last executing test programs: 7.077726563s ago: executing program 3 (id=1687): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ccc000/0x3000)=nil, &(0x7f0000f0f000/0x4000)=nil, &(0x7f0000f01000/0x3000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x323f, 0x1f480, 0x0, 0x398}) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x80c0, &(0x7f00000006c0)={[{@nodots}, {}, {@fat=@quiet}, {@dots}, {@fat=@flush}, {@nodots}, {@nodots}, {@nodots}, {}, {@nodots}]}, 0x1, 0x257, &(0x7f0000000300)="$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") syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x401c5820, 0x0) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0xc0800) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = io_uring_setup(0xad5, &(0x7f00000003c0)={0x0, 0xc45e, 0x8, 0x0, 0xffc}) close(r1) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x20) io_uring_enter(r0, 0x12a, 0x14, 0x17, 0x0, 0x0) 6.129790493s ago: executing program 3 (id=1693): r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = msgget$private(0x0, 0x421) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0) msgrcv(r3, &(0x7f00000012c0)={0x0, ""/4096}, 0x1008, 0x0, 0x0) msgsnd(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='1'], 0x8, 0x800) msgrcv(r3, &(0x7f0000000280)={0x0, ""/4092}, 0x1004, 0xbd8e6b799bcfd099, 0x2800) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000140)=""/189) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x800, 0x70bd28, 0x25dfdbfc, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x30}}, 0x4000) syz_clone3(&(0x7f0000000340)={0x41a0480, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.62890356s ago: executing program 3 (id=1696): syz_open_procfs$pagemap(0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) epoll_create1(0x0) shutdown(r1, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, 0x0, 0x0) 5.467873565s ago: executing program 3 (id=1697): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r4, 0x0, 0x200006, 0x0) splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x1) write(r1, &(0x7f0000000040), 0xffffff4a) 3.593713545s ago: executing program 2 (id=1712): ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x11) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {}, {}, {0xe, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) 3.587380575s ago: executing program 2 (id=1713): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000300)=ANY=[], 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000006d000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000000000000000018003480140035006970365f76746930"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.140249959s ago: executing program 2 (id=1715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 2.827645639s ago: executing program 0 (id=1721): socket$nl_route(0x10, 0x3, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r0 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000000c0)={0x1, 0x6}) clock_settime(0xfffffffb, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) set_mempolicy(0x6005, 0x0, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x2000, 0x400000000000005, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, 0x0) 2.79150288s ago: executing program 0 (id=1722): fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000300)={0x7, 0x1b, 0x2}, 0x7) ppoll(0x0, 0x0, &(0x7f0000002fc0)={0x7fffffffffffffff}, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) write$tun(r1, &(0x7f0000000840)=ANY=[], 0x11b0) 2.682594404s ago: executing program 1 (id=1726): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x1000000, &(0x7f0000000300)={[{@block={'block', 0x3d, 0x800}}, {@overriderock}, {@cruft}, {@map_off}, {@showassoc}, {@hide}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@unhide}]}, 0x1, 0x3ec, &(0x7f0000000440)="$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") prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x48) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0, 0x88, &(0x7f0000000540), 0x0, 0x10, &(0x7f0000000580), &(0x7f0000000680), 0x8, 0xad, 0x8, 0x8, &(0x7f00000000c0)}}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1.930995028s ago: executing program 0 (id=1730): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000002100)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket(0x2, 0x80805, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000100)={@remote, @remote, 0x0}, &(0x7f00000001c0)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@delchain={0x34, 0x65, 0x300, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x3, 0xfff1}, {0xe, 0x7}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0xffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x1ed5806dc21eaec7) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000700)={0x0, 0x9, 0x401, 0xff, 0x7, 0x9, 0x7, 0x8, {0x0, @in={{0x2, 0x4e21, @local}}, 0x1, 0x1, 0x5, 0x2e50, 0x12}}, &(0x7f00000007c0)=0xb0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 1.930733538s ago: executing program 2 (id=1731): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x5100, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x2, 0x4}, 0x102260, 0x10000, 0x4, 0x1, 0x8, 0x20005, 0xa48, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0x0, 0x200, 0x80100) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x10000) socket$nl_netfilter(0x10, 0x3, 0xc) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000080)={0x111000, 0x10a, 0x8}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRES32], 0x0, 0x2ff, &(0x7f0000000540)="$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") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 1.85855156s ago: executing program 2 (id=1732): sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x20000400) socket(0x28, 0x5, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.84895265s ago: executing program 4 (id=1733): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) setuid(0xee00) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, 0x0, 0x0, 0x4100, 0x0, 0x0) 1.703076855s ago: executing program 3 (id=1734): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000800)=""/212, 0x0, 0xd4, 0x1}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x9b, &(0x7f0000000580)}, 0x10) socketpair$unix(0x2f, 0x5, 0x0, &(0x7f00000029c0)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x100) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.701537665s ago: executing program 0 (id=1744): r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = msgget$private(0x0, 0x421) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0) msgrcv(r3, &(0x7f00000012c0)={0x0, ""/4096}, 0x1008, 0x0, 0x0) msgsnd(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='1'], 0x8, 0x800) msgrcv(r3, &(0x7f0000000280)={0x0, ""/4092}, 0x1004, 0xbd8e6b799bcfd099, 0x2800) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000140)=""/189) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x800, 0x70bd28, 0x25dfdbfc, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x30}}, 0x4000) syz_clone3(&(0x7f0000000340)={0x41a0480, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.588062689s ago: executing program 1 (id=1735): uname(&(0x7f0000001c40)=""/60) r0 = eventfd2(0x3, 0x1) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x2a, 0x0, 0x9, 0xb, 0x0, 0x5, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x5, 0x3}, 0x0, 0xa0, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) fcntl$lock(r0, 0x26, &(0x7f0000000140)={0x1, 0x0, 0x9, 0xb}) writev(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x10, &(0x7f0000000000)=0x82, 0x4) connect$inet6(r1, &(0x7f0000002500)={0xa, 0x4e23, 0xffe00000, @empty, 0x4000003}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000800, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f00000001c0)=0xfffffffe, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) 1.515958561s ago: executing program 1 (id=1736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x241, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.474373953s ago: executing program 1 (id=1737): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) r0 = syz_usb_connect$midi(0x5, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x82c}}]}) syz_usb_ep_read(r0, 0x0, 0xcf, &(0x7f00000007c0)=""/207) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x80000308) rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00') syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0x4, 0x0, 0x4}, 0x1c) 1.186290612s ago: executing program 0 (id=1738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a0001"], 0x50}}, 0x4000084) r2 = socket(0x10, 0x2, 0x0) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = epoll_create1(0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_pwait(r5, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.105749445s ago: executing program 2 (id=1739): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r1, &(0x7f0000000000)=@known='system.posix_acl_default\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 1.053430216s ago: executing program 3 (id=1740): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 962.162659ms ago: executing program 4 (id=1741): syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x5, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x2000002, 0x7, 0x0, &(0x7f00000004c0)="df034affffffff", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9d}, 0x50) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r0, 0x0, 0x0, 0x14, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0xdde0000, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x2000000000000216, &(0x7f00000000c0)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='gid_map\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0xfffffffffffffff9, 0x80000000000, 0x0, 0xfffffffffffff30a, 0x5}, &(0x7f0000000000)={0x1c, 0x26d7, 0x1000000000, 0x0, 0xfffffffffffffffc, 0x0, 0x6, 0x9}, 0x0, 0x0, 0x0) pread64(r2, &(0x7f0000000380)=""/185, 0xb9, 0x5) 926.656391ms ago: executing program 1 (id=1742): fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf08, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000300)={0x7, 0x1b, 0x2}, 0x7) ppoll(0x0, 0x0, &(0x7f0000002fc0)={0x7fffffffffffffff}, 0x0, 0x0) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) write$tun(r1, &(0x7f0000000840)=ANY=[], 0x11b0) 853.470463ms ago: executing program 4 (id=1743): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000000c0)={[{@barrier}, {@nogrpid}, {@quota}, {@nobh}]}, 0xff, 0x511, &(0x7f0000000ac0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x24020400) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000001840)={0x101, {{0x2, 0x4e22, @multicast2}}, 0x1}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000001c0)={0x6, "039ed6"}, 0x6) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) sendfile(0xffffffffffffffff, r1, &(0x7f0000000100)=0x10001, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x400ffffffffffe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0xa19a, 0x1008}, 0x100000, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r2 = mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0xec}) mq_timedsend(r2, 0x0, 0x0, 0x2, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 766.734376ms ago: executing program 0 (id=1745): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r2, 0x0, r4, 0x0, 0x200006, 0x0) splice(r3, 0x0, r2, 0x0, 0x7fffffffffffffff, 0x1) write(r1, &(0x7f0000000040), 0xffffff4a) 766.559456ms ago: executing program 4 (id=1746): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x6, 0x4) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) close(r4) recvmmsg(r3, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) clock_nanosleep(0x5, 0x1, &(0x7f00000001c0), &(0x7f0000000200)) write$binfmt_misc(r2, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 675.357698ms ago: executing program 1 (id=1747): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f0000001040)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', r5, 0x7, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @empty, @empty}}}}) 599.750551ms ago: executing program 32 (id=1747): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f0000001040)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', r5, 0x7, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @empty, @empty}}}}) 485.172605ms ago: executing program 4 (id=1749): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) close(r0) r1 = socket$l2tp(0x2, 0x2, 0x73) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000840)={[{@grpjquota_path={'grpjquota', 0x3d, './file2'}}], [{@appraise_type}]}, 0x3, 0x7b4, &(0x7f0000001740)="$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") close(0x3) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f0000000180)="d0849e", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x10000}, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x440e0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$eJzs27tvHEUcAODfrh8hL2xCeOQBGALC4mHHToAUFIBAogAJiSaUJnaiECdGsZFIhEhAKJQoEhUNokTiL6CCBgEVEi30CCmCNERUh/Z21/fIPYi584Xc90nrm9nHzczNzN3MjjeAoTWV/UkidkTELxExkUcbT5jKX65drVzId1Yqr/+RVM/76+p7x8pTy+u2F5HpNCL9KIl9LdJdPXf+1MLy8tLZIj67dvrt2dVz5588eXrhxNKJpTPzR44cPjT3zNPzT/WknHdked37/sr+PS+/cfnVY0cvv/nDV0lZ/qZy9MhUp4OPVCo9Tm6wdtaFk9EBZoQbMhIRWXWNVfv/RIxErfIm4qUPB5o5oK8qhTaHL1aAW1gS9bHxGFxOgM1V/tBn899y27zRx+BdeT6fAGXlvlZs+ZHRSCOfGGVzo37N1qci4ujFvz/PtujPfQgAgAbfZOOfJxrHf39Wj6Rxd915txdrQ5PFWsquiLgzInZHxF0R1XPviYh7m94/7ZJ+8yLJ9eOftK+rCdn479nq2lbz+G8955MjRWxnNTKWHD+5vHSw+EymY2xLFp/rkMa3L/78Sbtj9eO/bMvSL8eCRT5+H93SeM3iwtrCfylzvSsfROwdbVX+ZH0lIImIPRGxd4NpnHzsy/3tjjWXv5J0eqfnGqM9aBmVLyIezev/YjSVv5R0Xp+cvS2Wlw7Olq3iej/+dOm1dul3r//+yup/W8v2v17+yaR+vXb1xtO49OvHbec0Mxtq/7Ud48Xruwtra2fnIsaTV/JM1++fr11bxsvzs/JPH2jd/3dF7ZPYFxFZI74vIu6PiAeKunswIh6KiAMdyv/9Cw+/1e7YzVD/i031P9l4SlP91wLj0byndWDk1HdfN75jLfjvvv8OV0PTxZ5u339lm+iWr421ZgAAAPj/SSNiRyTpzHo4TWdm8v/h3x3b0uWV1bXHj6+8c2Yxf0ZgMsbS8k5Xfj84vx86V0zry/h8U/xQcd/405Gt1fjMsZXlxUEXHobc9jb9P/PbyKBzB/Sd57VgeOn/MLz0fxhe+j8Mrxb9f2uXS8b6lRdgc7X6/b9QC1YmNjMzwKZq6v+W/WCImP/D8NL/YXjV9/+Oz98Dt5LVrdH9IXkBgesCkd4U2ehNIKn1gs+iD0nsGHQBbzww6G8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vgnAAD//2Gb4I4=") bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 0s ago: executing program 4 (id=1750): r0 = gettid() process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r3 = msgget$private(0x0, 0x421) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x64, 0x3, 0x0, 0x1, [{0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPR={0x58, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x30, 0x3, "b08c674515113085726709225a7547b6f14c1aa7a7202afc0811618e3b5a514fb651ff7360e7749fe5bee390"}, @NFTA_TARGET_NAME={0x9, 0x1, 'SNAT\x00'}]}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x114}}, 0x0) msgrcv(r3, &(0x7f00000012c0)={0x0, ""/4096}, 0x1008, 0x0, 0x0) msgsnd(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='1'], 0x8, 0x800) msgrcv(r3, &(0x7f0000000280)={0x0, ""/4092}, 0x1004, 0xbd8e6b799bcfd099, 0x2800) msgctl$IPC_INFO(r3, 0x3, &(0x7f0000000140)=""/189) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x800, 0x70bd28, 0x25dfdbfc, {0x2, 0x18, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_FLAGS={0x8, 0x8, 0x400}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}]}, 0x30}}, 0x4000) syz_clone3(&(0x7f0000000340)={0x41a0480, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): T6169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.818919][ T6169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.838593][ T6169] bond0 (unregistering): Released all slaves [ 159.971666][ T6173] loop1: detected capacity change from 0 to 4096 [ 159.997188][ T6173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.056984][ T6176] lo speed is unknown, defaulting to 1000 [ 160.135280][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.431951][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.750805][ T6184] loop4: detected capacity change from 0 to 512 [ 160.913020][ T6184] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 160.923143][ T6184] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 161.000535][ T6184] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 161.098829][ T6184] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 161.436907][ T6184] System zones: 0-2, 18-18, 34-35 [ 161.478200][ T6197] netlink: 104 bytes leftover after parsing attributes in process `syz.1.849'. [ 161.489667][ T6184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.549908][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 161.549926][ T28] audit: type=1400 audit(1781583751.960:1103): avc: denied { write } for pid=6183 comm="syz.4.844" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 161.618876][ T6206] netlink: 56 bytes leftover after parsing attributes in process `syz.1.853'. [ 161.640390][ T6207] batadv0: entered promiscuous mode [ 161.646214][ T6207] macsec1: entered promiscuous mode [ 161.651863][ T6207] macsec1: entered allmulticast mode [ 161.657322][ T6207] batadv0: entered allmulticast mode [ 161.659149][ T6184] xt_TCPMSS: Only works on TCP SYN packets [ 161.664606][ T6207] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 161.698066][ T6209] netlink: 14 bytes leftover after parsing attributes in process `syz.2.854'. [ 161.715040][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.724226][ T6211] loop1: detected capacity change from 0 to 128 [ 161.745599][ T6209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.785961][ T6209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.812761][ T6209] bond0 (unregistering): Released all slaves [ 161.823960][ T6214] bio_check_eod: 4 callbacks suppressed [ 161.824016][ T6214] syz.1.855: attempt to access beyond end of device [ 161.824016][ T6214] loop1: rw=2049, sector=145, nr_sectors = 360 limit=128 [ 161.851591][ T6214] syz.1.855: attempt to access beyond end of device [ 161.851591][ T6214] loop1: rw=2049, sector=513, nr_sectors = 8 limit=128 [ 161.866488][ T6214] syz.1.855: attempt to access beyond end of device [ 161.866488][ T6214] loop1: rw=2049, sector=529, nr_sectors = 8 limit=128 [ 161.889100][ T6214] syz.1.855: attempt to access beyond end of device [ 161.889100][ T6214] loop1: rw=2049, sector=545, nr_sectors = 8 limit=128 [ 161.932640][ T6211] syz.1.855: attempt to access beyond end of device [ 161.932640][ T6211] loop1: rw=524288, sector=145, nr_sectors = 216 limit=128 [ 161.953935][ T6214] syz.1.855: attempt to access beyond end of device [ 161.953935][ T6214] loop1: rw=2049, sector=561, nr_sectors = 8 limit=128 [ 161.980420][ T6211] syz.1.855: attempt to access beyond end of device [ 161.980420][ T6211] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 162.005114][ T6214] syz.1.855: attempt to access beyond end of device [ 162.005114][ T6214] loop1: rw=2049, sector=577, nr_sectors = 8 limit=128 [ 162.041406][ T6221] syz.1.855: attempt to access beyond end of device [ 162.041406][ T6221] loop1: rw=0, sector=150, nr_sectors = 1 limit=128 [ 162.066312][ T6214] syz.1.855: attempt to access beyond end of device [ 162.066312][ T6214] loop1: rw=2049, sector=593, nr_sectors = 8 limit=128 [ 162.693844][ T6239] loop1: detected capacity change from 0 to 512 [ 162.822230][ T6244] netlink: 56 bytes leftover after parsing attributes in process `syz.0.867'. [ 162.835415][ T6246] netlink: 104 bytes leftover after parsing attributes in process `syz.4.864'. [ 162.867398][ T6239] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 162.906637][ T6239] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 162.988530][ T6239] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 163.019642][ T6239] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 163.030832][ T6239] System zones: 0-2, 18-18, 34-35 [ 163.065271][ T6239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.137163][ T28] audit: type=1400 audit(1781583753.540:1104): avc: denied { write } for pid=6237 comm="syz.1.866" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 163.209396][ T6239] xt_TCPMSS: Only works on TCP SYN packets [ 163.251574][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.300712][ T6262] loop4: detected capacity change from 0 to 128 [ 163.313115][ T6260] loop0: detected capacity change from 0 to 512 [ 163.342945][ T6260] EXT4-fs: Ignoring removed oldalloc option [ 163.372918][ T6260] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 163.418361][ T6260] EXT4-fs (loop0): orphan cleanup on readonly fs [ 163.431700][ T6264] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 163.461726][ T6260] EXT4-fs warning (device loop0): ext4_enable_quotas:7267: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 163.497994][ T6260] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 163.520824][ T6260] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #13: comm syz.0.873: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 163.539215][ T6260] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 163.539844][ T6262] Buffer I/O error on dev loop4, logical block 145, async page read [ 163.545676][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 163.565340][ C0] EXT4-fs (loop0): last error at time 1781583753: ext4_ext_check_inode:521: inode 13 [ 163.575966][ T6260] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.873: couldn't read orphan inode 13 (err -117) [ 163.588942][ T6260] loop0: lost filesystem error report for type 5 error -117 [ 163.590611][ T6260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.591005][ T6262] Buffer I/O error on dev loop4, logical block 146, async page read [ 163.637980][ T6272] loop1: detected capacity change from 0 to 512 [ 163.672865][ T6270] netlink: 'syz.1.872': attribute type 12 has an invalid length. [ 163.686581][ T6262] Buffer I/O error on dev loop4, logical block 147, async page read [ 163.698001][ T6270] netlink: 132 bytes leftover after parsing attributes in process `syz.1.872'. [ 163.725671][ T6273] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 163.741027][ T6273] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 163.750994][ T6272] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.872: inode has both inline data and extents flags [ 163.772777][ T6262] Buffer I/O error on dev loop4, logical block 148, async page read [ 163.781555][ T6272] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 163.784097][ T6272] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.872: couldn't read orphan inode 15 (err -117) [ 163.794882][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 163.794901][ C1] EXT4-fs (loop1): initial error at time 1781583754: ext4_orphan_get:1399: inode 15 [ 163.794937][ C1] EXT4-fs (loop1): last error at time 1781583754: ext4_orphan_get:1399: inode 15 [ 163.801935][ T6262] Buffer I/O error on dev loop4, logical block 149, async page read [ 163.825765][ T6272] loop1: lost filesystem error report for type 5 error -117 [ 163.841565][ T6262] Buffer I/O error on dev loop4, logical block 150, async page read [ 163.842596][ T6273] EXT4-fs warning (device loop0): ext4_enable_quotas:7267: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 163.850254][ T6272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.888341][ T6262] Buffer I/O error on dev loop4, logical block 151, async page read [ 163.913612][ T6262] Buffer I/O error on dev loop4, logical block 152, async page read [ 163.955567][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.026240][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.110113][ T6283] loop0: detected capacity change from 0 to 128 [ 164.175010][ T6285] syzkaller0: entered promiscuous mode [ 164.192687][ T6285] syzkaller0: entered allmulticast mode [ 164.273063][ T6289] netlink: 104 bytes leftover after parsing attributes in process `syz.2.879'. [ 164.567807][ T6300] loop4: detected capacity change from 0 to 4096 [ 164.603977][ T6300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.716219][ T6302] xt_TCPMSS: Only works on TCP SYN packets [ 164.772254][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.860378][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'. [ 164.914195][ T6310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.885'. [ 166.073848][ T6339] syzkaller0: entered promiscuous mode [ 166.094849][ T6339] syzkaller0: entered allmulticast mode [ 166.127732][ T6348] netlink: 9 bytes leftover after parsing attributes in process `syz.2.900'. [ 166.143667][ T6348] gretap0: entered promiscuous mode [ 166.156943][ T6348] 0ªî{X¹¦: renamed from gretap0 [ 166.197692][ T6348] 0ªî{X¹¦: left promiscuous mode [ 166.218589][ T6348] 0ªî{X¹¦: entered allmulticast mode [ 166.267219][ T6348] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 166.344318][ T6361] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 166.404071][ T6367] loop4: detected capacity change from 0 to 128 [ 166.424369][ T6361] loop3: detected capacity change from 0 to 512 [ 166.466865][ T6361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.486144][ T6361] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.523198][ T6361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.533491][ T6361] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 167.055944][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.114721][ T6377] loop0: detected capacity change from 0 to 512 [ 167.127243][ T6386] loop3: detected capacity change from 0 to 128 [ 167.147943][ T6377] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.174766][ T6377] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 167.199611][ T6377] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 167.215024][ T6377] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 167.233365][ T6377] System zones: 0-2, 18-18, 34-35 [ 167.274107][ T6377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.308992][ T6386] bio_check_eod: 1478 callbacks suppressed [ 167.309011][ T6386] syz.3.908: attempt to access beyond end of device [ 167.309011][ T6386] loop3: rw=2049, sector=145, nr_sectors = 360 limit=128 [ 167.337363][ T6377] xt_TCPMSS: Only works on TCP SYN packets [ 167.343328][ T28] audit: type=1400 audit(1781583757.750:1105): avc: denied { write } for pid=6376 comm="syz.0.919" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 167.368427][ T6386] syz.3.908: attempt to access beyond end of device [ 167.368427][ T6386] loop3: rw=2049, sector=513, nr_sectors = 8 limit=128 [ 167.368482][ T6386] syz.3.908: attempt to access beyond end of device [ 167.368482][ T6386] loop3: rw=2049, sector=529, nr_sectors = 8 limit=128 [ 167.418059][ T6386] syz.3.908: attempt to access beyond end of device [ 167.418059][ T6386] loop3: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 167.447911][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.464188][ T6386] syz.3.908: attempt to access beyond end of device [ 167.464188][ T6386] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 167.497672][ T6386] syz.3.908: attempt to access beyond end of device [ 167.497672][ T6386] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 167.521033][ T6386] syz.3.908: attempt to access beyond end of device [ 167.521033][ T6386] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 167.605732][ T6392] syz.3.908: attempt to access beyond end of device [ 167.605732][ T6392] loop3: rw=0, sector=150, nr_sectors = 1 limit=128 [ 167.642134][ T28] audit: type=1400 audit(1781583758.050:1106): avc: denied { setopt } for pid=6378 comm="syz.4.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 167.699994][ T6400] __nla_validate_parse: 3 callbacks suppressed [ 167.700061][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 167.981419][ T6414] loop1: detected capacity change from 0 to 128 [ 169.101792][ T6414] syz.1.920: attempt to access beyond end of device [ 169.101792][ T6414] loop1: rw=2049, sector=145, nr_sectors = 360 limit=128 [ 169.117065][ T6414] syz.1.920: attempt to access beyond end of device [ 169.117065][ T6414] loop1: rw=2049, sector=513, nr_sectors = 8 limit=128 [ 169.853187][ T6430] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 169.868194][ T6428] tipc: Started in network mode [ 169.894490][ T6428] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 169.913503][ T6431] loop1: detected capacity change from 0 to 512 [ 169.926911][ T6434] openvswitch: netlink: Message has 4 unknown bytes. [ 169.946346][ T6433] loop3: detected capacity change from 0 to 128 [ 169.962806][ T6428] tipc: Enabled bearer , priority 10 [ 169.979257][ T6431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.007655][ T6433] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.054574][ T6431] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.070927][ T6433] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 170.235437][ T6430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.244738][ T6430] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 170.465402][ T6446] loop0: detected capacity change from 0 to 512 [ 170.491094][ T6446] EXT4-fs: Ignoring removed mblk_io_submit option [ 170.514827][ T6446] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.941: inode has both inline data and extents flags [ 170.529433][ T6446] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 170.529653][ T6446] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.941: couldn't read orphan inode 15 (err -117) [ 170.539600][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 170.539628][ C0] EXT4-fs (loop0): initial error at time 1781583760: ext4_orphan_get:1399: inode 15 [ 170.539658][ C0] EXT4-fs (loop0): last error at time 1781583760: ext4_orphan_get:1399: inode 15 [ 170.585914][ T6446] loop0: lost filesystem error report for type 5 error -117 [ 170.586799][ T6446] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.802205][ T6460] batadv0: entered promiscuous mode [ 170.808703][ T6460] macsec1: entered promiscuous mode [ 170.814311][ T6460] macsec1: entered allmulticast mode [ 170.820474][ T6460] batadv0: entered allmulticast mode [ 170.828295][ T6460] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 170.834555][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.856428][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.901582][ T28] audit: type=1400 audit(1781583761.310:1107): avc: denied { watch watch_reads } for pid=6463 comm="syz.0.936" path="/211/file1" dev="tmpfs" ino=1118 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 170.926839][ T6464] loop0: detected capacity change from 0 to 512 [ 170.957282][ T11] tipc: Node number set to 8432298 [ 170.964966][ T6464] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 170.993049][ T6464] EXT4-fs: error: could not find journal device path [ 171.086488][ T6468] loop0: detected capacity change from 0 to 128 [ 171.254075][ T6468] Buffer I/O error on dev loop0, logical block 145, async page read [ 171.270414][ T6468] Buffer I/O error on dev loop0, logical block 146, async page read [ 171.279240][ T6468] Buffer I/O error on dev loop0, logical block 147, async page read [ 171.287830][ T6468] Buffer I/O error on dev loop0, logical block 148, async page read [ 171.296192][ T6468] Buffer I/O error on dev loop0, logical block 149, async page read [ 171.305080][ T6468] Buffer I/O error on dev loop0, logical block 150, async page read [ 171.314147][ T6468] Buffer I/O error on dev loop0, logical block 151, async page read [ 171.323926][ T6468] Buffer I/O error on dev loop0, logical block 152, async page read [ 171.570330][ T6475] syzkaller0: entered promiscuous mode [ 171.587520][ T6475] syzkaller0: entered allmulticast mode [ 172.024221][ T6489] netlink: 14 bytes leftover after parsing attributes in process `syz.3.947'. [ 172.100672][ T28] audit: type=1326 audit(1781583762.510:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd44cce59 code=0x7ffc0000 [ 172.149798][ T28] audit: type=1326 audit(1781583762.510:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd44cce59 code=0x7ffc0000 [ 172.183689][ T28] audit: type=1326 audit(1781583762.540:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd44cce59 code=0x7ffc0000 [ 172.263245][ T28] audit: type=1326 audit(1781583762.540:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd44cce59 code=0x7ffc0000 [ 172.313297][ T28] audit: type=1326 audit(1781583762.540:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd44cce59 code=0x7ffc0000 [ 172.360919][ T6489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.366562][ T28] audit: type=1326 audit(1781583762.540:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3bd44cce59 code=0x7ffc0000 [ 172.427866][ T6489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.431874][ T28] audit: type=1326 audit(1781583762.600:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd44cce59 code=0x7ffc0000 [ 172.479576][ T6489] bond0 (unregistering): Released all slaves [ 172.495910][ T28] audit: type=1326 audit(1781583762.600:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd44cce59 code=0x7ffc0000 [ 172.528430][ T28] audit: type=1326 audit(1781583762.600:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3bd44cce59 code=0x7ffc0000 [ 172.561795][ T28] audit: type=1326 audit(1781583762.630:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd44cce59 code=0x7ffc0000 [ 172.604206][ T6498] loop4: detected capacity change from 0 to 256 [ 172.615000][ T6497] lo speed is unknown, defaulting to 1000 [ 172.624123][ T6498] vfat: Unknown parameter '0xffffffffffffffffÿÿÿÿÿÿÿÿÿÿ18446744073709551615ÿÿÿÿÿÿÿÿ' [ 172.634549][ T1899] bond1: (slave vlan2): link status definitely down, disabling slave [ 172.634701][ T1899] bond1: now running without any active interface! [ 172.671230][ T28] audit: type=1326 audit(1781583762.630:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd44cce59 code=0x7ffc0000 [ 172.765204][ T6500] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 172.796242][ T28] audit: type=1326 audit(1781583762.630:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3bd448d68e code=0x7ffc0000 [ 172.877157][ T28] audit: type=1326 audit(1781583762.640:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3bd448d68e code=0x7ffc0000 [ 172.904517][ T28] audit: type=1326 audit(1781583762.640:1121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3bd448d68e code=0x7ffc0000 [ 172.959022][ T28] audit: type=1326 audit(1781583762.640:1122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6484 comm="syz.2.