2166" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 234.949060][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2164'. [ 235.235900][T10184] loop6: detected capacity change from 0 to 128 [ 235.554395][T10184] EXT4-fs: test_dummy_encryption option not supported [ 236.020684][T10186] tipc: Started in network mode [ 236.025614][T10186] tipc: Node identity ac14140f, cluster identity 4711 [ 236.032541][T10186] tipc: New replicast peer: 255.255.255.255 [ 236.038582][T10186] tipc: Enabled bearer , priority 10 [ 236.184378][T10194] loop6: detected capacity change from 0 to 512 [ 236.217504][T10194] EXT4-fs: Ignoring removed nobh option [ 236.226089][T10198] loop4: detected capacity change from 0 to 512 [ 236.238006][T10198] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 236.277499][T10194] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.298175][T10198] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #17: comm syz.4.2172: inode has both inline data and extents flags [ 236.320714][T10194] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.340699][T10198] loop4: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 236.340905][T10198] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2172: couldn't read orphan inode 17 (err -117) [ 236.361845][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 236.361875][ C0] EXT4-fs (loop4): initial error at time 1774027076: ext4_orphan_get:1391: inode 17 [ 236.361909][ C0] EXT4-fs (loop4): last error at time 1774027076: ext4_orphan_get:1391: inode 17 [ 236.390944][T10200] 9pnet_virtio: no channels available for device ./bus [ 236.400664][T10198] loop4: lost filesystem error report for type 5 error -117 [ 236.401201][T10198] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.452065][T10044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.463408][T10198] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2172: bg 0: block 65: padding at end of block bitmap is not set [ 236.470149][ T28] audit: type=1400 audit(1774027076.982:2925): avc: denied { remove_name } for pid=10197 comm="syz.4.2172" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.500732][ T28] audit: type=1400 audit(1774027076.982:2926): avc: denied { rmdir } for pid=10197 comm="syz.4.2172" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 236.513226][T10198] Quota error (device loop4): write_blk: dquota write failed [ 236.530692][T10198] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 236.541208][T10198] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.2172: Failed to acquire dquot type 0 [ 236.622169][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.933481][T10237] loop2: detected capacity change from 0 to 2048 [ 236.940057][T10239] loop6: detected capacity change from 0 to 128 [ 236.964536][T10237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.989220][ T4458] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.057869][T10250] loop6: detected capacity change from 0 to 512 [ 237.075368][T10250] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 237.150823][ T1033] tipc: Node number set to 2886997007 [ 237.155713][T10258] xt_hashlimit: size too large, truncated to 1048576 [ 237.305517][T10280] loop2: detected capacity change from 0 to 256 [ 237.315293][T10280] vfat: Bad value for 'dmask' [ 237.476297][T10293] loop6: detected capacity change from 0 to 256 [ 237.621070][ T28] audit: type=1400 audit(1774027078.112:2927): avc: denied { getopt } for pid=10281 comm="syz.1.2201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 237.673864][T10295] syzkaller0: entered promiscuous mode [ 237.698573][T10295] syzkaller0: entered allmulticast mode [ 237.812345][T10307] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2210'. [ 237.909306][T10293] FAT-fs (loop6): IO charset cp852 not found [ 237.945863][T10314] loop5: detected capacity change from 0 to 512 [ 238.001729][T10314] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.2213: couldn't read orphan inode 26 (err -116) [ 238.014260][T10314] loop5: lost filesystem error report for type 5 error -116 [ 238.014904][T10314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.035253][T10314] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.052197][T10314] Quota error (device loop5): do_check_range: Getting dqdh_entries 36 out of range 0-14 [ 238.062008][T10314] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 238.072136][T10314] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.2213: Failed to acquire dquot type 1 [ 238.091817][ T4644] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.938623][T10342] loop6: detected capacity change from 0 to 512 [ 238.974509][T10342] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.990336][T10342] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 239.134802][T10342] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 3: comm syz.6.2222: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 239.241184][T10342] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 12: comm syz.6.2222: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 239.266139][T10342] EXT4-fs error (device loop6): ext4_readdir:265: inode #2: block 13: comm syz.6.2222: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 239.288024][T10348] syzkaller0: entered promiscuous mode [ 239.293603][T10348] syzkaller0: entered allmulticast mode [ 239.312536][T10044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.772246][T10374] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 239.861512][ T28] audit: type=1400 audit(1774027080.372:2928): avc: denied { mounton } for pid=10373 comm="syz.5.2233" path="/331/file1/bus" dev="loop5" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 240.444601][T10390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.469957][T10390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.620029][T10381] chnl_net:caif_netlink_parms(): no params data found [ 240.708776][T10381] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.740151][T10381] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.920114][T10427] netlink: 'syz.6.2249': attribute type 3 has an invalid length. [ 240.978575][T10381] bridge_slave_0: entered allmulticast mode [ 240.991684][T10427] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2249'. [ 241.007940][T10381] bridge_slave_0: entered promiscuous mode [ 241.089628][T10381] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.104300][T10381] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.111567][T10381] bridge_slave_1: entered allmulticast mode [ 241.118306][T10381] bridge_slave_1: entered promiscuous mode [ 241.135969][T10381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.147279][T10381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.261153][T10381] team0: Port device team_slave_0 added [ 241.268255][T10381] team0: Port device team_slave_1 added [ 241.297447][T10381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.304531][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.340713][T10381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.352489][T10381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.359480][T10381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.419122][T10381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.594389][ T28] audit: type=1400 audit(1774027082.112:2929): avc: denied { read } for pid=10437 comm="syz.4.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 241.876192][T10381] hsr_slave_0: entered promiscuous mode [ 242.132332][T10381] hsr_slave_1: entered promiscuous mode [ 242.149437][T10381] debugfs: 'hsr0' already exists in 'hsr' [ 242.165133][T10381] Cannot create hsr debugfs directory [ 242.440517][T10381] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 242.486765][T10381] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 242.662162][ T28] audit: type=1400 audit(1774027083.182:2930): avc: denied { bind } for pid=10481 comm="syz.6.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 242.744913][T10484] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 243.096723][T10381] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 243.120103][T10381] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 243.127447][T10487] set_capacity_and_notify: 1 callbacks suppressed [ 243.127463][T10487] loop6: detected capacity change from 0 to 256 [ 243.197628][T10487] FAT-fs (loop6): codepage cp932 not found [ 243.208022][T10487] syz.6.2264 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 243.283372][T10381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.376464][T10381] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.486826][ T9991] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.493910][ T9991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.499941][ T9991] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.507042][ T9991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.849202][T10381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.859580][T10381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.107032][T10381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.156303][T10524] loop4: detected capacity change from 0 to 2048 [ 247.231389][T10524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.307396][T10543] loop2: detected capacity change from 0 to 256 [ 247.376367][T10543] FAT-fs (loop2): codepage cp775 not found [ 247.560873][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.614097][T10381] veth0_vlan: entered promiscuous mode [ 247.975390][T10381] veth1_vlan: entered promiscuous mode [ 248.015565][T10564] loop6: detected capacity change from 0 to 512 [ 248.061171][T10564] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 248.085638][T10381] veth0_macvtap: entered promiscuous mode [ 248.093956][T10381] veth1_macvtap: entered promiscuous mode [ 248.106920][T10381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.171873][T10564] EXT4-fs (loop6): 1 truncate cleaned up [ 248.179222][T10381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.201246][T10564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.226159][ T9966] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.235733][ T9966] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.244734][ T9966] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.254283][ T9966] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.282949][T10044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.335182][ T28] audit: type=1400 audit(1774027088.852:2931): avc: denied { mount } for pid=10570 comm="syz.7.2236" name="/" dev="ramfs" ino=28226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 248.384180][T10573] loop7: detected capacity change from 0 to 512 [ 248.471478][T10573] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.2283: invalid block [ 248.483872][T10573] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 248.484001][T10573] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2283: invalid indirect mapped block 4294967295 (level 1) [ 248.493220][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 248.493239][ C0] EXT4-fs (loop7): initial error at time 1774027089: ext4_get_branch:178: inode 11: block 4294967295 [ 248.493273][ C0] EXT4-fs (loop7): last error at time 1774027089: ext4_get_branch:178: inode 11: block 4294967295 [ 248.542844][T10573] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 248.543031][T10573] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2283: invalid indirect mapped block 4294967295 (level 1) [ 248.566454][T10573] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 248.566750][T10573] EXT4-fs (loop7): 2 truncates cleaned up [ 248.582464][T10573] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.040251][T10580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.118748][T10580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.131149][T10381] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.667728][T10588] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2287'. [ 250.062569][T10611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.071504][T10611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.138596][ T28] audit: type=1326 audit(1774027090.542:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.6.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 250.374190][ T28] audit: type=1326 audit(1774027090.542:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.6.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 250.483279][T10620] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2297'. [ 250.513631][T10620] bridge_slave_0: left allmulticast mode [ 250.535709][T10620] bridge_slave_0: left promiscuous mode [ 250.557984][T10620] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.591490][T10620] bridge_slave_1: left allmulticast mode [ 250.611026][ T28] audit: type=1326 audit(1774027090.542:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.6.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 250.636835][T10620] bridge_slave_1: left promiscuous mode [ 250.656975][T10620] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.680632][T10620] bond0: (slave bond_slave_0): Releasing backup interface [ 250.748940][ T28] audit: type=1326 audit(1774027090.542:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.6.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 250.797001][ T28] audit: type=1326 audit(1774027090.542:2936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.6.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 250.844611][ T28] audit: type=1326 audit(1774027090.542:2937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.6.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 250.870925][T10620] bond0: (slave bond_slave_1): Releasing backup interface [ 250.892657][T10620] team0: Port device team_slave_0 removed [ 250.900232][T10620] team0: Port device team_slave_1 removed [ 250.907703][T10620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.934387][T10620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.950658][ T28] audit: type=1326 audit(1774027090.572:2938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.6.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 250.982188][T10620] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 250.997624][ T28] audit: type=1326 audit(1774027090.572:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.6.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 251.024459][ T28] audit: type=1326 audit(1774027090.572:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10603 comm="syz.6.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 251.082891][T10635] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2299'. [ 251.172244][T10645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.187639][T10645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.134383][T10673] syzkaller0: entered promiscuous mode [ 252.139974][T10673] syzkaller0: entered allmulticast mode [ 252.301549][T10677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.310150][T10677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.322102][T10677] loop4: detected capacity change from 0 to 1024 [ 252.328856][T10677] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.337487][T10677] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 252.347384][T10677] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 252.357973][T10677] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 252.366092][T10677] EXT4-fs (loop4): orphan cleanup on readonly fs [ 252.373523][T10677] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.2314: Inode bitmap for bg 0 marked uninitialized [ 252.386109][T10677] loop4: lost filesystem error report for type 5 error -117 [ 252.386285][T10677] EXT4-fs (loop4): Remounting filesystem read-only [ 252.393654][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 252.393675][ C0] EXT4-fs (loop4): initial error at time 1774027092: ext4_read_inode_bitmap:167 [ 252.393687][ C0] EXT4-fs (loop4): last error at time 1774027092: ext4_read_inode_bitmap:167 [ 252.424752][T10677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.892837][T10688] loop6: detected capacity change from 0 to 512 [ 252.910892][T10688] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 252.914692][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2316'. [ 252.919633][T10688] EXT4-fs (loop6): 1 truncate cleaned up [ 252.943479][T10688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.956618][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.962471][T10688] EXT4-fs error (device loop6): ext4_append:79: inode #2: comm syz.6.2318: Logical block already allocated [ 252.980669][T10688] EXT4-fs (loop6): Remounting filesystem read-only [ 253.016776][T10044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.576383][T10707] usb usb7: usbfs: process 10707 (syz.2.2324) did not claim interface 0 before use [ 253.586634][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 253.586646][ T28] audit: type=1326 audit(1774027094.102:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10706 comm="syz.2.2324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb6d3bc799 code=0x0 [ 254.973551][T10736] loop6: detected capacity change from 0 to 1024 [ 255.041972][T10736] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.056805][T10736] EXT4-fs error (device loop6): ext4_lookup:1782: inode #2: comm syz.6.2333: 'file2' linked to parent dir [ 255.071749][T10736] EXT4-fs (loop6): Remounting filesystem read-only [ 255.086137][T10044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.121916][T10728] loop2: detected capacity change from 0 to 7 [ 255.205104][T10748] loop6: detected capacity change from 0 to 1024 [ 255.301263][T10748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.326102][T10748] EXT4-fs error (device loop6): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.6.2339: path /48/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=14, rec_len=8, size=80 fake=0 [ 255.348366][ T28] audit: type=1400 audit(1774027095.842:2956): avc: denied { create } for pid=10747 comm="syz.6.2339" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 255.374575][ T28] audit: type=1400 audit(1774027095.842:2957): avc: denied { read } for pid=10747 comm="syz.6.2339" name="file0" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 255.421687][T10044] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.888465][T10765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.898407][T10765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.428014][T10770] syzkaller0: entered promiscuous mode [ 256.434167][T10770] syzkaller0: entered allmulticast mode [ 256.560746][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop6, 10) failed: No such file or directory [ 256.594210][T10781] erspan0: entered promiscuous mode [ 256.610498][T10780] erspan0: left promiscuous mode [ 256.769989][ T28] audit: type=1400 audit(1774027097.282:2958): avc: denied { load_policy } for pid=10778 comm="syz.6.2350" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 256.812869][T10782] SELinux: failed to load policy [ 256.818814][T10788] tipc: Started in network mode [ 256.823766][T10788] tipc: Node identity ac1414aa, cluster identity 4711 [ 256.832376][T10788] tipc: New replicast peer: 100.1.1.1 [ 256.841884][T10788] tipc: Enabled bearer , priority 10 [ 256.906589][T10793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.916109][T10793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.178216][T10799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.201730][T10799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.107071][T10813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.128483][T10813] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.170695][T10813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 258.192465][ T6721] tipc: Node number set to 2886997162 [ 258.983989][T10823] loop2: detected capacity change from 0 to 1024 [ 258.991347][T10823] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 259.032126][T10823] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 2: comm syz.2.2365: lblock 2 mapped to illegal pblock 2 (length 1) [ 259.191863][T10823] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 259.193293][T10823] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 259.202427][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 259.202448][ C1] EXT4-fs (loop2): initial error at time 1774027099: ext4_map_blocks:776: inode 3: block 2 [ 259.202498][ C1] EXT4-fs (loop2): last error at time 1774027099: ext4_map_blocks:776: inode 3: block 2 [ 259.990026][T10823] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 48: comm syz.2.2365: lblock 0 mapped to illegal pblock 48 (length 1) [ 260.022681][T10823] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 260.022818][T10823] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 260.022836][T10823] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.2365: Failed to acquire dquot type 0 [ 260.022854][T10823] loop2: lost filesystem error report for type 5 error -117 [ 260.022940][T10823] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 260.022958][T10823] loop2: lost filesystem error report for type 5 error -117 [ 260.023006][T10823] EXT4-fs error (device loop2): ext4_evict_inode:255: inode #11: comm syz.2.2365: mark_inode_dirty error [ 260.023072][T10823] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 260.023131][T10823] EXT4-fs warning (device loop2): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 260.023176][T10823] EXT4-fs (loop2): 1 orphan inode deleted [ 260.023725][T10823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.052854][ T9987] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 260.053814][ T9987] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 260.053846][ T9987] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:24: Failed to release dquot type 0 [ 260.057948][ T28] audit: type=1400 audit(1774027100.572:2959): avc: denied { create } for pid=10822 comm="syz.2.2365" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 260.191031][ T4458] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.191195][ T4541] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 260.191225][ T4541] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 260.201765][ T4541] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 260.201789][ T4541] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:9: Failed to release dquot type 0 [ 260.201839][ T4541] loop2: lost filesystem error report for type 5 error -117 [ 260.204270][ T4458] EXT4-fs error (device loop2): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 260.204295][ T4458] loop2: lost filesystem error report for type 5 error -117 [ 260.204447][ T4458] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 260.204572][ T4458] loop2: lost filesystem error report for type 5 error -117 [ 260.204642][ T4458] EXT4-fs error (device loop2): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 260.204663][ T4458] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 260.493135][T10845] loop2: detected capacity change from 0 to 512 [ 260.548998][T10845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.431275][ T4458] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.901372][ T28] audit: type=1400 audit(1774027102.422:2960): avc: denied { ioctl } for pid=10872 comm="syz.1.2376" path="socket:[28666]" dev="sockfs" ino=28666 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 263.357383][T10895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.503539][T10894] loop2: detected capacity change from 0 to 8192 [ 264.906173][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2390'. [ 266.023159][T10950] loop2: detected capacity change from 0 to 4096 [ 266.030304][T10950] EXT4-fs: inline encryption not supported [ 266.038461][T10950] EXT4-fs: test_dummy_encryption option not supported [ 266.164258][T10969] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2401'. [ 266.454589][ T28] audit: type=1400 audit(1774027106.972:2961): avc: denied { connect } for pid=10977 comm="syz.2.2405" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 266.511968][T10978] xt_hashlimit: size too large, truncated to 1048576 [ 267.805111][T11016] loop4: detected capacity change from 0 to 512 [ 267.851117][T11016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.896203][T11016] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.937541][T11025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2416'. [ 