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3bd448d68e code=0x7ffc0000 [ 173.019859][ T6508] loop0: detected capacity change from 0 to 512 [ 173.075312][ T6508] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.951: inode has both inline data and extents flags [ 173.171757][ T6507] netlink: 'syz.0.951': attribute type 12 has an invalid length. [ 173.217921][ T6507] netlink: 132 bytes leftover after parsing attributes in process `syz.0.951'. [ 173.264288][ T6508] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 173.265327][ T6508] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.951: couldn't read orphan inode 15 (err -117) [ 173.274953][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 173.274979][ C0] EXT4-fs (loop0): initial error at time 1781583763: ext4_orphan_get:1399: inode 15 [ 173.275020][ C0] EXT4-fs (loop0): last error at time 1781583763: ext4_orphan_get:1399: inode 15 [ 173.333633][ T6508] loop0: lost filesystem error report for type 5 error -117 [ 173.334320][ T6508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.428612][ T6521] loop1: detected capacity change from 0 to 128 [ 173.463896][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.550433][ T6521] bio_check_eod: 1908 callbacks suppressed [ 173.550456][ T6521] syz.1.956: attempt to access beyond end of device [ 173.550456][ T6521] loop1: rw=2049, sector=145, nr_sectors = 360 limit=128 [ 173.574695][ T6521] syz.1.956: attempt to access beyond end of device [ 173.574695][ T6521] loop1: rw=2049, sector=513, nr_sectors = 8 limit=128 [ 173.592421][ T6521] syz.1.956: attempt to access beyond end of device [ 173.592421][ T6521] loop1: rw=2049, sector=529, nr_sectors = 8 limit=128 [ 173.608613][ T6521] syz.1.956: attempt to access beyond end of device [ 173.608613][ T6521] loop1: rw=2049, sector=545, nr_sectors = 8 limit=128 [ 173.624637][ T6521] syz.1.956: attempt to access beyond end of device [ 173.624637][ T6521] loop1: rw=2049, sector=561, nr_sectors = 8 limit=128 [ 173.641486][ T6521] syz.1.956: attempt to access beyond end of device [ 173.641486][ T6521] loop1: rw=2049, sector=577, nr_sectors = 8 limit=128 [ 173.649579][ T6525] syz.1.956: attempt to access beyond end of device [ 173.649579][ T6525] loop1: rw=524288, sector=145, nr_sectors = 216 limit=128 [ 173.659320][ T6521] syz.1.956: attempt to access beyond end of device [ 173.659320][ T6521] loop1: rw=2049, sector=593, nr_sectors = 8 limit=128 [ 173.682802][ T6525] syz.1.956: attempt to access beyond end of device [ 173.682802][ T6525] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 173.706197][ T6521] syz.1.956: attempt to access beyond end of device [ 173.706197][ T6521] loop1: rw=2049, sector=609, nr_sectors = 8 limit=128 [ 173.748872][ T6525] Buffer I/O error on dev loop1, logical block 145, async page read [ 173.760697][ T6525] Buffer I/O error on dev loop1, logical block 146, async page read [ 174.008832][ T6537] loop4: detected capacity change from 0 to 512 [ 174.073620][ T6537] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.134180][ T6537] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.152934][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 174.500463][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.680704][ T6549] loop1: detected capacity change from 0 to 128 [ 174.698675][ T6554] macsec0: entered promiscuous mode [ 174.711970][ T6549] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.717509][ T6555] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 174.735990][ T6549] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.746915][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.967'. [ 174.772810][ T6556] loop0: detected capacity change from 0 to 512 [ 174.780749][ T6554] veth1_macvtap: left promiscuous mode [ 174.808330][ T6554] macsec0 (unregistering): left promiscuous mode [ 174.957753][ T6556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.975224][ T6556] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.087424][ T6555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.099647][ T6555] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 175.398468][ T6578] loop3: detected capacity change from 0 to 512 [ 175.411537][ T6578] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 175.453367][ T6578] EXT4-fs: error: could not find journal device path [ 175.644850][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.680469][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 175.716254][ T6594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.985'. [ 175.789790][ T6594] vlan2: entered promiscuous mode [ 175.798252][ T6594] bridge1: entered promiscuous mode [ 175.881162][ T6594] vlan2: entered allmulticast mode [ 175.894034][ T6594] bridge1: entered allmulticast mode [ 176.063987][ T6602] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 176.100735][ T6609] netlink: 'syz.3.990': attribute type 11 has an invalid length. [ 176.117606][ T6609] netlink: 36 bytes leftover after parsing attributes in process `syz.3.990'. [ 176.171165][ T6612] loop4: detected capacity change from 0 to 512 [ 176.211656][ T6612] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.988: inode has both inline data and extents flags [ 176.244916][ T6612] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 176.245668][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 176.266286][ C1] EXT4-fs (loop4): initial error at time 1781583766: ext4_orphan_get:1399: inode 15 [ 176.277132][ C1] EXT4-fs (loop4): last error at time 1781583766: ext4_orphan_get:1399: inode 15 [ 176.287788][ T6612] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.988: couldn't read orphan inode 15 (err -117) [ 176.316508][ T6612] loop4: lost filesystem error report for type 5 error -117 [ 176.317185][ T6612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.502034][ T6610] netlink: 'syz.4.988': attribute type 12 has an invalid length. [ 176.552097][ T6610] netlink: 132 bytes leftover after parsing attributes in process `syz.4.988'. [ 176.557885][ T6616] loop1: detected capacity change from 0 to 512 [ 176.586040][ T6616] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 176.659154][ T6616] EXT4-fs: error: could not find journal device path [ 176.704449][ T6618] loop0: detected capacity change from 0 to 512 [ 176.773888][ T6618] EXT4-fs: Ignoring removed bh option [ 176.774360][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.823877][ T6622] tipc: Enabled bearer , priority 10 [ 176.837343][ T6622] openvswitch: netlink: Message has 4 unknown bytes. [ 176.840099][ T6618] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 176.944127][ T6627] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 176.976060][ T6618] EXT4-fs (loop0): 1 truncate cleaned up [ 177.059125][ T6626] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.062940][ T6618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.098533][ T6626] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 177.159022][ T6626] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 177.180654][ T6626] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 177.228251][ T6627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 177.277326][ T6627] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.290846][ T6626] System zones: 0-2, 18-18, 34-35 [ 177.306749][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.396069][ T6626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.415537][ T6638] netlink: 'syz.0.998': attribute type 1 has an invalid length. [ 177.548250][ T6627] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.564465][ T6626] xt_TCPMSS: Only works on TCP SYN packets [ 177.581288][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 177.581308][ T28] audit: type=1400 audit(1781583767.980:1185): avc: denied { write } for pid=6625 comm="syz.3.995" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 177.672953][ T6627] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 177.704726][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.541250][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.635810][ T28] audit: type=1400 audit(1781583768.970:1186): avc: denied { write } for pid=6648 comm="syz.1.1002" path="socket:[15061]" dev="sockfs" ino=15061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 179.422204][ T6671] netlink: 'syz.1.1009': attribute type 12 has an invalid length. [ 179.455331][ T6671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'. [ 180.010595][ T6679] macsec0: entered promiscuous mode [ 180.041855][ T6679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'. [ 180.057452][ T6681] tipc: Enabled bearer , priority 10 [ 180.073422][ T6681] openvswitch: netlink: Message has 4 unknown bytes. [ 180.082513][ T6679] veth1_macvtap: left promiscuous mode [ 180.105380][ T6679] macsec0 (unregistering): left promiscuous mode [ 180.137678][ T6686] : port 1(ip6gretap0) entered blocking state [ 180.148182][ T6686] : port 1(ip6gretap0) entered disabled state [ 180.157945][ T6686] ip6gretap0: entered allmulticast mode [ 180.164910][ T6686] ip6gretap0: entered promiscuous mode [ 180.179677][ T6686] ip6gretap0: left allmulticast mode [ 180.187299][ T6686] ip6gretap0: left promiscuous mode [ 180.234773][ T6686] : port 1(ip6gretap0) entered disabled state [ 180.469062][ T6697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1018'. [ 181.871321][ T6700] set_capacity_and_notify: 2 callbacks suppressed [ 181.871381][ T6700] loop0: detected capacity change from 0 to 128 [ 181.937230][ T6702] loop1: detected capacity change from 0 to 128 [ 181.985221][ T6702] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.020733][ T6702] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.060259][ T6702] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.793680][ T6713] loop0: detected capacity change from 0 to 128 [ 182.825663][ T6711] loop1: detected capacity change from 0 to 512 [ 182.829732][ T6715] macsec0: entered promiscuous mode [ 182.845277][ T6713] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.861300][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1026'. [ 182.890982][ T6713] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.916872][ T6715] macsec0 (unregistering): left promiscuous mode [ 183.074780][ T6722] openvswitch: netlink: Message has 4 unknown bytes. [ 183.216584][ T6721] tipc: Started in network mode [ 183.222194][ T6721] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 183.230615][ T6721] tipc: Enabled bearer , priority 10 [ 183.397131][ T6733] loop0: detected capacity change from 0 to 128 [ 183.424752][ T6733] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.455979][ T6733] ext4 filesystem being mounted at /229/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.510416][ T6733] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.524330][ T6747] loop3: detected capacity change from 0 to 256 [ 183.547329][ T6747] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 183.597238][ T6747] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 183.682751][ T28] audit: type=1400 audit(1781583774.090:1187): avc: denied { create } for pid=6750 comm="syz.3.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 183.709000][ T6751] rdma_rxe: rxe_newlink: failed to add lo [ 183.721012][ T6749] syzkaller0: entered promiscuous mode [ 183.730029][ T6749] syzkaller0: entered allmulticast mode [ 183.736109][ T28] audit: type=1400 audit(1781583774.120:1188): avc: denied { write } for pid=6750 comm="syz.3.1034" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 183.747810][ T6751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.785233][ T6751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.818641][ T6751] smc: removing ib device sz1 [ 184.347127][ T3408] tipc: Node number set to 8432298 [ 184.588544][ T6758] loop4: detected capacity change from 0 to 128 [ 184.602117][ T6756] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 184.645540][ T6756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.813660][ T6764] loop3: detected capacity change from 0 to 512 [ 184.908625][ T6767] loop3: detected capacity change from 0 to 128 [ 184.999441][ T6772] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 185.056516][ T6767] bio_check_eod: 286 callbacks suppressed [ 185.056606][ T6767] syz.3.1039: attempt to access beyond end of device [ 185.056606][ T6767] loop3: rw=2049, sector=145, nr_sectors = 360 limit=128 [ 185.077480][ T6767] syz.3.1039: attempt to access beyond end of device [ 185.077480][ T6767] loop3: rw=2049, sector=513, nr_sectors = 8 limit=128 [ 185.093652][ T6767] syz.3.1039: attempt to access beyond end of device [ 185.093652][ T6767] loop3: rw=2049, sector=529, nr_sectors = 8 limit=128 [ 185.096595][ T6774] openvswitch: netlink: Message has 4 unknown bytes. [ 185.111231][ T6770] tipc: Enabling of bearer rejected, already enabled [ 185.128654][ T6767] syz.3.1039: attempt to access beyond end of device [ 185.128654][ T6767] loop3: rw=2049, sector=545, nr_sectors = 8 limit=128 [ 185.144029][ T6773] netlink: 'syz.2.1040': attribute type 12 has an invalid length. [ 185.152962][ T6773] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1040'. [ 185.153062][ T6767] syz.3.1039: attempt to access beyond end of device [ 185.153062][ T6767] loop3: rw=2049, sector=561, nr_sectors = 8 limit=128 [ 185.185264][ T6769] syz.3.1039: attempt to access beyond end of device [ 185.185264][ T6769] loop3: rw=524288, sector=145, nr_sectors = 216 limit=128 [ 185.200292][ T6767] syz.3.1039: attempt to access beyond end of device [ 185.200292][ T6767] loop3: rw=2049, sector=577, nr_sectors = 8 limit=128 [ 185.214438][ T6769] syz.3.1039: attempt to access beyond end of device [ 185.214438][ T6769] loop3: rw=0, sector=145, nr_sectors = 8 limit=128 [ 185.243296][ T6767] syz.3.1039: attempt to access beyond end of device [ 185.243296][ T6767] loop3: rw=2049, sector=593, nr_sectors = 8 limit=128 [ 185.250687][ T6777] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1042'. [ 185.274282][ T6767] syz.3.1039: attempt to access beyond end of device [ 185.274282][ T6767] loop3: rw=2049, sector=609, nr_sectors = 8 limit=128 [ 185.291400][ T6777] gretap0: entered promiscuous mode [ 185.336242][ T6777] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1042'. [ 185.348473][ T6777] 0ªî{X¹¦: renamed from gretap0 [ 185.363598][ T6777] 0ªî{X¹¦: left promiscuous mode [ 185.368797][ T6777] 0ªî{X¹¦: entered allmulticast mode [ 185.378674][ T6777] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 185.424797][ T6778] loop1: detected capacity change from 0 to 1024 [ 185.435210][ T6778] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 185.448156][ T6778] System zones: 0-1, 3-36 [ 185.453842][ T6778] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.1042: bad orphan inode 134217728 [ 185.465296][ T6778] loop1: lost filesystem error report for type 5 error -117 [ 185.466050][ T6778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.512975][ T6784] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 