268.228939][T11029] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2415: corrupted xattr block 33: invalid checksum [ 268.242696][T11029] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 268.251769][T11029] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.2415: corrupted xattr block 33: invalid checksum [ 268.265823][T11029] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 268.279288][ T28] audit: type=1400 audit(1774027108.772:2962): avc: denied { rename } for pid=11015 comm="syz.4.2415" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 268.302105][T11029] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2970: inode #15: comm syz.4.2415: corrupted xattr block 33: invalid checksum [ 268.315825][T11029] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -74 [ 268.316310][T11029] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -74) [ 268.516895][ T28] audit: type=1400 audit(1774027108.792:2963): avc: denied { unlink } for pid=11015 comm="syz.4.2415" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 268.717368][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.754633][T11049] loop4: detected capacity change from 0 to 128 [ 269.107037][T11069] loop2: detected capacity change from 0 to 128 [ 269.875394][T11098] loop4: detected capacity change from 0 to 512 [ 269.884119][T11098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.894201][T11098] EXT4-fs (loop4): blocks per group (34) and clusters per group (32768) inconsistent [ 270.841133][ T28] audit: type=1400 audit(1774027111.302:2964): avc: denied { setopt } for pid=11103 comm="syz.4.2438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 272.230616][ T28] audit: type=1400 audit(1774027112.722:2965): avc: denied { setattr } for pid=11139 comm="syz.6.2449" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 272.331942][T11148] loop4: detected capacity change from 0 to 256 [ 272.829192][T11148] FAT-fs (loop4): IO charset iso8859-15 not found [ 272.878441][T11162] tipc: Enabling of bearer rejected, already enabled [ 272.887130][T11164] loop4: detected capacity change from 0 to 512 [ 272.907291][T11164] EXT4-fs: Ignoring removed nobh option [ 272.934015][T11164] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.953534][T11164] ext4 filesystem being mounted at /523/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.968589][T11164] EXT4-fs error (device loop4): ext4_generic_delete_entry:2666: inode #12: block 32: comm syz.4.2456: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 272.990465][T11176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2443'. [ 273.011560][T11164] EXT4-fs error (device loop4) in ext4_delete_entry:2737: Corrupt filesystem [ 273.030063][T11177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2457'. [ 273.139498][ T28] audit: type=1400 audit(1774027113.642:2966): avc: denied { create } for pid=11179 comm="syz.6.2460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 273.177877][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.279690][T11184] 9p: Bad value for 'rfdno' [ 273.835972][T11193] loop2: detected capacity change from 0 to 256 [ 275.157753][T11211] loop2: detected capacity change from 0 to 1024 [ 275.185290][T11216] tipc: Enabling of bearer rejected, already enabled [ 275.202646][T11211] EXT4-fs: Ignoring removed bh option [ 275.215270][T11211] EXT4-fs: Ignoring removed oldalloc option [ 275.228863][T11211] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 275.267043][T11211] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #3: block 1: comm syz.2.2468: lblock 1 mapped to illegal pblock 1 (length 1) [ 275.296291][T11211] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 275.296537][T11211] Quota error (device loop2): write_blk: dquota write failed [ 275.305648][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 275.305665][ C0] EXT4-fs (loop2): initial error at time 1774027115: ext4_map_blocks:818: inode 3: block 1 [ 275.305692][ C0] EXT4-fs (loop2): last error at time 1774027115: ext4_map_blocks:818: inode 3: block 1 [ 275.339517][T11211] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 275.349613][T11211] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.2468: Failed to acquire dquot type 0 [ 275.360991][T11211] loop2: lost filesystem error report for type 5 error -117 [ 275.392000][T11211] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.2468: Freeing blocks not in datazone - block = 0, count = 4096 [ 275.455702][T11211] loop2: lost filesystem error report for type 5 error -117 [ 275.456202][T11211] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2468: Invalid inode bitmap blk 0 in block_group 0 [ 275.476524][ T12] EXT4-fs error (device loop2): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 275.521927][T11223] loop4: detected capacity change from 0 to 2048 [ 275.528384][ T12] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 275.528609][ T12] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 275.552567][T11211] loop2: lost filesystem error report for type 5 error -117 [ 275.552701][T11211] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 275.582140][T11223] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.605021][ T12] EXT4-fs error (device loop2): ext4_release_dquot:7037: comm kworker/u8:0: Failed to release dquot type 0 [ 275.634409][T11211] loop2: lost filesystem error report for type 5 error -117 [ 275.634570][T11211] EXT4-fs (loop2): 1 orphan inode deleted [ 275.660685][ T12] loop2: lost filesystem error report for type 5 error -117 [ 275.671122][T11211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.730231][ T12] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 275.745107][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 275.757360][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 275.757360][ T12] [ 275.757716][ T4458] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.767035][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 275.782128][ T12] EXT4-fs (loop4): Free/Dirty block details [ 275.788155][ T12] EXT4-fs (loop4): free_blocks=4096 [ 275.796645][ T12] EXT4-fs (loop4): dirty_blocks=816 [ 275.799799][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2474'. [ 275.802235][ T12] EXT4-fs (loop4): Block reservation details [ 275.810858][ T28] audit: type=1400 audit(1774027116.312:2967): avc: denied { connect } for pid=11227 comm="syz.7.2474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 275.816894][ T12] EXT4-fs (loop4): i_reserved_data_blocks=51 [ 275.851522][ T9987] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 784 with error 28 [ 276.341974][ T28] audit: type=1400 audit(1774027116.852:2968): avc: denied { map } for pid=11242 comm="syz.7.2478" path="socket:[29626]" dev="sockfs" ino=29626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 276.423533][T11255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2476'. [ 277.635911][T11292] bridge0: port 1(syz_tun) entered blocking state [ 277.642500][T11292] bridge0: port 1(syz_tun) entered disabled state [ 277.649188][T11292] syz_tun: entered allmulticast mode [ 277.655324][T11292] syz_tun: entered promiscuous mode [ 277.661446][T11292] bridge0: port 1(syz_tun) entered blocking state [ 277.667903][T11292] bridge0: port 1(syz_tun) entered forwarding state [ 277.760104][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2491'. [ 278.674830][T11315] TCP: TCP_TX_DELAY enabled [ 278.763394][ T28] audit: type=1400 audit(1774027119.282:2969): avc: denied { audit_read } for pid=11323 comm="syz.4.2503" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.812216][T11331] syzkaller0: entered promiscuous mode [ 278.817723][T11331] syzkaller0: entered allmulticast mode [ 279.403071][ T28] audit: type=1400 audit(1774027119.922:2970): avc: denied { getopt } for pid=11353 comm="syz.4.2515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 279.546991][T11382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2525'. [ 279.598362][T11388] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11388 comm=syz.4.2525 [ 279.770346][ T28] audit: type=1400 audit(1774027120.282:2971): avc: denied { create } for pid=11400 comm="syz.6.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 279.830882][ T28] audit: type=1400 audit(1774027120.322:2972): avc: denied { write } for pid=11400 comm="syz.6.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 279.830991][T11405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.884807][T11401] infiniband syz1: set active [ 279.889618][T11401] infiniband syz1: added syz_tun [ 279.899504][T11405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.931175][T11401] RDS/IB: syz1: added [ 279.963791][T11401] smc: adding ib device syz1 with port count 1 [ 279.971649][T11401] smc: ib device syz1 port 1 has no pnetid [ 280.083648][T11421] loop2: detected capacity change from 0 to 512 [ 280.194709][T11421] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.207259][T11421] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.353132][T11408] infiniband syz0: set down [ 280.371476][T11408] infiniband syz0: added ipvlan0 [ 280.517485][T11408] RDS/IB: syz0: added [ 280.526084][T11408] smc: adding ib device syz0 with port count 1 [ 280.533285][ T28] audit: type=1400 audit(1774027120.932:2973): avc: denied { read write } for pid=11420 comm="syz.2.2542" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 280.586985][T11408] smc: ib device syz0 port 1 has no pnetid [ 280.617421][ T28] audit: type=1400 audit(1774027120.932:2974): avc: denied { open } for pid=11420 comm="syz.2.2542" path="/437/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 280.880474][T11421] rdma_rxe: rxe_newlink: failed to add syz_tun [ 280.918773][ T4458] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.990901][T11444] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2546'. [ 281.188096][ T28] audit: type=1400 audit(1774027121.702:2975): avc: denied { read } for pid=11454 comm="syz.7.2550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 281.544156][ T28] audit: type=1326 audit(1774027122.062:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11456 comm="syz.2.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6d3bc799 code=0x7ffc0000 [ 281.544666][T11457] netlink: 'syz.2.2547': attribute type 27 has an invalid length. [ 281.573597][ T28] audit: type=1326 audit(1774027122.062:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11456 comm="syz.2.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6d3bc799 code=0x7ffc0000 [ 281.599241][ T28] audit: type=1326 audit(1774027122.062:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11456 comm="syz.2.2547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbb6d3bc799 code=0x7ffc0000 [ 281.654974][T11457] bridge0: port 1(syz_tun) entered disabled state [ 281.667657][T11457] wg2: left promiscuous mode [ 281.673036][T11457] wg2: left allmulticast mode [ 281.699809][T11463] bridge0: port 1(syz_tun) entered blocking state [ 281.706291][T11463] bridge0: port 1(syz_tun) entered forwarding state [ 281.717140][T11463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.748757][T11463] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.771015][T11463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 282.083902][T11481] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 282.186616][T11499] rdma_rxe: rxe_newlink: failed to add syz_tun [ 283.013666][T11548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'. [ 283.649689][T11435] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.776893][T11580] tipc: Enabling of bearer rejected, already enabled [ 283.832787][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 283.832800][ T28] audit: type=1400 audit(1774027124.352:2988): avc: denied { unmount } for pid=11591 comm="syz.7.2598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 283.929482][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2597'. [ 283.947011][T11603] siw: device registration error -23 [ 284.375013][T11616] tipc: Enabling of bearer rejected, already enabled [ 284.479365][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2603'. [ 285.902122][T11647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.932196][T11647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.648502][T11669] bridge_slave_0: left allmulticast mode [ 286.672438][T11669] bridge_slave_0: left promiscuous mode [ 286.680247][T11673] loop4: detected capacity change from 0 to 512 [ 286.687397][T11669] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.741327][T11669] bridge_slave_1: left allmulticast mode [ 286.747025][T11669] bridge_slave_1: left promiscuous mode [ 286.760174][T11669] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.785374][T11669] bond0: (slave bond_slave_0): Releasing backup interface [ 286.837792][T11669] bond0: (slave bond_slave_1): Releasing backup interface [ 286.853040][T11669] team0: Port device team_slave_0 removed [ 286.863660][T11669] team0: Port device team_slave_1 removed [ 286.870450][T11669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.878244][T11669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.897439][T11669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.905036][T11669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.930863][T11669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 287.452809][ T28] audit: type=1400 audit(1774027127.972:2989): avc: denied { watch watch_reads } for pid=11705 comm="syz.2.2636" path="/454" dev="tmpfs" ino=2353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 287.453506][T11706] loop2: detected capacity change from 0 to 128 [ 287.985683][T11740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'. [ 288.702487][T11765] 9pnet_virtio: no channels available for device ./bus [ 289.025336][T11778] loop4: detected capacity change from 0 to 256 [ 289.663681][T11792] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.686901][T11767] syz.2.2659 (11767) used greatest stack depth: 5304 bytes left [ 289.725319][T11792] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.802001][T11792] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.874210][T11792] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.971956][ T9991] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.087611][ T9991] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.115506][ T9991] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.557100][ T9991] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.732102][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2691'. [ 291.003186][T11856] tipc: Enabling of bearer rejected, already enabled [ 291.318534][T11869] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2693'. [ 291.326137][T11871] syzkaller0: entered promiscuous mode [ 291.333021][T11871] syzkaller0: entered allmulticast mode [ 292.589551][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2714'. [ 293.533408][T11940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.542905][T11940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.563114][T11938] sit0: entered allmulticast mode [ 293.597486][T11938] sit0: entered promiscuous mode [ 295.515348][T11987] rdma_rxe: rxe_newlink: failed to add syz_tun [ 295.531182][T11987] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 296.339311][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2747'. [ 298.485818][T12094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2781'. [ 301.702783][T12168] tipc: Started in network mode [ 301.707672][T12168] tipc: Node identity ac1414aa, cluster identity 4711 [ 301.714986][T12168] tipc: New replicast peer: 100.1.1.1 [ 301.720404][T12168] tipc: Enabled bearer , priority 10 [ 303.620820][T12216] wg2: entered promiscuous mode [ 303.650686][T12216] wg2: entered allmulticast mode [ 303.695029][T11467] tipc: Node number set to 2886997162 [ 305.386852][T12248] chnl_net:caif_netlink_parms(): no params data found [ 305.483430][T12248] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.513132][T12248] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.542510][T12248] bridge_slave_0: entered allmulticast mode [ 305.549030][T12248] bridge_slave_0: entered promiscuous mode [ 305.556878][T12248] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.563991][T12248] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.571268][T12248] bridge_slave_1: entered allmulticast mode [ 305.577710][T12248] bridge_slave_1: entered promiscuous mode [ 305.594740][T12248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.605161][T12248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.625520][T12248] team0: Port device team_slave_0 added [ 305.632148][T12248] team0: Port device team_slave_1 added [ 305.743908][T12248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.750901][T12248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.780822][T12248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.798544][T12248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.810617][T12248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.851689][T12248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.063077][T12248] hsr_slave_0: entered promiscuous mode [ 306.075999][T12248] hsr_slave_1: entered promiscuous mode [ 306.102448][T12248] debugfs: 'hsr0' already exists in 'hsr' [ 306.108250][T12248] Cannot create hsr debugfs directory [ 307.117994][T12248] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.242881][T12248] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.252100][T12248] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.261109][T12248] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 307.674637][T12248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.757613][T12248] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.832160][T10002] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.839253][T10002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.013168][T12248] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.055536][T12248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.089163][T10002] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.096258][T10002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.289478][T12248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.776327][T12248] veth0_vlan: entered promiscuous mode [ 308.799573][T12248] veth1_vlan: entered promiscuous mode [ 308.844882][T12248] veth0_macvtap: entered promiscuous mode [ 308.852674][T12248] veth1_macvtap: entered promiscuous mode [ 308.881775][T12248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.912248][T12248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.950839][T10002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.971133][T10002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.000460][T10002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.020384][T10002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.078370][ T28] audit: type=1400 audit(1774027149.592:2990): avc: denied { mount } for pid=12248 comm="syz-executor" name="/" dev="gadgetfs" ino=34047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 309.726939][T12428] tipc: Enabling of bearer rejected, already enabled [ 312.427106][ T9675] bridge0: port 1(syz_tun) entered disabled state [ 312.443071][ T9675] syz_tun (unregistering): left allmulticast mode [ 312.449515][ T9675] syz_tun (unregistering): left promiscuous mode [ 312.456054][ T9675] bridge0: port 1(syz_tun) entered disabled state [ 312.816423][ T28] audit: type=1400 audit(1774027153.332:2991): avc: denied { mounton } for pid=12504 comm="syz.6.2908" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.891017][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2909'. [ 313.051993][ T28] audit: type=1400 audit(1774027153.572:2992): avc: denied { read } for pid=3037 comm="dhcpcd" name="n29" dev="tmpfs" ino=12055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.133133][ T28] audit: type=1400 audit(1774027153.572:2993): avc: denied { open } for pid=3037 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=12055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.224709][ T28] audit: type=1400 audit(1774027153.572:2994): avc: denied { getattr } for pid=3037 comm="dhcpcd" path="/run/udev/data/n29" dev="tmpfs" ino=12055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.260616][ T28] audit: type=1400 audit(1774027153.702:2995): avc: denied { open } for pid=12522 comm="syz.4.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 313.309128][ T28] audit: type=1400 audit(1774027153.702:2996): avc: denied { kernel } for pid=12522 comm="syz.4.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 313.359337][ T28] audit: type=1400 audit(1774027153.702:2997): avc: denied { cpu } for pid=12522 comm="syz.4.2911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 313.415145][ T28] audit: type=1400 audit(1774027153.912:2998): avc: denied { create } for pid=12527 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.470784][ T28] audit: type=1400 audit(1774027153.912:2999): avc: denied { write } for pid=12527 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=12060 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 313.861788][ T4541] bond0 (unregistering): left promiscuous mode [ 313.868286][ T4541] bond0 (unregistering): Released all slaves [ 313.875839][ T4541] bond1 (unregistering): Released all slaves [ 313.925603][ T4541] tipc: Disabling bearer [ 313.938436][ T4541] tipc: Left network mode [ 314.069702][T12496] chnl_net:caif_netlink_parms(): no params data found [ 314.423445][T12496] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.481122][T12496] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.514819][T12496] bridge_slave_0: entered allmulticast mode [ 314.521309][T12496] bridge_slave_0: entered promiscuous mode [ 314.527999][T12496] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.535872][T12496] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.544384][T12496] bridge_slave_1: entered allmulticast mode [ 314.560906][T12496] bridge_slave_1: entered promiscuous mode [ 314.571558][ T4541] batadv_slave_0: left promiscuous mode [ 314.590764][ T4541] hsr_slave_0: left promiscuous mode [ 314.596480][ T4541] hsr_slave_1: left promiscuous mode [ 314.714950][T12496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.691474][T12496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.710049][T12496] team0: Port device team_slave_0 added [ 315.716917][T12496] team0: Port device team_slave_1 added [ 315.741847][T12496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.820468][T12496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.899950][T12496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.941952][T12496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.030334][T12496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.120628][T12496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.219144][T12496] hsr_slave_0: entered promiscuous mode [ 316.245783][T12496] hsr_slave_1: entered promiscuous mode [ 316.272068][T12496] debugfs: 'hsr0' already exists in 'hsr' [ 316.296417][T12496] Cannot create hsr debugfs directory [ 316.737665][T12661] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2928'. [ 316.825865][T12496] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 316.863858][T12496] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 316.882466][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 316.882503][ T28] audit: type=1400 audit(1774027157.352:3002): avc: denied { write } for pid=12673 comm="syz.6.2930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 316.911984][T12496] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 316.919191][ T28] audit: type=1400 audit(1774027157.382:3003): avc: denied { ioctl } for pid=12673 comm="syz.6.2930" path="socket:[35013]" dev="sockfs" ino=35013 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 316.948116][T12496] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 316.966186][T12680] netlink: 'syz.4.2931': attribute type 6 has an invalid length. [ 317.044526][T12496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.081286][T12496] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.104988][ T9991] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.112070][ T9991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.131497][ T9991] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.138589][ T9991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.182961][T12496] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 