185.536212][ T6784] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 185.561595][ T6786] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1044'. [ 185.607443][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.815704][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 185.837311][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1059'. [ 186.483696][ T6812] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1057'. [ 186.636762][ T6817] tipc: Enabling of bearer rejected, already enabled [ 186.668970][ T6817] openvswitch: netlink: Message has 4 unknown bytes. [ 186.754348][ T6820] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1061'. [ 186.881957][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 186.899046][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1062'. [ 186.967451][ T6825] set_capacity_and_notify: 2 callbacks suppressed [ 186.967537][ T6825] loop0: detected capacity change from 0 to 764 [ 187.266714][ T6830] tipc: Enabling of bearer rejected, already enabled [ 187.290999][ T6830] openvswitch: netlink: Message has 4 unknown bytes. [ 187.376983][ T6835] vlan0: entered promiscuous mode [ 187.386015][ T6835] bridge2: entered promiscuous mode [ 187.406497][ T6835] vlan0: entered allmulticast mode [ 187.411789][ T6835] bridge2: entered allmulticast mode [ 187.521170][ T6832] Process accounting resumed [ 187.672095][ T28] audit: type=1400 audit(1781583778.080:1189): avc: denied { append } for pid=6850 comm="syz.3.1073" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 187.727172][ T28] audit: type=1400 audit(1781583778.080:1190): avc: denied { open } for pid=6850 comm="syz.3.1073" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 187.776886][ T6849] xt_TCPMSS: Only works on TCP SYN packets [ 188.267734][ T6882] loop0: detected capacity change from 0 to 1024 [ 188.300989][ T6882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.701246][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.751107][ T6890] loop3: detected capacity change from 0 to 128 [ 188.928778][ T6896] netlink: 'syz.4.1088': attribute type 11 has an invalid length. [ 189.998100][ T6925] lo speed is unknown, defaulting to 1000 [ 190.004619][ T6925] lo speed is unknown, defaulting to 1000 [ 190.012166][ T6925] lo speed is unknown, defaulting to 1000 [ 190.023664][ T6920] loop4: detected capacity change from 0 to 1024 [ 190.050087][ T6927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.094530][ T6920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.129728][ T6927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.239538][ T3513] lo speed is unknown, defaulting to 1000 [ 190.246952][ T6925] infiniband sz1: set active [ 190.294446][ T6925] infiniband sz1: added lo [ 190.437593][ T6925] RDS/IB: sz1: added [ 190.473169][ T6925] smc: adding ib device sz1 with port count 1 [ 190.543751][ T6925] smc: ib device sz1 port 1 has no pnetid [ 190.613624][ T3513] lo speed is unknown, defaulting to 1000 [ 190.662654][ T6925] lo speed is unknown, defaulting to 1000 [ 191.107780][ T6925] lo speed is unknown, defaulting to 1000 [ 191.207890][ T6925] lo speed is unknown, defaulting to 1000 [ 191.333211][ T6925] lo speed is unknown, defaulting to 1000 [ 191.353700][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.417797][ T6936] __nla_validate_parse: 5 callbacks suppressed [ 191.417910][ T6936] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1110'. [ 191.458924][ T6937] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1110'. [ 191.469332][ T6937] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 191.481161][ T6937] 0ªî{X¹¦: entered allmulticast mode [ 191.487303][ T6937] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 191.523982][ T6936] 0ªî{X¹¦: entered promiscuous mode [ 191.530992][ T6936] 0ªî{X¹¦: left allmulticast mode [ 191.548798][ T6925] lo speed is unknown, defaulting to 1000 [ 191.599610][ T6936] loop0: detected capacity change from 0 to 1024 [ 191.709697][ T6936] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 191.738658][ T6936] System zones: 0-1, 3-36 [ 191.766179][ T6936] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.1110: bad orphan inode 134217728 [ 191.784323][ T6936] loop0: lost filesystem error report for type 5 error -117 [ 191.784934][ T6936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.062556][ T6947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.072134][ T6947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.116071][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.128477][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1102'. [ 194.608564][ T6974] batman_adv: batadv0: Adding interface: macvtap2 [ 194.635964][ T6974] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.673433][ T6974] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 195.562268][ T6982] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.598572][ T6982] tipc: Resetting bearer [ 195.622631][ T6982] bridge1: port 1(veth0_to_bond) entered disabled state [ 195.660255][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.679424][ T6982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.746306][ T6982] batadv0: left allmulticast mode [ 195.761211][ T3646] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.770364][ T3646] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.782163][ T3646] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.791740][ T3646] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.631636][ T7003] SET target dimension over the limit! [ 199.157702][ T7014] loop1: detected capacity change from 0 to 2048 [ 199.188583][ T7027] loop0: detected capacity change from 0 to 128 [ 199.207875][ T7014] EXT4-fs: Ignoring removed nomblk_io_submit option [ 199.218844][ T7027] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 199.278390][ T7014] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.300112][ T7027] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 199.345174][ T28] audit: type=1400 audit(1781583789.750:1191): avc: denied { write } for pid=7013 comm="syz.1.1138" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.401014][ T7036] IPVS: persistence engine module ip_vs_pe_€ not found [ 199.665526][ T7014] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1138: bg 0: block 2: invalid block bitmap [ 199.681258][ T7014] EXT4-fs (loop1): Remounting filesystem read-only [ 199.747246][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.482453][ T7060] syzkaller0: entered promiscuous mode [ 200.488235][ T7060] syzkaller0: entered allmulticast mode [ 200.910921][ T7069] loop0: detected capacity change from 0 to 128 [ 201.120593][ T7069] FAT-fs (loop0): Directory bread(block 524322) failed [ 201.139304][ T7069] FAT-fs (loop0): Directory bread(block 524323) failed [ 201.875445][ T7069] FAT-fs (loop0): Directory bread(block 524324) failed [ 201.892750][ T7069] FAT-fs (loop0): Directory bread(block 524325) failed [ 201.911099][ T7069] FAT-fs (loop0): Directory bread(block 524326) failed [ 202.106559][ T7069] FAT-fs (loop0): Directory bread(block 524327) failed [ 202.121490][ T7069] FAT-fs (loop0): Directory bread(block 524328) failed [ 202.142699][ T7069] FAT-fs (loop0): Directory bread(block 524329) failed [ 204.112789][ T7069] FAT-fs (loop0): FAT read failed (blocknr 128) [ 204.131922][ T7081] loop1: detected capacity change from 0 to 128 [ 204.184661][ T7081] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 204.248992][ T7081] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 204.290105][ T7088] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1152'. [ 204.323163][ T7088] gretap0: entered promiscuous mode [ 204.358064][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1153'. [ 204.369065][ T7090] tipc: Enabling of bearer rejected, failed to enable media [ 204.370944][ T7088] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1152'. [ 204.430585][ T7092] loop3: detected capacity change from 0 to 1024 [ 204.447532][ T7088] 0ªî{X¹¦: renamed from gretap0 [ 204.470655][ T7092] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 204.484190][ T7088] 0ªî{X¹¦: left promiscuous mode [ 204.489305][ T7088] 0ªî{X¹¦: entered allmulticast mode [ 204.490706][ T7092] System zones: 0-1, 3-36 [ 204.506874][ T7088] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 204.515567][ T7092] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1152: bad orphan inode 134217728 [ 204.534722][ T7092] loop3: lost filesystem error report for type 5 error -117 [ 204.536049][ T7092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.584918][ T7099] syzkaller0: entered promiscuous mode [ 204.595699][ T7099] syzkaller0: entered allmulticast mode [ 204.619292][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.696470][ T7105] loop3: detected capacity change from 0 to 128 [ 204.813992][ T7109] loop4: detected capacity change from 0 to 2048 [ 204.850029][ T7109] EXT4-fs: Ignoring removed nomblk_io_submit option [ 205.075477][ T7109] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.100799][ T28] audit: type=1400 audit(1781583795.510:1192): avc: denied { write } for pid=7108 comm="syz.4.1159" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.415464][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.162447][ T7130] can: request_module (can-proto-3) failed. [ 207.049259][ T7137] syzkaller0: entered promiscuous mode [ 207.054831][ T7137] syzkaller0: entered allmulticast mode [ 207.081983][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1165'. [ 207.121970][ T7139] tipc: Enabling of bearer rejected, failed to enable media [ 207.291135][ T7150] loop3: detected capacity change from 0 to 512 [ 207.312798][ T7150] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1173: bad orphan inode 13 [ 207.351513][ T7150] loop3: lost filesystem error report for type 5 error -117 [ 207.353387][ T7150] ext4_test_bit(bit=12, block=4) = 1 [ 207.360893][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 207.360911][ C1] EXT4-fs (loop3): initial error at time 1781583797: ext4_orphan_get:1425 [ 207.360935][ C1] EXT4-fs (loop3): last error at time 1781583797: ext4_orphan_get:1425 [ 207.479434][ T7150] is_bad_inode(inode)=0 [ 207.497030][ T7150] NEXT_ORPHAN(inode)=0 [ 207.501788][ T7150] max_ino=32 [ 207.505060][ T7150] i_nlink=1 [ 207.508906][ T7150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.656354][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.949628][ T7162] syzkaller0: entered promiscuous mode [ 207.959063][ T7162] syzkaller0: entered allmulticast mode [ 208.202670][ T7164] loop3: detected capacity change from 0 to 8192 [ 208.300666][ T7165] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 208.324394][ T7165] FAT-fs (loop3): Filesystem has been set read-only [ 208.458668][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1180'. [ 208.650017][ T7169] bond2: entered promiscuous mode [ 208.661977][ T7169] bond2: entered allmulticast mode [ 209.238304][ T7179] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1194'. [ 209.262935][ T7183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1183'. [ 209.273478][ T7179] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7179 comm=syz.4.1194 [ 209.291871][ T7183] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 209.302815][ T7183] tipc: Enabled bearer , priority 10 [ 209.390303][ T7189] can: request_module (can-proto-3) failed. [ 209.404869][ T7192] loop4: detected capacity change from 0 to 512 [ 209.535017][ T7197] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1188'. [ 209.566905][ T7192] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1186: bad orphan inode 13 [ 209.577182][ T7192] loop4: lost filesystem error report for type 5 error -117 [ 209.577390][ T7192] ext4_test_bit(bit=12, block=4) = 1 [ 209.590163][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 209.590199][ C0] EXT4-fs (loop4): initial error at time 1781583799: ext4_orphan_get:1425 [ 209.590238][ C0] EXT4-fs (loop4): last error at time 1781583799: ext4_orphan_get:1425 [ 209.614087][ T7192] is_bad_inode(inode)=0 [ 209.618507][ T7192] NEXT_ORPHAN(inode)=0 [ 209.623627][ T7192] max_ino=32 [ 209.627108][ T7192] i_nlink=1 [ 209.631408][ T7192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.676299][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.720178][ T7204] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1189'. [ 210.771380][ T7204] gretap0: entered promiscuous mode [ 210.804713][ T7204] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1189'. [ 210.820156][ T7204] 0ªî{X¹¦: renamed from gretap0 [ 210.847270][ T7204] 0ªî{X¹¦: left promiscuous mode [ 210.852365][ T7204] 0ªî{X¹¦: entered allmulticast mode [ 211.758354][ T7204] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 211.785585][ T7204] loop4: detected capacity change from 0 to 1024 [ 211.842682][ T7204] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 211.859029][ T7220] syzkaller0: entered promiscuous mode [ 211.873466][ T7220] syzkaller0: entered allmulticast mode [ 211.882471][ T7204] System zones: 0-1, 3-36 [ 211.921339][ T7204] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.1189: bad orphan inode 134217728 [ 211.956726][ T7204] loop4: lost filesystem error report for type 5 error -117 [ 212.248915][ T7204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.561870][ T7232] syzkaller0: entered promiscuous mode [ 212.567653][ T7232] syzkaller0: entered allmulticast mode [ 212.594634][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.678887][ T7240] syzkaller0: entered promiscuous mode [ 212.684459][ T7240] syzkaller0: entered allmulticast mode [ 213.044347][ T7247] netlink: 'syz.0.1205': attribute type 1 has an invalid length. [ 213.137528][ T7249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=7249 comm=syz.0.1205 [ 213.223278][ T7247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.252396][ T7247] bond0: (slave geneve2): making interface the new active one [ 213.271765][ T7247] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 213.482412][ T28] audit: type=1400 audit(1781583803.890:1193): avc: denied { read } for pid=7259 comm="syz.4.1210" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 213.637212][ T7268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1214'. [ 213.690506][ T7268] bond3: entered promiscuous mode [ 213.708483][ T7268] bond3: entered allmulticast mode [ 213.715510][ T7271] netlink: 'syz.1.1215': attribute type 6 has an invalid length. [ 213.757301][ T7273] syzkaller0: entered promiscuous mode [ 213.788383][ T7273] syzkaller0: entered allmulticast mode [ 213.802999][ T7275] netlink: 'syz.4.1217': attribute type 1 has an invalid length. [ 213.868979][ T7275] 8021q: adding VLAN 0 to HW filter on device bond4 [ 213.945464][ T7275] vlan3: entered allmulticast mode [ 213.973387][ T7275] bond4: entered allmulticast mode [ 214.019373][ T7282] bond4: (slave geneve2): making interface the new active one [ 214.026955][ T7282] geneve2: entered allmulticast mode [ 214.033817][ T7282] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 214.168371][ T3671] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.226696][ T3671] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.261948][ T3671] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.313026][ T3671] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.019279][ T28] audit: type=1326 audit(1781583805.430:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz.4.1222" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c2ace59 code=0x7ffc0000 [ 215.081407][ T28] audit: type=1326 audit(1781583805.430:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz.4.1222" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c2ace59 code=0x7ffc0000 [ 215.130637][ T28] audit: type=1326 audit(1781583805.430:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz.4.1222" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c2ace59 code=0x7ffc0000 [ 215.176274][ T7295] syz_tun: entered allmulticast mode [ 215.188834][ T28] audit: type=1326 audit(1781583805.430:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz.4.1222" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5c5c2ace59 code=0x7ffc0000 [ 215.262184][ T28] audit: type=1326 audit(1781583805.430:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz.4.1222" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c2ace59 code=0x7ffc0000 [ 215.345967][ T28] audit: type=1326 