317.213028][T12496] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.239472][T12709] netlink: 'syz.4.2936': attribute type 2 has an invalid length. [ 317.283240][T12709] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2936'. [ 317.326312][T12496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.473983][T12496] veth0_vlan: entered promiscuous mode [ 317.504729][T12496] veth1_vlan: entered promiscuous mode [ 317.637353][T12496] veth0_macvtap: entered promiscuous mode [ 317.645092][T12496] veth1_macvtap: entered promiscuous mode [ 317.655960][T12496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.665404][T12496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.697067][ T9991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.709954][ T9991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.734505][ T9991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.746622][ T9991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.823054][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2941'. [ 317.909644][T12749] tipc: Started in network mode [ 317.929148][T12749] tipc: Node identity ac1414aa, cluster identity 4711 [ 317.973512][T12749] tipc: New replicast peer: 100.1.1.1 [ 317.978970][T12749] tipc: Enabled bearer , priority 10 [ 318.095407][T12752] netlink: 'syz.1.2942': attribute type 12 has an invalid length. [ 318.134313][T12752] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2942'. [ 318.278965][T12754] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 320.172425][ T6714] tipc: Node number set to 2886997162 [ 320.243369][T12779] tipc: Started in network mode [ 320.248296][T12779] tipc: Node identity ac1414aa, cluster identity 4711 [ 320.255643][T12779] tipc: New replicast peer: 100.1.1.1 [ 320.270227][T12779] tipc: Enabled bearer , priority 10 [ 321.107106][T12808] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 321.380591][ T6711] tipc: Node number set to 2886997162 [ 321.641956][ T28] audit: type=1400 audit(1774027162.162:3004): avc: denied { execute } for pid=12814 comm="syz.4.2965" path="/31/freezer.parent_freezing" dev="tmpfs" ino=176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 322.081555][T12819] tipc: Enabling of bearer rejected, already enabled [ 322.126662][T12817] sit0: left promiscuous mode [ 322.446003][T12844] syzkaller0: entered promiscuous mode [ 322.451766][T12844] syzkaller0: entered allmulticast mode [ 322.478208][ T28] audit: type=1400 audit(1774027162.992:3005): avc: denied { write } for pid=12846 comm="syz.7.2979" path="socket:[35949]" dev="sockfs" ino=35949 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 322.914412][ T28] audit: type=1400 audit(1774027163.392:3006): avc: denied { name_bind } for pid=12890 comm="syz.7.2997" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 322.939858][ T28] audit: type=1400 audit(1774027163.392:3007): avc: denied { name_connect } for pid=12890 comm="syz.7.2997" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 323.152556][T12911] netlink: 'syz.7.3004': attribute type 10 has an invalid length. [ 323.222954][T12911] batman_adv: batadv0: Adding interface: netdevsim1 [ 323.247188][T12911] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.277591][T12911] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active [ 323.580091][T12937] tipc: Enabling of bearer rejected, already enabled [ 323.763191][T12917] 9pnet_virtio: no channels available for device ./bus [ 324.068653][T12948] netlink: 'syz.1.3019': attribute type 11 has an invalid length. [ 324.076881][T12948] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3019'. [ 324.207056][T12959] tipc: Enabling of bearer rejected, already enabled [ 324.365804][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3013'. [ 324.942733][T12991] tipc: Enabling of bearer rejected, already enabled [ 325.058363][T13000] netlink: 'syz.6.3040': attribute type 39 has an invalid length. [ 325.873711][T13000] hsr_slave_1 (unregistering): left promiscuous mode [ 325.953189][T13012] netlink: 'syz.1.3044': attribute type 10 has an invalid length. [ 325.961083][T13012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3044'. [ 325.983208][T13012] batman_adv: batadv0: Adding interface: macvlan0 [ 325.989680][T13012] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.032964][T13012] batman_adv: batadv0: Interface activated: macvlan0 [ 326.087988][T13026] tipc: Enabling of bearer rejected, already enabled [ 326.253163][ T28] audit: type=1400 audit(1774027166.772:3008): avc: denied { tracepoint } for pid=13048 comm="syz.4.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 326.299893][T13051] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3058'. [ 326.343011][T13053] netlink: 'syz.2.3059': attribute type 5 has an invalid length. [ 326.413129][T13059] netlink: 'syz.1.3061': attribute type 17 has an invalid length. [ 326.434529][T13059] netlink: 'syz.1.3061': attribute type 16 has an invalid length. [ 326.443652][T13061] tipc: Enabling of bearer rejected, already enabled [ 326.460997][T13059] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3061'. [ 327.696030][T13082] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 328.082506][T13103] tipc: Enabling of bearer rejected, already enabled [ 328.233311][ T28] audit: type=1400 audit(1774027168.752:3009): avc: denied { ioctl } for pid=13116 comm="syz.4.3083" path="socket:[35593]" dev="sockfs" ino=35593 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 328.306190][ T28] audit: type=1400 audit(1774027168.822:3010): avc: denied { write } for pid=13120 comm="syz.6.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 328.932909][T13160] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3101'. [ 329.684510][T13195] tipc: Enabling of bearer rejected, already enabled [ 330.062212][T13219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3124'. [ 330.636270][T13227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3127'. [ 330.664555][T13227] netlink: 'syz.1.3127': attribute type 3 has an invalid length. [ 331.880884][T13257] netlink: 2259 bytes leftover after parsing attributes in process `syz.2.3138'. [ 332.637567][T13254] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3137'. [ 332.756213][T13281] syz_tun: left allmulticast mode [ 332.761555][T13281] syz_tun: left promiscuous mode [ 332.766670][T13281] bridge0: port 1(syz_tun) entered disabled state [ 333.187195][ T28] audit: type=1400 audit(1774027173.702:3011): avc: denied { write } for pid=13315 comm="syz.2.3163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 333.306613][T13328] netlink: 'syz.6.3168': attribute type 17 has an invalid length. [ 333.994100][T13344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 334.239675][T13381] syzkaller0: entered promiscuous mode [ 334.251728][T13381] syzkaller0: entered allmulticast mode [ 334.412425][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3202'. [ 335.187807][T13461] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3224'. [ 335.728327][T13486] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3234'. [ 335.902760][T13493] syz_tun: entered allmulticast mode [ 336.075910][T13505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3242'. [ 336.222771][T13505] erspan0: entered promiscuous mode [ 336.237089][T13508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.244339][T13508] IPv6: NLM_F_CREATE should be set when creating new route [ 336.282213][T13505] macvtap1: entered promiscuous mode [ 336.320262][T13505] macvtap1: entered allmulticast mode [ 336.352068][T13505] erspan0: entered allmulticast mode [ 336.546015][T13528] rdma_rxe: rxe_newlink: failed to add syz_tun [ 336.552304][ T28] audit: type=1400 audit(1774027177.062:3012): avc: denied { create } for pid=13525 comm="syz.7.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 336.572453][ T28] audit: type=1400 audit(1774027177.062:3013): avc: denied { write } for pid=13525 comm="syz.7.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 336.618748][ T28] audit: type=1400 audit(1774027177.122:3014): avc: denied { sqpoll } for pid=13531 comm="syz.4.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 336.762658][T13553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.786925][T13553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.989220][T13565] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3269'. [ 337.793333][T13603] rdma_rxe: rxe_newlink: failed to add syz_tun [ 338.917096][T13640] tipc: Enabling of bearer rejected, failed to enable media [ 338.969748][T13644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3301'. [ 339.235659][T13679] syz_tun: entered allmulticast mode [ 339.478443][T13697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3324'. [ 340.255240][T13717] netlink: 'syz.2.3331': attribute type 3 has an invalid length. [ 341.075668][T13756] tipc: Enabling of bearer rejected, already enabled [ 341.611985][T13763] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3345'. [ 341.684214][T13763] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3345'. [ 342.025722][T13768] rdma_rxe: rxe_newlink: failed to add syz_tun [ 342.376120][T13783] tipc: Enabling of bearer rejected, already enabled [ 342.649205][T13791] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3356'. [ 343.772142][T13812] tipc: Enabling of bearer rejected, already enabled [ 343.858959][T13819] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3368'. [ 343.986012][T13829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3369'. [ 344.458985][T13838] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3376'. [ 345.436026][T13876] loop4: detected capacity change from 0 to 1024 [ 345.458851][T13876] EXT4-fs: Ignoring removed bh option [ 345.491011][T13876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.660138][T12248] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.705784][ T28] audit: type=1400 audit(1774027186.222:3015): avc: denied { mount } for pid=13890 comm="syz.4.3392" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 345.863878][T13899] syzkaller0: entered promiscuous mode [ 345.869381][T13899] syzkaller0: entered allmulticast mode [ 345.907761][T13906] syz1: rxe_newlink: already configured on syz_tun [ 346.604244][T13929] atomic_op ffff88810de62128 conn xmit_atomic 0000000000000000 [ 346.717997][T13940] smc: net device bond0 applied user defined pnetid SYZ2 [ 346.737751][T13909] chnl_net:caif_netlink_parms(): no params data found [ 346.760503][T13940] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3409'. [ 346.783555][T13940] smc: removing net device bond0 with user defined pnetid SYZ2 [ 346.792837][T13940] bond0 (unregistering): Released all slaves [ 346.897093][T13947] tmpfs: Unsupported parameter 'huge' [ 346.901585][T13909] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.919735][T13909] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.937160][T13909] bridge_slave_0: entered allmulticast mode [ 346.943808][T13909] bridge_slave_0: entered promiscuous mode [ 346.960909][T13909] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.978151][T13909] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.985506][T13909] bridge_slave_1: entered allmulticast mode [ 347.001198][T13909] bridge_slave_1: entered promiscuous mode [ 347.038626][T13909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.049950][T13909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.090658][T13909] team0: Port device team_slave_0 added [ 347.097356][T13909] team0: Port device team_slave_1 added [ 347.365293][T13909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.390894][T13909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.460810][T13909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.479810][T13909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.489900][T13909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.516272][T13909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.792574][T13909] hsr_slave_0: entered promiscuous mode [ 347.798651][T13909] hsr_slave_1: entered promiscuous mode [ 347.804831][T13909] debugfs: 'hsr0' already exists in 'hsr' [ 347.810764][T13909] Cannot create hsr debugfs directory [ 348.118143][ T28] audit: type=1400 audit(1774027188.632:3016): avc: denied { override_creds } for pid=13977 comm="syz.1.3422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 348.752461][T13909] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 348.765784][T13909] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 348.779578][T13909] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 348.791552][T13909] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 348.873631][T13909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.893804][T13909] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.907657][ T4541] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.914771][ T4541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.953083][ T4541] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.960249][ T4541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.217225][T10002] bond0 (unregistering): Released all slaves [ 349.235377][T13909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 349.245927][T13909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.284890][T10002] tipc: Disabling bearer [ 349.291659][T10002] tipc: Left network mode [ 349.387017][T13909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.421851][T10002] hsr_slave_0: left promiscuous mode [ 349.441309][T10002] hsr_slave_1: left promiscuous mode [ 349.565940][T14031] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 349.645208][T13909] veth0_vlan: entered promiscuous mode [ 349.660210][T13909] veth1_vlan: entered promiscuous mode [ 349.676322][T13909] veth0_macvtap: entered promiscuous mode [ 349.683905][T13909] veth1_macvtap: entered promiscuous mode [ 349.694821][T13909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.201908][T13909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.223803][ T4541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.806048][ T4541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.836364][T14082] tipc: Enabling of bearer rejected, already enabled [ 350.997159][ T4541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.037424][ T4541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.059063][T14096] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3460'. [ 351.443672][T14111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3463'. [ 351.558926][ T28] audit: type=1400 audit(1774027192.072:3017): avc: denied { nlmsg_write } for pid=14114 comm="syz.7.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 351.959238][T14125] tipc: Started in network mode [ 351.964405][T14125] tipc: Node identity ac1414aa, cluster identity 4711 [ 351.971402][T14125] tipc: New replicast peer: 100.1.1.1 [ 351.976833][T14125] tipc: Enabled bearer , priority 10 [ 353.058142][ T6720] tipc: Node number set to 2886997162 [ 355.518307][T14156] tap0: tun_chr_ioctl cmd 1074025675 [ 355.525271][T14156] tap0: persist enabled [ 355.529588][T14156] tap0: tun_chr_ioctl cmd 1074025675 [ 355.535139][T14156] tap0: persist enabled [ 355.539651][T14156] tap0: tun_chr_ioctl cmd 2147767520 [ 355.573397][T14160] tipc: Enabling of bearer rejected, already enabled [ 355.777921][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3487'. [ 356.236561][T14171] syz_tun (unregistering): left allmulticast mode [ 356.249237][ T30] smc: removing ib device syz1 [ 356.256902][T11466] syz1: Port: 1 Link DOWN [ 356.575623][T14185] loop4: detected capacity change from 0 to 4096 [ 356.582530][T14183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'. [ 356.623034][T14188] tipc: Enabling of bearer rejected, already enabled [ 356.971297][T14185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.053131][T14200] ip6t_rpfilter: unknown options [ 357.443894][T14185] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 357.461673][T14185] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 357.490964][T14185] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.3493: Failed to acquire dquot type 0 [ 358.144150][T14206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.155738][T14206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.417295][T12248] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.481098][T14218] tipc: Enabling of bearer rejected, already enabled [ 358.516500][ T28] audit: type=1400 audit(1774027199.032:3018): avc: denied { read } for pid=14221 comm="syz.6.3507" path="socket:[40340]" dev="sockfs" ino=40340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 358.554437][T14225] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3508'. [ 359.113391][T14233] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3510'. [ 360.101160][T14258] tipc: Enabling of bearer rejected, already enabled [ 360.268763][T14267] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3522'. [ 361.578253][T14275] loop4: detected capacity change from 0 to 128 [ 361.584974][T14275] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 361.642639][T14275] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 361.875390][T14289] tipc: Enabling of bearer rejected, already enabled [ 361.936820][ T3408] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 361.944548][T14295] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3533'. [ 361.955161][ T3408] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.021941][T14310] lo: entered allmulticast mode [ 362.072552][T14314] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3539'. [ 362.159496][T14298] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3532'. [ 362.237757][T14298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3532'. [ 362.877481][T14332] loop4: detected capacity change from 0 to 4096 [ 362.894397][T14332] EXT4-fs: inline encryption not supported [ 362.910931][T14332] EXT4-fs: test_dummy_encryption option not supported [ 362.997546][T14339] syz_tun: entered allmulticast mode [ 363.048067][T14340] tipc: Enabling of bearer rejected, already enabled [ 363.806323][ T28] audit: type=1400 audit(1774027204.312:3019): avc: denied { read } for pid=14354 comm="syz.4.3555" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 364.210423][T14363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3552'. [ 364.306495][ T28] audit: type=1400 audit(1774027204.312:3020): avc: denied { open } for pid=14354 comm="syz.4.3555" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 364.496742][ T28] audit: type=1400 audit(1774027204.912:3021): avc: denied { connect } for pid=14346 comm="syz.2.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 365.414932][T14387] tipc: Enabling of bearer rejected, already enabled [ 365.650449][T14400] lo: entered allmulticast mode [ 365.683687][T14404] loop2: detected capacity change from 0 to 512 [ 365.690262][T14404] EXT4-fs: Ignoring removed bh option [ 365.700979][T14404] EXT4-fs: inline encryption not supported [ 365.707187][T14404] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 365.831063][T14404] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 366.012405][T14404] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3569: bg 0: block 248: padding at end of block bitmap is not set [ 366.064362][T14404] loop2: lost filesystem error report for type 5 error -117 [ 366.064766][T14404] Quota error (device loop2): write_blk: dquota write failed [ 366.072094][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 366.072118][ C1] EXT4-fs (loop2): last error at time 1774027206: ext4_validate_block_bitmap:441 [ 366.215248][T14404] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 366.256375][T14404] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.3569: Failed to acquire dquot type 1 [ 366.293644][T14404] loop2: lost filesystem error report for type 5 error -117 [ 366.294870][T14404] EXT4-fs (loop2): 1 truncate cleaned up [ 366.339703][T14404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 366.600393][T14431] tipc: Enabling of bearer rejected, already enabled [ 366.684204][T13909] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 367.000759][ T9991] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.373961][ T9991] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.386686][T14442] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 367.397033][ T28] audit: type=1400 audit(1774027207.912:3022): avc: denied { relabelto } for pid=14441 comm="syz.7.3578" name="file0" dev="tmpfs" ino=1378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 367.585102][ T9991] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.616558][ T28] audit: type=1400 audit(1774027207.912:3023): avc: denied { associate } for pid=14441 comm="syz.7.3578" name="file0" dev="tmpfs" ino=1378 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 367.745043][ T9991] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.914706][ T9991] bridge_slave_1: left allmulticast mode [ 367.949319][ T9991] bridge_slave_1: left promiscuous mode [ 368.153029][ T9991] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.160661][ T9991] bridge_slave_0: left allmulticast mode [ 368.166351][ T9991] bridge_slave_0: left promiscuous mode [ 368.172489][ T9991] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.599739][ T9991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.699977][ T9991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.786946][ T9991] bond0 (unregistering): Released all slaves [ 368.984401][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3583'. [ 369.036985][ T28] audit: type=1400 audit(1774027209.552:3024): avc: denied { mounton } for pid=14508 comm="syz.1.3589" path=2F3134332FE91F7189591E9233614B dev="tmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 369.066799][ T9991] hsr_slave_0: left promiscuous mode [ 369.091881][ T9991] hsr_slave_1: left promiscuous mode [ 369.099734][ T9991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.123347][ T9991] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.152642][ T9991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.171994][ T9991] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.197645][ T9991] veth1_macvtap: left promiscuous mode [ 369.203326][ T9991] veth0_macvtap: left promiscuous mode [ 369.209008][ T9991] veth1_vlan: left promiscuous mode [ 369.214664][ T9991] veth0_vlan: left promiscuous mode [ 369.297517][ T9991] team0 (unregistering): Port device team_slave_1 removed [ 369.373229][ T9991] team0 (unregistering): Port device team_slave_0 removed [ 369.625445][T14539] tipc: Enabling of bearer rejected, already enabled [ 369.688231][T14546] veth0_to_team: entered promiscuous mode [ 370.071497][ T6701] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 370.095414][ T6701] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 371.429714][T14636] 9pnet_virtio: no channels available for device ./bus [ 372.027438][ T28] audit: type=1400 audit(1774027212.542:3025): avc: denied { watch } for pid=14644 comm="syz.2.3618" path="/30/file0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 372.701038][ T28] audit: type=1400 audit(1774027212.762:3026): avc: denied { execute_no_trans } for pid=14644 comm="syz.2.3618" path="/30/file0" dev="tmpfs" ino=174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 373.357576][ T28] audit: type=1400 audit(1774027213.872:3027): avc: denied { sys_module } for pid=14657 comm="syz.2.3622" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 374.323413][ T28] audit: type=1400 audit(1774027214.652:3028): avc: denied { bind } for pid=14676 comm="syz.4.3629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 374.403544][ T28] audit: type=1400 audit(1774027214.892:3029): avc: denied { create } for pid=14685 comm="syz.6.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 374.433932][ T28] audit: type=1400 audit(1774027214.892:3030): avc: denied { write } for pid=14685 comm="syz.6.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 375.085297][T14723] netlink: 'syz.6.3646': attribute type 11 has an invalid length. [ 375.093412][T14723] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3646'. [ 375.327053][ T28] audit: type=1400 audit(1774027215.782:3031): avc: denied { create } for pid=14716 comm="syz.4.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 375.432626][T14733] 9pnet_virtio: no channels available for device ./bus [ 375.583289][ T28] audit: type=1400 audit(1774027215.782:3032): avc: denied { bind } for pid=14716 comm="syz.4.