audit(1781583805.430:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz.4.1222" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c2ace59 code=0x7ffc0000 [ 215.378998][ T7305] syzkaller0: entered promiscuous mode [ 215.397956][ T7305] syzkaller0: entered allmulticast mode [ 215.414878][ T28] audit: type=1326 audit(1781583805.430:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz.4.1222" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c2ace59 code=0x7ffc0000 [ 215.475640][ T28] audit: type=1326 audit(1781583805.430:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz.4.1222" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f5c5c2ace59 code=0x7ffc0000 [ 215.512874][ T7308] loop0: detected capacity change from 0 to 512 [ 215.555918][ T28] audit: type=1326 audit(1781583805.430:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7289 comm="syz.4.1222" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c5c2ace59 code=0x7ffc0000 [ 215.646106][ T7308] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 215.700572][ T7308] EXT4-fs (loop0): SIPHASH is not a valid default hash value [ 215.778133][ T7318] syzkaller0: entered promiscuous mode [ 215.804285][ T7318] syzkaller0: entered allmulticast mode [ 215.935144][ T7328] syzkaller0: entered promiscuous mode [ 215.955445][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1238'. [ 215.977648][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1238'. [ 216.039277][ T7333] syzkaller0: entered promiscuous mode [ 216.055838][ T7333] syzkaller0: entered allmulticast mode [ 216.221543][ T7342] loop0: detected capacity change from 0 to 2048 [ 216.293796][ T7342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.303256][ T7347] syzkaller0: entered promiscuous mode [ 216.312538][ T7347] syzkaller0: entered allmulticast mode [ 216.331479][ T7342] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz.0.1245: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 216.460802][ T7357] EXT4-fs error (device loop0): ext4_ext_precache:631: inode #2: comm syz.0.1245: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 216.534527][ T7342] EXT4-fs (loop0): Remounting filesystem read-only [ 216.577778][ T7357] EXT4-fs (loop0): Remounting filesystem read-only [ 217.300899][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.606357][ T7361] Process accounting paused [ 217.752410][ T7376] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 217.883933][ T7376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.226371][ T7399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1263'. [ 218.249650][ T7399] vlan4: entered allmulticast mode [ 218.254916][ T7399] bridge3: entered allmulticast mode [ 218.262973][ T7399] bridge3: port 1(erspan0) entered blocking state [ 218.270819][ T7399] bridge3: port 1(erspan0) entered disabled state [ 218.277575][ T7399] erspan0: entered allmulticast mode [ 218.286994][ T7399] erspan0: entered promiscuous mode [ 218.400278][ T7405] netlink: 'syz.4.1265': attribute type 49 has an invalid length. [ 218.467251][ T7413] netlink: 'syz.4.1268': attribute type 1 has an invalid length. [ 218.522332][ T7413] bond5: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 218.572375][ T7413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1268'. [ 218.624320][ T7413] bond5 (unregistering): (slave ip6gretap0): Releasing backup interface [ 218.652011][ T7413] bond5 (unregistering): Released all slaves [ 218.673771][ T7423] lo speed is unknown, defaulting to 1000 [ 218.878592][ T7432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.887704][ T7432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.897955][ T7432] tmpfs: Bad value for 'nr_inodes' [ 218.904033][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1275'. [ 218.929599][ T7432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.964061][ T7432] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.036538][ T7438] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 219.042228][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 219.042293][ T28] audit: type=1400 audit(1781583809.440:1220): avc: denied { bind } for pid=7439 comm="syz.4.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 219.091331][ T28] audit: type=1400 audit(1781583809.440:1221): avc: denied { name_bind } for pid=7439 comm="syz.4.1277" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 219.120502][ T28] audit: type=1400 audit(1781583809.440:1222): avc: denied { node_bind } for pid=7439 comm="syz.4.1277" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 219.670220][ T7444] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 219.718701][ T7444] loop4: detected capacity change from 0 to 512 [ 219.785781][ T7444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 220.272854][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.392858][ T28] audit: type=1400 audit(1781583810.800:1223): avc: denied { shutdown } for pid=7461 comm="syz.1.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 220.711007][ T7464] loop1: detected capacity change from 0 to 512 [ 220.970998][ T7464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 221.003695][ T7464] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.286896][ T28] audit: type=1400 audit(1781583811.700:1224): avc: denied { bind } for pid=7463 comm="syz.1.1286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.413025][ T7478] tipc: Resetting bearer [ 221.467779][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 221.542670][ T28] audit: type=1400 audit(1781583811.950:1225): avc: denied { write } for pid=7481 comm="syz.0.1292" name="file0" dev="tmpfs" ino=1474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.617465][ T28] audit: type=1400 audit(1781583811.950:1226): avc: denied { open } for pid=7481 comm="syz.0.1292" path="/278/file0" dev="tmpfs" ino=1474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.632974][ T7482] loop0: detected capacity change from 0 to 512 [ 221.667772][ T7484] syzkaller0: entered promiscuous mode [ 221.680791][ T7484] syzkaller0: entered allmulticast mode [ 221.700442][ T28] audit: type=1400 audit(1781583812.110:1227): avc: denied { mounton } for pid=7481 comm="syz.0.1292" path="/278/file0" dev="tmpfs" ino=1474 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 221.752066][ T7482] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 221.793713][ T7482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 221.813868][ T7482] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.828621][ T7482] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 221.850839][ T7494] mmap: syz.1.1295 (7494) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 221.915262][ T7482] netlink: 'syz.0.1292': attribute type 2 has an invalid length. [ 221.949508][ T7498] syz_tun: entered allmulticast mode [ 222.126755][ T28] audit: type=1400 audit(1781583812.500:1228): avc: denied { getopt } for pid=7472 comm="syz.3.1288" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 222.169352][ T7511] loop3: detected capacity change from 0 to 512 [ 222.193801][ T7511] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 222.206518][ T7511] EXT4-fs (loop3): SIPHASH is not a valid default hash value [ 222.329358][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1300'. [ 223.222687][ T7523] syzkaller0: entered promiscuous mode [ 223.235284][ T7523] syzkaller0: entered allmulticast mode [ 223.397915][ T7527] syzkaller0: entered promiscuous mode [ 223.403608][ T7527] syzkaller0: entered allmulticast mode [ 223.678028][ T7533] loop4: detected capacity change from 0 to 512 [ 223.727059][ T7533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 223.771550][ T7533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 223.809372][ T7533] ext4 filesystem being mounted at /264/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.840633][ T7533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 224.216714][ T7553] syzkaller0: entered promiscuous mode [ 224.222526][ T7553] syzkaller0: entered allmulticast mode [ 224.298653][ T7557] loop3: detected capacity change from 0 to 512 [ 224.339496][ T7557] EXT4-fs: Ignoring removed i_version option [ 224.371955][ T7557] EXT4-fs: Ignoring removed nobh option [ 224.392169][ T7557] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 224.419639][ T7557] EXT4-fs (loop3): 1 truncate cleaned up [ 224.437167][ T7557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.643762][ T28] audit: type=1326 audit(1781583815.050:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7569 comm="syz.2.1322" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bd44cce59 code=0x0 [ 224.818241][ T28] audit: type=1400 audit(1781583815.130:1230): avc: denied { write } for pid=7555 comm="syz.3.1317" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.215561][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.309419][ T28] audit: type=1400 audit(1781583815.720:1231): avc: denied { execute } for pid=7578 comm="syz.2.1325" path="/memory.swap.current" dev="ramfs" ino=18632 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 225.437466][ T7580] loop1: detected capacity change from 0 to 8192 [ 225.533965][ T7580] loop1: p1 < > p2 p4 < p5 > [ 225.543461][ T7580] loop1: partition table partially beyond EOD, truncated [ 225.566733][ T7580] loop1: p1 start 134217728 is beyond EOD, truncated [ 225.600683][ T7580] loop1: p2 size 67072 extends beyond EOD, truncated [ 225.625226][ T7580] loop1: p5 size 67072 extends beyond EOD, truncated [ 225.879846][ T7604] loop4: detected capacity change from 0 to 2048 [ 225.903893][ T7599] loop3: detected capacity change from 0 to 512 [ 225.939406][ T7604] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.942673][ T7599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 225.960637][ T7604] ext4 filesystem being mounted at /270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.992822][ T28] audit: type=1400 audit(1781583816.400:1232): avc: denied { write } for pid=7603 comm="syz.4.1332" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.025019][ T28] audit: type=1400 audit(1781583816.430:1233): avc: denied { write } for pid=7605 comm="syz.1.1333" path="socket:[18105]" dev="sockfs" ino=18105 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 226.094789][ T7612] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1332: bg 0: block 345: padding at end of block bitmap is not set [ 226.139215][ T7612] EXT4-fs (loop4): Remounting filesystem read-only [ 226.149144][ T3665] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 226.171015][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.212394][ T7615] loop3: detected capacity change from 0 to 128 [ 226.254187][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.294679][ T7615] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.348409][ T7615] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.369703][ T28] audit: type=1400 audit(1781583816.780:1234): avc: denied { write } for pid=7614 comm="syz.3.1334" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.415877][ T28] audit: type=1400 audit(1781583816.810:1235): avc: denied { setattr } for pid=7614 comm="syz.3.1334" path="/257/file1/file1" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 226.525282][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.220205][ T7645] loop1: detected capacity change from 0 to 128 [ 227.269730][ T7642] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.300298][ T7645] bio_check_eod: 59 callbacks suppressed [ 227.300315][ T7645] syz.1.1345: attempt to access beyond end of device [ 227.300315][ T7645] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 227.320039][ T7645] syz.1.1345: attempt to access beyond end of device [ 227.320039][ T7645] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 227.334521][ T7642] bridge0: port 3(vlan0) entered blocking state [ 227.340907][ T7642] bridge0: port 3(vlan0) entered forwarding state [ 227.341024][ T7645] syz.1.1345: attempt to access beyond end of device [ 227.341024][ T7645] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 227.365079][ T7645] syz.1.1345: attempt to access beyond end of device [ 227.365079][ T7645] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 227.386558][ T7645] syz.1.1345: attempt to access beyond end of device [ 227.386558][ T7645] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 227.394714][ T7642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.400845][ T7645] syz.1.1345: attempt to access beyond end of device [ 227.400845][ T7645] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 227.420820][ T7645] syz.1.1345: attempt to access beyond end of device [ 227.420820][ T7645] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 227.473462][ T7645] syz.1.1345: attempt to access beyond end of device [ 227.473462][ T7645] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 227.504989][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.513311][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.521043][ T7645] syz.1.1345: attempt to access beyond end of device [ 227.521043][ T7645] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 227.557137][ T7645] syz.1.1345: attempt to access beyond end of device [ 227.557137][ T7645] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 227.576002][ T7642] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 227.601955][ T7642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.613409][ T7658] loop3: detected capacity change from 0 to 764 [ 227.621383][ T7642] veth1_macvtap: left promiscuous mode [ 227.628466][ T7642] veth0_macvtap: left promiscuous mode [ 227.634806][ T7642] veth0_macvtap: entered promiscuous mode [ 227.648518][ T7642] 8021q: adding VLAN 0 to HW filter on device eth0 [ 227.657838][ T7642] 8021q: adding VLAN 0 to HW filter on device eth1 [ 227.679231][ T7642] 8021q: adding VLAN 0 to HW filter on device eth2 [ 227.710058][ T7642] 8021q: adding VLAN 0 to HW filter on device eth3 [ 227.728181][ T7642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.736392][ T7642] veth0_to_team: entered promiscuous mode [ 227.742733][ T7642] 0ªî{X¹¦: entered promiscuous mode [ 227.750326][ T7642] batman_adv: batadv0: Interface activated: macvtap1 [ 227.758123][ T7642] 8021q: adding VLAN 0 to HW filter on device bond2 [ 227.779068][ T3671] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.786288][ T3671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.797143][ T3671] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.804260][ T3671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.878970][ T3646] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.887451][ T3646] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.897544][ T3646] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.906752][ T3646] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.932353][ T7664] loop4: detected capacity change from 0 to 128 [ 227.954856][ T7664] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.974312][ T7664] ext4 filesystem being mounted at /275/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.997583][ T28] audit: type=1400 audit(1781583818.410:1236): avc: denied { write } for pid=7663 comm="syz.4.1350" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.147571][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.180070][ T28] audit: type=1400 audit(1781583818.590:1237): avc: denied { append } for pid=7675 comm="syz.4.1357" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 228.360462][ T7679] loop0: detected capacity change from 0 to 8192 [ 228.425237][ T7679] loop0: p1 < > p2 p4 < p5 > [ 228.431589][ T7679] loop0: partition table partially beyond EOD, truncated [ 228.440528][ T7679] loop0: p1 start 134217728 is beyond EOD, truncated [ 228.449513][ T7679] loop0: p2 size 67072 extends beyond EOD, truncated [ 228.460681][ T7679] loop0: p5 size 67072 extends beyond EOD, truncated [ 228.602759][ T7684] syzkaller0: entered promiscuous mode [ 228.611864][ T7684] syzkaller0: entered allmulticast mode [ 228.775822][ T28] audit: type=1400 audit(1781583819.190:1238): avc: denied { create } for pid=7691 comm="syz.1.1363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 228.805475][ T7697] netlink: 'syz.2.1364': attribute type 12 has an invalid length. [ 229.229811][ T7714] loop4: detected capacity change from 0 to 512 [ 229.263028][ T7716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1368'. [ 229.279839][ T7714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 229.319997][ T7714] EXT4-fs (loop4): SIPHASH is not a valid default hash value [ 230.559597][ T7720] loop0: detected capacity change from 0 to 4096 [ 230.599864][ T7720] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 231.204934][ T7730] loop3: detected capacity change from 0 to 8192 [ 231.262222][ T7735] loop1: detected capacity change from 0 to 512 [ 231.277831][ T3393] lo speed is unknown, defaulting to 1000 [ 231.292576][ T7737] loop4: detected capacity change from 0 to 128 [ 231.314875][ T7737] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 231.329270][ T7737] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.340922][ T7735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.351219][ T7730] loop3: p1 < > p2 p4 < p5 > [ 231.353990][ T7735] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.397868][ T7730] loop3: partition table partially beyond EOD, truncated [ 231.414033][ T28] audit: type=1400 audit(1781583821.820:1239): avc: denied { write } for pid=7736 comm="syz.4.1375" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.433188][ T7730] loop3: p1 start 134217728 is beyond EOD, [ 231.471791][ T28] audit: type=1400 audit(1781583821.880:1240): avc: denied { write } for pid=7733 comm="syz.1.1374" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.479861][ T7730] truncated [ 231.522907][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.549835][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.550544][ T7730] loop3: p2 size 67072 extends beyond EOD, truncated [ 231.570487][ T28] audit: type=1326 audit(1781583821.940:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7743 comm="syz.2.1376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bd44cce59 code=0x0 [ 231.603204][ T7730] loop3: p5 size 67072 extends beyond EOD, truncated [ 231.747345][ T7755] unsupported nla_type 210 [ 231.885145][ T7759] loop0: detected capacity change from 0 to 1024 [ 231.934844][ T7759] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.956379][ T28] audit: type=1400 audit(1781583822.370:1242): avc: denied { write } for pid=7758 comm="syz.0.1382" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.983972][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.272005][ T7774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1385'. [ 232.354302][ T7773] loop3: detected capacity change from 0 to 1024 [ 232.402438][ T7773] EXT4-fs: Ignoring removed orlov option [ 232.436119][ T7773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.042739][ T7779] netlink: 'syz.3.1388': attribute type 3 has an invalid length. [ 233.080703][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1388'. [ 233.156720][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.302125][ T7792] loop1: detected capacity change from 0 to 764 [ 233.390690][ T7794] loop3: detected capacity change from 0 to 128 [ 233.849278][ T28] audit: type=1400 audit(1781583824.260:1243): avc: denied { write } for pid=7799 comm="syz.1.1396" name="cgroup.subtree_control" dev="cgroup2" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 233.979601][ T7802] syzkaller0: entered promiscuous mode [ 233.988476][ T28] audit: type=1400 audit(1781583824.260:1244): avc: denied { open } for pid=7799 comm="syz.1.1396" path="" dev="cgroup2" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 234.019833][ T7802] syzkaller0: entered allmulticast mode [ 234.088581][ T7804] syzkaller0: entered promiscuous mode [ 234.094154][ T7804] syzkaller0: entered allmulticast mode [ 234.490407][ T7828] loop3: detected capacity change from 0 to 512 [ 234.554325][ T7827] 8021q: adding VLAN 0 to HW filter on device eth0 [ 234.564976][ T7827] 8021q: adding VLAN 0 to HW filter on device eth1 [ 234.575397][ T7827] 8021q: adding VLAN 0 to HW filter on device eth2 [ 234.586581][ T7827] 8021q: adding VLAN 0 to HW filter on device eth3 [ 234.594061][ T7828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.607290][ T7827] 0ªî{X¹¦: entered promiscuous mode [ 234.614908][ T7827] batman_adv: batadv0: Interface activated: macvtap1 [ 234.636808][ T3667] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 234.637545][ T7827] 8021q: adding VLAN 0 to HW filter on device bond2 [ 234.655927][ T7828] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.673962][ T7827] batman_adv: batadv0: Interface activated: macvtap2 [ 234.722124][ T3671] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.741439][ T3671] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.755261][ T1899] bond2: (slave bridge2): link status up again after 0 ms [ 234.771827][ T3671] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.789192][ T3665] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 234.803192][ T3671] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 234.817226][ T28] audit: type=1400 audit(1781583825.210:1245): avc: denied { write } for pid=7826 comm="syz.3.1407" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.829785][ T3671] bond1: (slave vlan2): link status definitely up, 10000 Mbps full duplex [ 234.850387][ T3665] bond2: (slave bridge2): link status up again after 0 ms [ 234.885825][ T3665] bond2: (slave bridge2): link status up again after 0 ms [ 234.893221][ T3671] bond1: (slave veth3): making interface the new active one [ 234.912565][ T3671] veth0_to_bond: left promiscuous mode [ 234.918267][ T3665] bond2: (slave bridge2): link status up again after 0 ms [ 234.928429][ T3671] bond1: active interface up! [ 234.934245][ T3656] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 234.949599][ T3671] bond2: (slave bridge2): link status up again after 0 ms [ 234.996527][ T3665] bond2: (slave bridge2): link status up again after 0 ms [ 235.007027][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 235.039745][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.113074][ T7839] loop1: detected capacity change from 0 to 512 [ 235.224847][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 235.242669][ T7839] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 235.288981][ T7839] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 235.320763][ T7857] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1412'. [ 235.597939][ T7859] syzkaller0: entered promiscuous mode [ 235.620319][ T7859] syzkaller0: entered allmulticast mode [ 235.732731][ T7860] loop3: detected capacity change from 0 to 8192 [ 236.287358][ T7864] usb usb5: usbfs: process 7864 (syz.0.1418) did not claim interface 1 before use [ 236.840766][ T7880] loop0: detected capacity change from 0 to 512 [ 237.104923][ T7876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 237.114312][ T7876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 237.124289][ T7876] 8021q: adding VLAN 0 to HW filter on device eth0 [ 237.150670][ T7876] 8021q: adding VLAN 0 to HW filter on device eth1 [ 237.239726][ T7876] 8021q: adding VLAN 0 to HW filter on device eth2 [ 237.296665][ T7876] 8021q: adding VLAN 0 to HW filter on device eth3 [ 237.320357][ T7880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.335326][ T7880] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.152444][ T28] audit: type=1400 audit(1781583828.560:1246): avc: denied { write } for pid=7875 comm="syz.0.1423" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.323619][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.538455][ T7901] lo speed is unknown, defaulting to 1000 [ 238.782001][ T7909] loop0: detected capacity change from 0 to 764 [ 239.034766][ T7912] loop3: detected capacity change from 0 to 512 [ 239.111441][ T7912] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 239.131305][ T7912] EXT4-fs (loop3): SIPHASH is not a valid default hash value [ 239.146071][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.155852][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.171094][ T7914] tmpfs: Bad value for 'nr_inodes' [ 239.178150][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1433'. [ 239.190696][ T7914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.529248][ T7924] loop0: detected capacity change from 0 to 512 [ 239.602986][ T7924] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 240.493012][ T3665] net_ratelimit: 23 callbacks suppressed [ 240.493030][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 240.510883][ T7924] EXT4-fs (loop0): SIPHASH is not a valid default hash value [ 240.637008][ T7931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1436'. [ 240.648288][ T3641] bond2: (slave bridge2): failed to get link speed/duplex [ 240.958179][ T3641] bond2: (slave bridge2): failed to get link speed/duplex [ 241.300434][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 241.329549][ T7944] tmpfs: Bad value for 'nr_inodes' [ 241.344372][ T7945] loop3: detected capacity change from 0 to 512 [ 241.618810][ T7944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 241.628680][ T7944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.649428][ T7945] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.981728][ T7944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.011481][ T7945] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1443: iget: bad i_size value: 38620345925642 [ 242.262322][ T7945] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 242.262617][ T7945] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1443: couldn't read orphan inode 15 (err -117) [ 242.271981][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 242.272000][ C0] EXT4-fs (loop3): initial error at time 1781583832: ext4_orphan_get:1399: inode 15 [ 242.272027][ C0] EXT4-fs (loop3): last error at time 1781583832: ext4_orphan_get:1399: inode 15 [ 242.309069][ T3641] bond2: (slave bridge2): failed to get link speed/duplex [ 242.382933][ T7954] lo speed is unknown, defaulting to 1000 [ 242.401166][ T7945] loop3: lost filesystem error report for type 5 error -117 [ 242.401887][ T7945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.429624][ T3658] bond2: (slave bridge2): failed to get link speed/duplex [ 242.545707][ T3658] bond2: (slave bridge2): failed to get link speed/duplex [ 242.557419][ T28] audit: type=1400 audit(1781583832.870:1247): avc: denied { write } for pid=7943 comm="syz.3.1443" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 242.591077][ T7945] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1443: bg 0: block 5: invalid block bitmap [ 242.619210][ T7945] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 976 with error 28 [ 242.636168][ T7945] EXT4-fs (loop3): This should not happen!! Data will be lost [ 242.636168][ T7945] [ 242.654579][ T7945] EXT4-fs (loop3): Total free blocks count 0 [ 242.660949][ T3658] bond2: (slave bridge2): failed to get link speed/duplex [ 242.685547][ T7945] EXT4-fs (loop3): Free/Dirty block details [ 242.697146][ T7945] EXT4-fs (loop3): free_blocks=0 [ 242.712581][ T7945] EXT4-fs (loop3): dirty_blocks=980 [ 242.724144][ T7945] EXT4-fs (loop3): Block reservation details [ 242.747086][ T7945] EXT4-fs (loop3): i_reserved_data_blocks=980 [ 242.778153][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 242.791266][ T7959] syzkaller0: entered promiscuous mode [ 242.814488][ T7959] syzkaller0: entered allmulticast mode [ 242.842359][ T7961] loop1: detected capacity change from 0 to 1024 [ 242.878740][ T7961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.906537][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 242.978234][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.014499][ T28] audit: type=1400 audit(1781583833.420:1248): avc: denied { write } for pid=7960 comm="syz.1.1446" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.086800][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.724888][ T28] audit: type=1326 audit(1781583834.110:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7979 comm="syz.3.1453" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7287abce59 code=0x0 [ 244.341645][ T7990] loop0: detected capacity change from 0 to 512 [ 245.507589][ T3658] net_ratelimit: 19 callbacks suppressed [ 245.507610][ T3658] bond2: (slave bridge2): failed to get link speed/duplex [ 245.510341][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.535051][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.606004][ T28] audit: type=1400 audit(1781583836.010:1250): avc: denied { write } for pid=8005 comm="syz.1.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 245.636236][ T8012] tmpfs: Bad value for 'nr_inodes' [ 245.645682][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 245.666804][ T8012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1461'. [ 245.704790][ T8012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.769689][ T8012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.795898][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 245.908574][ T3656] bond2: (slave bridge2): failed to get link speed/duplex [ 246.035687][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 246.090323][ T8021] loop1: detected capacity change from 0 to 512 [ 246.135623][ T8021] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 246.147205][ T8021] EXT4-fs (loop1): SIPHASH is not a valid default hash value [ 246.147450][ T3656] bond2: (slave bridge2): failed to get link speed/duplex [ 246.257146][ T3656] bond2: (slave bridge2): failed to get link speed/duplex [ 246.343348][ T28] audit: type=1326 audit(1781583836.750:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8026 comm="syz.1.1470" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55c0ecce59 code=0x0 [ 246.375761][ T3641] bond2: (slave bridge2): failed to get link speed/duplex [ 246.426078][ T8029] loop4: detected capacity change from 0 to 512 [ 246.496386][ T3656] bond2: (slave bridge2): failed to get link speed/duplex [ 246.533269][ T8033] bridge3: port 1(erspan0) entered blocking state [ 246.539822][ T8033] bridge3: port 1(erspan0) entered forwarding state [ 246.548068][ T8037] loop0: detected capacity change from 0 to 1024 [ 246.592444][ T8038] loop4: detected capacity change from 0 to 512 [ 246.598482][ T8037] EXT4-fs: Ignoring removed orlov option [ 246.629586][ T8033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.659246][ T8033] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.661732][ T8037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.687151][ T8038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.703449][ T8033] batadv0: left promiscuous mode [ 246.730712][ T8033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.751713][ T8038] ext4 filesystem being mounted at /294/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 246.788794][ T8037] netlink: 'syz.0.1485': attribute type 3 has an invalid length. [ 246.814852][ T28] audit: type=1400 audit(1781583837.220:1252): avc: denied { write } for pid=8032 comm="syz.4.1474" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.848268][ T8037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 246.897042][ T8033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.911836][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.935821][ T8033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.959565][ T8033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.992895][ T8033] veth1_macvtap: left promiscuous mode [ 247.006447][ T8033] veth0_macvtap: left promiscuous mode [ 247.019518][ T8033] veth0_macvtap: entered promiscuous mode [ 247.033031][ T8033] veth1_macvtap: entered promiscuous mode [ 247.054098][ T8033] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.071034][ T8033] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.089725][ T8033] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 247.105988][ T8033] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 247.126105][ T8033] 0ªî{X¹¦: entered promiscuous mode [ 247.137344][ T8033] batman_adv: batadv0: Interface activated: macvtap1 [ 247.151027][ T8033] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.170575][ T8033] batadv0: entered promiscuous mode [ 247.181782][ T8033] batadv0: entered allmulticast mode [ 247.192121][ T8033] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 247.215707][ T8033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 247.232249][ T8033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.267877][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.275062][ T3656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.293891][ T3656] bridge1: port 1(veth0_to_bond) entered blocking state [ 247.300991][ T3656] bridge1: port 1(veth0_to_bond) entered forwarding state [ 247.455672][ T3641] bond2: (slave bridge2): failed to get link speed/duplex [ 247.480335][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.646161][ T8053] Process accounting resumed [ 248.024060][ T8062] loop3: detected capacity change from 0 to 512 [ 248.033966][ T8066] lo speed is unknown, defaulting to 1000 [ 248.351732][ T8062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 248.615823][ T28] audit: type=1400 audit(1781583838.960:1253): avc: denied { write } for pid=8060 comm="syz.3.1494" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.664171][ T28] audit: type=1400 audit(1781583839.050:1254): avc: denied { write } for pid=8060 comm="syz.3.1494" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 248.865299][ T28] audit: type=1400 audit(1781583839.270:1255): avc: denied { getopt } for pid=8059 comm="syz.0.1493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 248.944349][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.989685][ T8085] 9p: Bad value for 'rfdno' [ 249.749629][ T8123] lo speed is unknown, defaulting to 1000 [ 250.230943][ T8135] lo speed is unknown, defaulting to 1000 [ 250.258746][ T8142] loop4: detected capacity change from 0 to 8192 [ 250.359305][ T8153] netlink: 'syz.4.1514': attribute type 1 has an invalid length. [ 250.411061][ T8153] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.451881][ T8155] bond5: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 250.481524][ T8155] bond5: entered allmulticast mode [ 250.585736][ T3641] net_ratelimit: 21 callbacks suppressed [ 250.585753][ T3641] bond2: (slave bridge2): failed to get link speed/duplex [ 250.726177][ T3656] bond2: (slave bridge2): failed to get link speed/duplex [ 250.807116][ T8166] loop4: detected capacity change from 0 to 512 [ 250.836863][ T8166] vfat: Unknown parameter './file0' [ 250.846899][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 250.931217][ T8170] syzkaller0: entered promiscuous mode [ 250.946734][ T8170] syzkaller0: entered allmulticast mode [ 250.985720][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 251.096105][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 251.205626][ T3641] bond2: (slave bridge2): failed to get link speed/duplex [ 251.316974][ T3641] bond2: (slave bridge2): failed to get link speed/duplex [ 251.425662][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 251.535714][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 251.645674][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 252.108189][ T8174] loop3: detected capacity change from 0 to 128 [ 252.153770][ T8174] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 252.176630][ T8175] loop4: detected capacity change from 0 to 512 [ 252.245857][ T8175] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.259802][ T8174] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.286604][ T28] audit: type=1400 audit(1781583842.680:1256): avc: denied { write } for pid=8171 comm="syz.4.1523" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.377538][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 252.397957][ T28] audit: type=1400 audit(1781583842.700:1257): avc: denied { write } for pid=8172 comm="syz.3.1522" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.455662][ T28] audit: type=1400 audit(1781583842.740:1258): avc: denied { write } for pid=8171 comm="syz.4.1523" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.504260][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.704351][ T8196] lo speed is unknown, defaulting to 1000 [ 252.873860][ T8207] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 252.873860][ T8207] The task syz.2.1532 (8207) triggered the difference, watch for misbehavior. [ 252.929986][ T28] audit: type=1400 audit(1781583843.340:1259): avc: denied { lock } for pid=8210 comm="syz.0.1534" path="socket:[20087]" dev="sockfs" ino=20087 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 253.543141][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1546'. [ 253.637953][ T8220] loop1: detected capacity change from 0 to 128 [ 253.680323][ T8220] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 253.712566][ T8220] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.739165][ T28] audit: type=1400 audit(1781583844.150:1260): avc: denied { write } for pid=8216 comm="syz.1.1537" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.012741][ T8238] netlink: 'syz.0.1541': attribute type 4 has an invalid length. [ 254.061561][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.124679][ T8239] netlink: 'syz.0.1541': attribute type 4 has an invalid length. [ 254.375375][ T28] audit: type=1404 audit(1781583844.780:1261): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 254.430977][ T28] audit: type=1400 audit(1781583844.830:1262): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.509073][ T8247] lo speed is unknown, defaulting to 1000 [ 254.542422][ T28] audit: type=1400 audit(1781583844.880:1263): avc: denied { connect } for pid=8243 comm="syz.0.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 254.598072][ T8249] syzkaller0: entered promiscuous mode [ 254.625299][ T8249] syzkaller0: entered allmulticast mode [ 254.658620][ T28] audit: type=1400 audit(1781583844.910:1264): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.719925][ T28] audit: type=1400 audit(1781583844.980:1265): avc: denied { open } for pid=8245 comm="syz.1.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 254.741880][ T28] audit: type=1400 audit(1781583844.980:1266): avc: denied { create } for pid=8245 comm="syz.1.1544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 254.776396][ T8256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1550'. [ 254.792315][ T28] audit: type=1400 audit(1781583844.990:1267): avc: denied { read } for pid=8245 comm="syz.1.1544" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 254.816843][ T28] audit: type=1400 audit(1781583845.020:1268): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.841736][ T28] audit: type=1400 audit(1781583845.030:1269): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 254.867730][ T28] audit: type=1400 audit(1781583845.060:1270): avc: denied { create } for pid=8251 comm="syz.0.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 254.919156][ T8256] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8256 comm=syz.0.1550 [ 255.180471][ T8279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 255.246898][ T8284] syzkaller0: entered promiscuous mode [ 255.252637][ T8284] syzkaller0: entered allmulticast mode [ 255.397535][ T8289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1561'. [ 255.616020][ T3667] net_ratelimit: 32 callbacks suppressed [ 255.616092][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 255.746794][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 255.818115][ T8300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=8300 comm=syz.4.1568 [ 255.852714][ T8305] netlink: 'syz.4.1569': attribute type 10 has an invalid length. [ 255.861686][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 255.877547][ T8305] team0 (unregistering): Port device team_slave_0 removed [ 255.889499][ T8305] team0 (unregistering): Port device team_slave_1 removed [ 255.971469][ T8309] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.978076][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 256.092732][ T8321] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 256.095845][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 256.160806][ T8321] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.233987][ T8327] bond3: (slave veth5): Enslaving as an active interface with a down link [ 256.257999][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 256.287198][ T8321] bond3: (slave batadv1): making interface the new active one [ 256.320198][ T8321] batadv1: entered promiscuous mode [ 256.330368][ T8321] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 256.349814][ T8317] macsec2: entered promiscuous mode [ 256.376656][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 256.400501][ T8334] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 256.423231][ T8334] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 256.495687][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 256.534650][ T8339] lo speed is unknown, defaulting to 1000 [ 256.615796][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 256.987179][ T8356] netlink: 'syz.4.1588': attribute type 8 has an invalid length. [ 256.998637][ T8356] sch_fq: defrate 0 ignored. [ 257.113079][ T8367] syz.4.1593 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 257.254076][ T8375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.262410][ T8375] IPv6: NLM_F_CREATE should be set when creating new route [ 257.507009][ T8384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1599'. [ 257.531627][ T8384] bond0: entered promiscuous mode [ 257.547181][ T8384] bond0: entered allmulticast mode [ 257.784261][ T8396] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1605'. [ 257.964022][ T8409] syzkaller0: entered promiscuous mode [ 257.973379][ T8409] syzkaller0: entered allmulticast mode [ 258.947743][ T8434] netlink: 'syz.3.1629': attribute type 4 has an invalid length. [ 259.213287][ T8447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1624'. [ 259.278282][ T8448] bond6: entered promiscuous mode [ 259.288801][ T8448] bond6: entered allmulticast mode [ 259.389593][ T28] kauditd_printk_skb: 293 callbacks suppressed [ 259.389608][ T28] audit: type=1400 audit(1781583849.800:1564): avc: denied { create } for pid=8451 comm="syz.4.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 259.443426][ T8452] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 259.446821][ T28] audit: type=1400 audit(1781583849.830:1565): avc: denied { create } for pid=8451 comm="syz.4.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 259.497358][ T28] audit: type=1400 audit(1781583849.840:1566): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 259.525449][ T28] audit: type=1400 audit(1781583849.840:1567): avc: denied { read write } for pid=8451 comm="syz.4.1625" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 259.551437][ T28] audit: type=1400 audit(1781583849.850:1568): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 259.580106][ T8456] syzkaller0: entered promiscuous mode [ 259.592975][ T8456] syzkaller0: entered allmulticast mode [ 259.633539][ T28] audit: type=1400 audit(1781583849.870:1569): avc: denied { create } for pid=8453 comm="syz.0.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 259.725749][ T28] audit: type=1400 audit(1781583849.870:1570): avc: denied { execmem } for pid=8453 comm="syz.0.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 259.774853][ T28] audit: type=1400 audit(1781583849.890:1571): avc: denied { create } for pid=8451 comm="syz.4.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 259.817690][ T28] audit: type=1400 audit(1781583849.890:1572): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 259.872946][ T28] audit: type=1400 audit(1781583849.900:1573): avc: denied { read } for pid=8453 comm="syz.0.1626" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=0 [ 260.027378][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1633'. [ 260.037384][ T8469] bridge_slave_0: default FDB implementation only supports local addresses [ 260.051871][ T8460] lo speed is unknown, defaulting to 1000 [ 260.131042][ T8474] syzkaller0: entered promiscuous mode [ 260.137641][ T8474] syzkaller0: entered allmulticast mode [ 260.332926][ T8472] lo speed is unknown, defaulting to 1000 [ 260.696136][ T3667] net_ratelimit: 26 callbacks suppressed [ 260.696161][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 260.825707][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 260.936711][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 261.046278][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 261.169301][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 261.211059][ T8503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1645'. [ 261.305739][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 261.415724][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 261.526393][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 261.538162][ T8528] syzkaller0: entered promiscuous mode [ 261.548136][ T8528] syzkaller0: entered allmulticast mode [ 261.645853][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 261.715040][ T8540] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 261.742128][ T8540] syzkaller0: entered promiscuous mode [ 261.757553][ T8540] syzkaller0: entered allmulticast mode [ 261.816367][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 261.878362][ T8549] syzkaller0: entered promiscuous mode [ 261.891813][ T8549] syzkaller0: entered allmulticast mode [ 262.024843][ T8551] syzkaller0: entered promiscuous mode [ 262.053574][ T8551] syzkaller0: entered allmulticast mode [ 262.781151][ T8586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1680'. [ 262.825743][ T8586] netlink: 'syz.2.1680': attribute type 3 has an invalid length. [ 262.856936][ T8586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1680'. [ 262.891026][ T8586] netlink: 'syz.2.1680': attribute type 3 has an invalid length. [ 262.917414][ T8589] lo speed is unknown, defaulting to 1000 [ 263.180437][ T8597] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1682'. [ 263.300739][ T8602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1686'. [ 263.509875][ T8614] syzkaller0: entered promiscuous mode [ 263.516326][ T8614] syzkaller0: entered allmulticast mode [ 264.493519][ T28] kauditd_printk_skb: 280 callbacks suppressed [ 264.493539][ T28] audit: type=1400 audit(1781583854.900:1854): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 264.594516][ T8629] syzkaller0: entered promiscuous mode [ 264.613233][ T8629] syzkaller0: entered allmulticast mode [ 264.634782][ T28] audit: type=1400 audit(1781583855.040:1855): avc: denied { create } for pid=8628 comm="syz.4.1695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 264.750713][ T28] audit: type=1400 audit(1781583855.160:1856): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 264.816100][ T28] audit: type=1400 audit(1781583855.190:1857): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 264.871028][ T28] audit: type=1400 audit(1781583855.200:1858): avc: denied { open } for pid=8622 comm="syz.0.1694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 264.914353][ T8634] syzkaller0: entered promiscuous mode [ 264.931629][ T28] audit: type=1400 audit(1781583855.230:1859): avc: denied { map_create } for pid=8631 comm="syz.3.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 264.934217][ T8634] syzkaller0: entered allmulticast mode [ 264.977076][ T28] audit: type=1400 audit(1781583855.230:1860): avc: denied { create } for pid=8631 comm="syz.3.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=0 [ 265.027076][ T28] audit: type=1400 audit(1781583855.260:1861): avc: denied { create } for pid=8631 comm="syz.3.