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 376.119284][T14761] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3659'. [ 376.183768][T14765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3662'. [ 376.596941][T14778] syz_tun: entered allmulticast mode [ 376.817971][T14795] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3672'. [ 376.953046][T14800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3673'. [ 377.043486][ T28] audit: type=1400 audit(1774027217.562:3033): avc: denied { wake_alarm } for pid=14814 comm="syz.1.3680" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 377.129925][T14825] tipc: Enabling of bearer rejected, already enabled [ 377.165190][T14829] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3685'. [ 377.342268][T14837] loop4: detected capacity change from 0 to 512 [ 377.371925][T14837] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 377.382140][T14837] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 377.397417][T14837] EXT4-fs (loop4): mount failed [ 377.603674][T14855] loop4: detected capacity change from 0 to 256 [ 377.617383][ T28] audit: type=1400 audit(1774027218.112:3034): avc: denied { ioctl } for pid=14836 comm="syz.4.3688" path="socket:[43034]" dev="sockfs" ino=43034 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 377.748697][T14855] FAT-fs (loop4): codepage cp861 not found [ 377.779817][ T28] audit: type=1400 audit(1774027218.282:3035): avc: denied { connect } for pid=14836 comm="syz.4.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 377.819747][ T28] audit: type=1400 audit(1774027218.282:3036): avc: denied { write } for pid=14836 comm="syz.4.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 379.657073][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3706'. [ 379.716773][T14902] syz_tun: entered promiscuous mode [ 379.730346][T14902] syz_tun: left promiscuous mode [ 380.701938][T14945] No such timeout policy "syz0" [ 380.864155][T14947] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3721'. [ 380.969308][T14947] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.013818][T14947] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.081896][T14947] bond0 (unregistering): Released all slaves [ 381.279195][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3724'. [ 381.390512][T14992] loop4: detected capacity change from 0 to 256 [ 381.419037][T14992] FAT-fs (loop4): IO charset iso8859-14 not found [ 382.678214][ T28] audit: type=1400 audit(1774027223.192:3037): avc: denied { unlink } for pid=13909 comm="syz-executor" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="tmpfs" ino=364 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 384.800132][T15075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3748'. [ 386.679541][T15102] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3759'. [ 388.601596][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3770'. [ 388.795345][ T28] audit: type=1400 audit(1774027229.312:3038): avc: denied { read } for pid=15146 comm="syz.2.3777" path="socket:[43217]" dev="sockfs" ino=43217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 389.758060][T15176] loop4: detected capacity change from 0 to 512 [ 390.726344][T15176] EXT4-fs: Ignoring removed bh option [ 390.732095][T15176] EXT4-fs: inline encryption not supported [ 390.738438][T15176] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 391.595659][T15176] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 391.632906][T15183] tipc: Enabling of bearer rejected, already enabled [ 391.668556][T15176] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3787: bg 0: block 248: padding at end of block bitmap is not set [ 391.683692][T15176] loop4: lost filesystem error report for type 5 error -117 [ 391.683890][T15176] Quota error (device loop4): write_blk: dquota write failed [ 391.691201][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 391.691219][ C0] EXT4-fs (loop4): last error at time 1774027232: ext4_validate_block_bitmap:441 [ 391.714385][T15176] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 391.726741][T15176] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.3787: Failed to acquire dquot type 1 [ 391.738106][T15176] loop4: lost filesystem error report for type 5 error -117 [ 391.738597][T15176] EXT4-fs (loop4): 1 truncate cleaned up [ 391.762288][T15176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 391.823730][T12248] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 391.865983][T15205] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3794'. [ 392.038190][T15209] loop4: detected capacity change from 0 to 512 [ 392.044858][T15209] vfat: Unknown parameter 'uäéšã»P2/cÝ' [ 392.088505][ T28] audit: type=1326 audit(1774027232.602:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbde15c799 code=0x7ffc0000 [ 392.125197][ T28] audit: type=1326 audit(1774027232.602:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbde15c799 code=0x7ffc0000 [ 392.149925][ T28] audit: type=1326 audit(1774027232.602:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ffbde15c799 code=0x7ffc0000 [ 392.173726][ T28] audit: type=1326 audit(1774027232.602:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbde15c799 code=0x7ffc0000 [ 392.198556][ T28] audit: type=1326 audit(1774027232.602:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbde15c799 code=0x7ffc0000 [ 392.245260][ T28] audit: type=1326 audit(1774027232.602:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7ffbde15c799 code=0x7ffc0000 [ 392.269880][ T28] audit: type=1326 audit(1774027232.602:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15203 comm="syz.7.3796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbde15c799 code=0x7ffc0000 [ 392.344359][T15219] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3800'. [ 392.357439][T15219] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.368326][T15219] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.378679][T15219] bond0 (unregistering): Released all slaves [ 394.843566][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3811'. [ 395.625945][T15265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3815'. [ 395.651275][T15267] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3817'. [ 395.732370][T15269] loop4: detected capacity change from 0 to 512 [ 395.768095][T15269] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 395.974615][T15269] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c028, mo2=0002] [ 395.982671][T15269] System zones: 1-12 [ 395.987355][T15269] EXT4-fs (loop4): 1 truncate cleaned up [ 395.994324][T15269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.015374][T15269] SELinux: Context : is not valid (left unmapped). [ 396.041388][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 396.041410][ T28] audit: type=1400 audit(1774027236.542:3065): avc: denied { relabelto } for pid=15262 comm="syz.4.3816" name="rdma.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 396.969089][T12248] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.271499][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3827'. [ 397.294110][ T28] audit: type=1400 audit(1774027237.802:3066): avc: denied { setopt } for pid=15300 comm="syz.4.3828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 397.465099][ T28] audit: type=1400 audit(1774027237.802:3067): avc: denied { read } for pid=15300 comm="syz.4.3828" path="socket:[42860]" dev="sockfs" ino=42860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 397.511472][T15310] loop2: detected capacity change from 0 to 7 [ 398.954540][T15334] tipc: Enabling of bearer rejected, already enabled [ 399.306586][T15343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3843'. [ 399.524623][T15352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3848'. [ 399.637398][T15355] vlan2: entered allmulticast mode [ 399.642602][T15355] vlan0: entered allmulticast mode [ 399.647986][T15355] veth0_vlan: entered allmulticast mode [ 399.660408][T15357] loop2: detected capacity change from 0 to 7 [ 400.376102][T15368] tipc: Enabling of bearer rejected, already enabled [ 401.985243][T15396] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3860'. [ 402.071128][T15386] loop4: detected capacity change from 0 to 8192 [ 402.364262][T15409] tipc: Enabling of bearer rejected, already enabled [ 402.438682][T15417] loop4: detected capacity change from 0 to 512 [ 402.513987][T15417] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.527648][ T28] audit: type=1400 audit(1774027243.032:3068): avc: denied { map } for pid=15400 comm="syz.7.3862" path="socket:[44084]" dev="sockfs" ino=44084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 402.580871][T15417] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.592589][ T28] audit: type=1400 audit(1774027243.032:3069): avc: denied { read accept } for pid=15400 comm="syz.7.3862" path="socket:[44084]" dev="sockfs" ino=44084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 403.807011][T12248] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.737297][T15448] loop4: detected capacity change from 0 to 256 [ 404.881023][T15448] FAT-fs (loop4): codepage cp866 not found [ 404.917083][T15453] tipc: Enabling of bearer rejected, already enabled [ 405.054038][T15460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3880'. [ 406.055498][T15469] loop4: detected capacity change from 0 to 512 [ 406.102842][T15469] EXT4-fs: Ignoring removed bh option [ 406.108259][T15469] EXT4-fs: inline encryption not supported [ 406.118252][T15469] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 406.146372][T15469] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 406.184239][T15469] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3883: bg 0: block 248: padding at end of block bitmap is not set [ 406.198765][T15469] loop4: lost filesystem error report for type 5 error -117 [ 406.198939][T15469] Quota error (device loop4): write_blk: dquota write failed [ 406.206311][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 406.206328][ C0] EXT4-fs (loop4): last error at time 1774027246: ext4_validate_block_bitmap:441 [ 406.231379][T15469] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 406.261108][T15469] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.3883: Failed to acquire dquot type 1 [ 406.289900][T15469] loop4: lost filesystem error report for type 5 error -117 [ 406.290413][T15469] EXT4-fs (loop4): 1 truncate cleaned up [ 406.305592][T15483] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3888'. [ 406.325276][T15469] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 406.355706][T15485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3889'. [ 406.443742][T15487] tipc: Enabling of bearer rejected, already enabled [ 406.454854][T12248] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 406.466827][T15489] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3892'. [ 406.726515][T15502] loop4: detected capacity change from 0 to 1024 [ 407.236246][T15502] EXT4-fs: Ignoring removed orlov option [ 407.261847][T15502] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.330758][ T28] audit: type=1400 audit(1774027247.852:3070): avc: denied { create } for pid=15501 comm="syz.4.3896" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 407.431484][T12248] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.520790][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3898'. [ 407.826923][T15530] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3905'. [ 408.390356][ T28] audit: type=1326 audit(1774027248.902:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15545 comm="syz.6.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 408.422133][ T28] audit: type=1326 audit(1774027248.902:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15545 comm="syz.6.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 408.447495][ T28] audit: type=1326 audit(1774027248.932:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15545 comm="syz.6.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 408.471397][ T28] audit: type=1326 audit(1774027248.932:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15545 comm="syz.6.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 408.577374][ T28] audit: type=1326 audit(1774027248.932:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15545 comm="syz.6.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 408.630641][ T28] audit: type=1326 audit(1774027248.932:3076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15545 comm="syz.6.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 408.654488][ T28] audit: type=1326 audit(1774027248.932:3077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15545 comm="syz.6.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 408.700043][ T28] audit: type=1326 audit(1774027248.932:3078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15545 comm="syz.6.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 408.755668][ T28] audit: type=1326 audit(1774027248.932:3079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15545 comm="syz.6.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 408.801563][ T28] audit: type=1326 audit(1774027248.932:3080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15545 comm="syz.6.3910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f93b6bdc799 code=0x7ffc0000 [ 408.828383][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3915'. [ 408.858744][T15563] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3917'. [ 409.107623][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3919'. [ 409.559428][T15575] bridge2: entered promiscuous mode [ 409.564698][T15575] bridge2: entered allmulticast mode [ 409.942368][T15578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 409.977828][T15578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 409.984739][T15578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 409.991454][T15578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 409.998241][T15578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 410.005020][T15578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 410.011714][T15578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 410.018396][T15578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 410.025134][T15578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 410.031855][T15578] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 410.374731][T15591] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3926'. [ 410.618623][T15591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.659206][T15591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.678516][T15591] bond0 (unregistering): Released all slaves [ 410.692029][T15593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3927'. [ 410.726681][T15601] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3930'. [ 410.980972][T15612] loop4: detected capacity change from 0 to 128 [ 411.236569][T15620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3936'. [ 411.851992][T15645] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3944'. [ 413.619495][T15677] netlink: 'syz.7.3954': attribute type 22 has an invalid length. [ 413.637080][T15677] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3954'. [ 413.730713][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3955'. [ 413.921129][T15688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3956'. [ 414.759464][T15697] loop2: detected capacity change from 0 to 7 [ 414.912781][T15720] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3970'. [ 415.038190][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3973'. [ 415.827417][T15758] __nla_validate_parse: 1 callbacks suppressed [ 415.827432][T15758] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3983'. [ 415.899949][T15763] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3985'. [ 415.940241][T15765] loop4: detected capacity change from 0 to 128 [ 415.960949][T15765] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 415.973740][T15765] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.992550][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 415.992573][ T28] audit: type=1400 audit(1774027256.512:3111): avc: denied { rename } for pid=15764 comm="syz.4.3986" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 416.084354][ T28] audit: type=1400 audit(1774027256.562:3112): avc: denied { unlink } for pid=15764 comm="syz.4.3986" name="file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 416.109841][T12248] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.227867][T15780] bridge2: entered promiscuous mode [ 416.245472][T15780] bridge2: entered allmulticast mode [ 417.010617][T15795] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3995'. [ 417.204913][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3998'. [ 417.329773][T15810] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4001'. [ 417.496233][T15813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3999'. [ 418.511346][T15833] smc: net device bond0 applied user defined pnetid SYZ2 [ 418.721570][T15834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4004'. [ 419.299483][ T28] audit: type=1400 audit(1774027259.812:3113): avc: denied { associate } for pid=15835 comm="syz.6.4008" name="rdma.current" dev="tmpfs" ino=2089 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=":" [ 419.407579][ T28] audit: type=1400 audit(1774027259.852:3114): avc: denied { unlink } for pid=10044 comm="syz-executor" name="rdma.current" dev="tmpfs" ino=2089 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=":" [ 419.498263][T15863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4014'. [ 421.933821][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4023'. [ 422.211261][T15911] 9pnet_virtio: no channels available for device ./bus [ 423.265336][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4032'. [ 425.693784][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4042'. [ 428.400810][T15987] 9pnet_virtio: no channels available for device ./bus [ 428.979294][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4059'. [ 434.140884][T16086] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4080'. [ 434.573861][T16098] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4084'. [ 437.491858][T16150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4099'. [ 439.140094][T16182] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4112'. [ 440.205578][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4116'. [ 440.412655][T16207] tipc: Enabling of bearer rejected, failed to enable media [ 443.510735][T16263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4133'. [ 444.558702][T16290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4144'. [ 446.106044][T16283] 9pnet_virtio: no channels available for device ./bus [ 448.263951][T16326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4153'. [ 449.289417][T16336] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4159'. [ 452.152664][T16403] netlink: 168 bytes leftover after parsing attributes in process `syz.1.4182'. [ 452.418851][T16407] tipc: Enabling of bearer rejected, already enabled [ 452.747864][T16429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4189'. [ 453.138789][T16434] vlan2: entered allmulticast mode [ 453.144402][T16434] bridge0: entered allmulticast mode [ 453.150084][T16434] bridge0: port 1(vlan2) entered blocking state [ 453.157097][T16434] bridge0: port 1(vlan2) entered disabled state [ 453.866151][T16442] loop2: detected capacity change from 0 to 7 [ 453.970071][T16444] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.977324][T16444] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.049429][T16444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.072556][T16444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.143047][ T56] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.152191][ T56] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.179244][ T56] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.204901][ T56] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.262883][T16488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4207'. [ 455.346919][T16484] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.354212][T16484] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.490253][T16484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.502421][T16484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.592121][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.613453][ T30] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.657838][ T30] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.675407][ T30] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.711047][T16506] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16506 comm=syz.2.4215 [ 455.763087][T16506] netlink: 'syz.2.4215': attribute type 1 has an invalid length. [ 455.907818][T16506] smc: adding net device bond0 with user defined pnetid SYZ2 [ 455.924074][T16511] bond0: (slave bridge1): making interface the new active one [ 455.932945][T16511] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 458.822674][T16576] loop2: detected capacity change from 0 to 7 [ 461.626342][T16636] bridge2: entered promiscuous mode [ 461.639929][T16636] bridge2: entered allmulticast mode [ 461.664380][T16639] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16639 comm=syz.2.4254 [ 462.334192][T16657] loop4: detected capacity change from 0 to 128 [ 462.471795][T16657] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 462.508951][T16657] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.643932][T12248] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 463.590264][T16685] bridge2: entered promiscuous mode [ 463.595651][T16685] bridge2: entered allmulticast mode [ 463.685432][T16690] vlan2: entered allmulticast mode [ 463.690660][T16690] bridge0: entered allmulticast mode [ 463.696174][T16690] bridge0: port 3(vlan2) entered blocking state [ 463.782180][T16690] bridge0: port 3(vlan2) entered disabled state [ 464.122879][T16704] loop2: detected capacity change from 0 to 7 [ 465.882335][T16727] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4280'. [ 465.942427][T16729] tipc: Enabling of bearer rejected, already enabled [ 466.122480][T16736] bridge3: entered promiscuous mode [ 466.127706][T16736] bridge3: entered allmulticast mode [ 468.001815][T16762] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4292'. [ 469.110027][T16779] bridge4: entered promiscuous mode [ 469.126520][T16779] bridge4: entered allmulticast mode [ 469.662303][ T6702] ================================================================== [ 469.670395][ T6702] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 469.677401][ T6702] [ 469.679698][ T6702] read-write to 0xffff888237c2a8a4 of 4 bytes by task 16449 on cpu 0: [ 469.687817][ T6702] wq_worker_running+0x9b/0x120 [ 469.692643][ T6702] synchronize_rcu_expedited+0x5f8/0x770 [ 469.698254][ T6702] synchronize_rcu+0x35/0x2e0 [ 469.702908][ T6702] try_check_zero+0x182/0x260 [ 469.707558][ T6702] process_srcu+0xd5/0xdc0 [ 469.711947][ T6702] process_scheduled_works+0x513/0xa10 [ 469.717380][ T6702] worker_thread+0x58a/0x780 [ 469.721942][ T6702] kthread+0x22a/0x280 [ 469.725980][ T6702] ret_from_fork+0x150/0x360 [ 469.730550][ T6702] ret_from_fork_asm+0x1a/0x30 [ 469.735285][ T6702] [ 469.737580][ T6702] read to 0xffff888237c2a8a4 of 4 bytes by task 6702 on cpu 1: [ 469.745093][ T6702] kick_pool+0x49/0x2d0 [ 469.749223][ T6702] __queue_work+0x896/0xaf0 [ 469.753702][ T6702] queue_work_on+0xa9/0x140 [ 469.758181][ T6702] process_srcu+0xa56/0xdc0 [ 469.762659][ T6702] process_scheduled_works+0x513/0xa10 [ 469.768092][ T6702] worker_thread+0x58a/0x780 [ 469.772656][ T6702] kthread+0x22a/0x280 [ 469.776694][ T6702] ret_from_fork+0x150/0x360 [ 469.781258][ T6702] ret_from_fork_asm+0x1a/0x30 [ 469.785993][ T6702] [ 469.788293][ T6702] value changed: 0x00000000 -> 0x00000001 [ 469.793976][ T6702] [ 469.796270][ T6702] Reported by Kernel Concurrency Sanitizer on: [ 469.802408][ T6702] CPU: 1 UID: 0 PID: 6702 Comm: kworker/1:6 Tainted: G W syzkaller #0 PREEMPT(full) [ 469.813312][ T6702] Tainted: [W]=WARN [ 469.817083][ T6702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.827111][ T6702] Workqueue: rcu_gp process_srcu [ 469.832026][ T6702] ==================================================================