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 265.064173][ T28] audit: type=1400 audit(1781583855.280:1862): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 265.117138][ T28] audit: type=1400 audit(1781583855.300:1863): avc: denied { write } for pid=8633 comm="syz.4.1698" name="udp" dev="proc" ino=4026532669 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 265.614066][ T8642] veth1_macvtap: entered promiscuous mode [ 265.631728][ T8642] macsec0: entered promiscuous mode [ 265.645914][ T8642] veth1_macvtap: left promiscuous mode [ 265.806964][ T3671] net_ratelimit: 31 callbacks suppressed [ 265.806981][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 265.837031][ T8650] lo speed is unknown, defaulting to 1000 [ 265.855295][ T8652] syzkaller0: entered promiscuous mode [ 265.869631][ T8652] syzkaller0: entered allmulticast mode [ 265.935709][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 266.046666][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 266.165705][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 266.271752][ T8658] syzkaller0: entered promiscuous mode [ 266.284250][ T8658] syzkaller0: entered allmulticast mode [ 266.311438][ T3656] syzkaller0: tun_net_xmit 48 [ 266.318230][ T3656] bond2: (slave bridge2): failed to get link speed/duplex [ 266.425629][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 266.547472][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 266.657101][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 266.778532][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 266.905636][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 267.435711][ T3656] batadv1: left promiscuous mode [ 267.696859][ T8704] netlink: 'syz.4.1725': attribute type 13 has an invalid length. [ 267.726673][ T8704] bridge3: port 1(erspan0) entered disabled state [ 267.749285][ T8704] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.779981][ T8704] tipc: Resetting bearer [ 267.797590][ T8704] bridge1: port 1(veth0_to_bond) entered disabled state [ 267.813090][ T8704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.884174][ T8704] batman_adv: batadv0: Interface deactivated: macvtap1 [ 267.905521][ T8704] batadv0: left allmulticast mode [ 267.949324][ T3671] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.960418][ T3671] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.969664][ T3671] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.997092][ T3671] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.458546][ T8722] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1731'. [ 268.824475][ T8733] lo speed is unknown, defaulting to 1000 [ 269.201877][ T8747] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1738'. [ 269.495608][ T28] kauditd_printk_skb: 178 callbacks suppressed [ 269.495629][ T28] audit: type=1400 audit(1781583859.900:2042): avc: denied { prog_load } for pid=8760 comm="syz.4.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 269.525041][ T28] audit: type=1400 audit(1781583859.910:2043): avc: denied { create } for pid=8760 comm="syz.4.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 269.563706][ T28] audit: type=1400 audit(1781583859.910:2044): avc: denied { create } for pid=8760 comm="syz.4.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 269.612403][ T28] audit: type=1400 audit(1781583859.910:2045): avc: denied { open } for pid=8760 comm="syz.4.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 269.649533][ T28] audit: type=1400 audit(1781583860.000:2046): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 269.713875][ T28] audit: type=1400 audit(1781583860.040:2047): avc: denied { read write } for pid=3300 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 269.782205][ T3665] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.803414][ T28] audit: type=1400 audit(1781583860.210:2048): avc: denied { execmem } for pid=8767 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 269.862511][ T28] audit: type=1400 audit(1781583860.270:2049): avc: denied { execmem } for pid=8768 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 269.916331][ T3665] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.930706][ T28] audit: type=1400 audit(1781583860.290:2050): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 269.992060][ T28] audit: type=1400 audit(1781583860.320:2051): avc: denied { create } for pid=8770 comm="syz.4.1749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 270.031120][ T3665] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.114829][ T3665] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.276546][ T3665] bridge_slave_1: left allmulticast mode [ 270.293508][ T3665] bridge_slave_1: left promiscuous mode [ 270.307411][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.329510][ T3665] bridge_slave_0: left allmulticast mode [ 270.346693][ T3665] bridge_slave_0: left promiscuous mode [ 270.362282][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.739893][ T3665] bond0 (unregistering): Released all slaves [ 270.821869][ T3665] tipc: Disabling bearer [ 270.827920][ T3665] tipc: Disabling bearer [ 270.845937][ T3665] tipc: Left network mode [ 270.875674][ T3671] net_ratelimit: 27 callbacks suppressed [ 270.875702][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 270.953591][ T3665] hsr_slave_0: left promiscuous mode [ 270.966142][ T3665] hsr_slave_1: left promiscuous mode [ 270.980611][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.010631][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.044177][ T3665] veth1_macvtap: left allmulticast mode [ 271.064005][ T3665] veth1_macvtap: left promiscuous mode [ 271.081436][ T3665] veth0_macvtap: left promiscuous mode [ 271.251399][ T3309] ================================================================== [ 271.259567][ T3309] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 271.267790][ T3309] [ 271.270152][ T3309] read-write to 0xffff888105f562d8 of 8 bytes by task 8780 on cpu 0: [ 271.278731][ T3309] shmem_add_to_page_cache+0x4b2/0x5b0 [ 271.284245][ T3309] shmem_get_folio_gfp+0x51d/0xdc0 [ 271.289413][ T3309] shmem_write_begin+0xfc/0x1f0 [ 271.294366][ T3309] generic_perform_write+0x186/0x490 [ 271.299691][ T3309] shmem_file_write_iter+0xc5/0xf0 [ 271.304846][ T3309] __kernel_write_iter+0x30f/0x590 [ 271.310012][ T3309] dump_user_range+0xa73/0xd00 [ 271.314835][ T3309] elf_core_dump+0x21c0/0x2340 [ 271.319634][ T3309] coredump_write+0xaf9/0xdd0 [ 271.324356][ T3309] vfs_coredump+0x276b/0x3290 [ 271.329087][ T3309] get_signal+0xd33/0xf10 [ 271.333484][ T3309] arch_do_signal_or_restart+0x96/0x480 [ 271.339079][ T3309] irqentry_exit+0x14d/0x610 [ 271.344267][ T3309] asm_exc_page_fault+0x26/0x30 [ 271.349155][ T3309] [ 271.351544][ T3309] read to 0xffff888105f562d8 of 8 bytes by task 3309 on cpu 1: [ 271.359120][ T3309] shmem_getattr+0x68/0x200 [ 271.363679][ T3309] vfs_getattr_nosec+0x146/0x1e0 [ 271.368688][ T3309] vfs_getattr+0x48/0x60 [ 271.372993][ T3309] vfs_statx_path+0x28/0x140 [ 271.377803][ T3309] vfs_statx+0xc4/0x170 [ 271.382446][ T3309] vfs_fstatat+0x118/0x170 [ 271.386987][ T3309] __se_sys_newfstatat+0x55/0x3e0 [ 271.392059][ T3309] __x64_sys_newfstatat+0x55/0x70 [ 271.397132][ T3309] x64_sys_call+0x2c64/0x3020 [ 271.401850][ T3309] do_syscall_64+0x136/0x3c0 [ 271.406475][ T3309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.412416][ T3309] [ 271.414776][ T3309] value changed: 0x0000000000000c31 -> 0x0000000000000c32 [ 271.421910][ T3309] [ 271.424259][ T3309] Reported by Kernel Concurrency Sanitizer on: [ 271.430473][ T3309] CPU: 1 UID: 0 PID: 3309 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 271.441543][ T3309] Tainted: [W]=WARN [ 271.445379][ T3309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.455482][ T3309] ================================================================== [ 271.469650][ T3665] team0 (unregistering): Port device team_slave_1 removed [ 271.567180][ T3667] smc: removing ib device sz1 [ 271.577845][ T3407] lo speed is unknown, defaulting to 1000 [ 271.583905][ T3407] sz1: Port: 1 Link DOWN [ 271.595665][ T3671] bond2: (slave bridge2): failed to get link speed/duplex [ 271.726667][ T3656] bond2: (slave bridge2): failed to get link speed/duplex [ 271.836295][ T3641] bond2: (slave bridge2): failed to get link speed/duplex [ 271.985795][ T3641] bond2: (slave bridge2): failed to get link speed/duplex [ 272.081777][ T7842] syz_tun (unregistering): left allmulticast mode [ 272.104466][ T3665] IPVS: stop unused estimator thread 0... [ 272.116265][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 272.149216][ T3665] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.177243][ T8754] syz_tun (unregistering): left allmulticast mode [ 272.221369][ T3665] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.265757][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 272.319122][ T3665] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.377099][ T3667] bond2: (slave bridge2): failed to get link speed/duplex [ 272.409947][ T3665] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.488748][ T3622] bond2: (slave bridge2): failed to get link speed/duplex [ 272.530170][ T3665] vlan0: left allmulticast mode [ 272.535130][ T3665] dummy0: left allmulticast mode [ 272.547208][ T3665] vlan0: left promiscuous mode [ 272.552056][ T3665] dummy0: left promiscuous mode [ 272.568387][ T3665] bridge0: port 3(vlan0) entered disabled state [ 272.581067][ T3665] bridge_slave_1: left allmulticast mode [ 272.597116][ T3665] bridge_slave_1: left promiscuous mode [ 272.604294][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.621630][ T3665] bridge_slave_0: left allmulticast mode [ 272.635770][ T3665] bridge_slave_0: left promiscuous mode [ 272.647269][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.700333][ T3665] batman_adv: batadv0: Interface deactivated: macvtap1 [ 272.710839][ T3665] batman_adv: batadv0: Removing interface: macvtap1 [ 272.721963][ T3665] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 272.827713][ T3665] bond1 (unregistering): Released all slaves [ 272.838414][ T3665] bond2 (unregistering): (slave veth5): Releasing backup interface [ 272.848002][ T3665] bond2 (unregistering): Released all slaves [ 272.858521][ T3665] bond3 (unregistering): (slave bond4): Releasing backup interface [ 272.867409][ T3665] bond3 (unregistering): Released all slaves [ 272.878950][ T3665] bond4 (unregistering): Released all slaves [ 272.905979][ T3622] bond2: (slave bridge2): failed to get link speed/duplex [ 272.928925][ T3665] tipc: Disabling bearer [ 272.934568][ T3665] tipc: Left network mode [ 272.941326][ T3665] hsr_slave_0: left promiscuous mode [ 272.947382][ T3665] hsr_slave_1: left promiscuous mode [ 272.953221][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.960855][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.971434][ T3665] veth0_to_team: left promiscuous mode [ 272.977199][ T3665] veth0_macvtap: left promiscuous mode [ 273.037539][ T3665] team0 (unregistering): Port device team_slave_1 removed [ 273.049870][ T3665] team0 (unregistering): Port device team_slave_0 removed [ 273.288647][ T3665] IPVS: stop unused estimator thread 0... [ 273.349649][ T3665] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.409044][ T3665] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.468622][ T3665] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.528874][ T3665] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.809742][ T3665] bridge_slave_1: left allmulticast mode [ 273.815694][ T3665] bridge_slave_1: left promiscuous mode [ 273.821560][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.829831][ T3665] bridge_slave_0: left allmulticast mode [ 273.835874][ T3665] bridge_slave_0: left promiscuous mode [ 273.841680][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.851278][ T3665] bridge_slave_1: left allmulticast mode [ 273.857159][ T3665] bridge_slave_1: left promiscuous mode [ 273.862975][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.871586][ T3665] veth0_to_bond: left allmulticast mode [ 273.877418][ T3665] veth0_to_bond: left promiscuous mode [ 273.883092][ T3665] bridge1: port 1(veth0_to_bond) entered disabled state [ 273.892382][ T3665] erspan0: left allmulticast mode [ 273.897735][ T3665] erspan0: left promiscuous mode [ 273.902890][ T3665] bridge3: port 1(erspan0) entered disabled state [ 273.971624][ T3665] bond0 (unregistering): (slave geneve2): Releasing active interface [ 274.067832][ T3665] bond1 (unregistering): Released all slaves [ 274.078440][ T3665] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 274.087237][ T3665] veth0_to_bond: left promiscuous mode [ 274.094169][ T3665] bond2 (unregistering): Released all slaves [ 274.106355][ T3665] bond0 (unregistering): Released all slaves [ 274.116126][ T3665] bond3 (unregistering): (slave veth5): Releasing active interface [ 274.124214][ T3665] batadv1: entered promiscuous mode [ 274.131333][ T3665] bond3 (unregistering): (slave batadv1): Releasing active interface [ 274.140554][ T3665] bond3 (unregistering): Released all slaves [ 274.164402][ T3665] batman_adv: batadv0: Removing interface: macvtap1 [ 274.177186][ T3665] bond4 (unregistering): (slave geneve2): Releasing active interface [ 274.186249][ T3665] geneve2 (unregistering): left allmulticast mode [ 274.377931][ T3665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.387661][ T3665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.398032][ T3665] bond0 (unregistering): Released all slaves [ 274.406707][ T3665] bond1 (unregistering): (slave veth5): Releasing backup interface [ 274.415308][ T3665] bond1 (unregistering): Released all slaves [ 274.425182][ T3665] bond2 (unregistering): Released all slaves [ 274.434888][ T3665] bond3 (unregistering): Released all slaves [ 274.446235][ T3665] bond4 (unregistering): Released all slaves [ 274.455861][ T3665] bond5 (unregistering): Released all slaves [ 274.465541][ T3665] bond6 (unregistering): Released all slaves [ 274.505824][ T28] kauditd_printk_skb: 21802 callbacks suppressed [ 274.505846][ T28] audit: type=1400 audit(1781583864.920:23698): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 274.530013][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.538711][ T28] audit: type=1400 audit(1781583864.920:23699): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 274.550788][ T3021] audit: audit_lost=54 audit_rate_limit=0 audit_backlog_limit=64 [ 274.566447][ T28] audit: type=1400 audit(1781583864.920:23700): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 274.577401][ T3021] audit: backlog limit exceeded [ 274.595967][ T28] audit: type=1400 audit(1781583864.920:23701): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 274.606549][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 274.621892][ T28] audit: type=1400 audit(1781583864.920:23702): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 274.628241][ T3021] audit: audit_lost=55 audit_rate_limit=0 audit_backlog_limit=64 [ 274.657444][ T3665] tipc: Disabling bearer [ 274.663086][ T3665] tipc: Disabling bearer [ 274.668685][ T3665] tipc: Left network mode [ 274.673528][ T3665] tipc: Disabling bearer [ 274.679346][ T3665] tipc: Left network mode [ 274.686121][ T3665] hsr_slave_0: left promiscuous mode [ 274.691839][ T3665] hsr_slave_1: left promiscuous mode [ 274.697803][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.705521][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.715084][ T3665] hsr_slave_0: left promiscuous mode [ 274.720963][ T3665] hsr_slave_1: left promiscuous mode [ 274.726859][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.737069][ T3665] batadv0: left allmulticast mode [ 274.742259][ T3665] batadv0: left promiscuous mode [ 274.747563][ T3665] veth0_macvtap: left promiscuous mode [ 274.802901][ T3665] team0 (unregistering): Port device team_slave_1 removed [ 274.816523][ T3665] team0 (unregistering): Port device team_slave_0 removed [ 275.400765][ T3665] IPVS: stop unused estimator thread 0... [ 275.407052][ T3665] IPVS: stop unused estimator thread 0... [ 275.915998][ T3665] net_ratelimit: 18 callbacks suppressed [ 275.916014][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 276.035603][ T3622] bond2: (slave bridge2): failed to get link speed/duplex [ 276.155594][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 276.275602][ T3622] bond2: (slave bridge2): failed to get link speed/duplex [ 276.385661][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 276.495609][ T3622] bond2: (slave bridge2): failed to get link speed/duplex [ 276.605606][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 276.715632][ T3622] bond2: (slave bridge2): failed to get link speed/duplex [ 276.835621][ T3665] bond2: (slave bridge2): failed to get link speed/duplex [ 276.945601][ T3622] bond2: (slave bridge2): failed to get link speed/duplex [ 279.515714][ T28] kauditd_printk_skb: 43016 callbacks suppressed [ 279.515822][ T28] audit: type=1400 audit(1781583869.930:66718): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.533190][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 279.543976][ T28] audit: type=1400 audit(1781583869.930:66719): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.550353][ T3021] audit: audit_lost=56 audit_rate_limit=0 audit_backlog_limit=64 [ 279.571655][ T28] audit: type=1400 audit(1781583869.930:66720): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.580160][ T3021] audit: backlog limit exceeded [ 279.600720][ T28] audit: type=1400 audit(1781583869.930:66721): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.606279][ T3021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 279.626623][ T28] audit: type=1400 audit(1781583869.930:66722): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 279.633069][ T3021] audit: audit_lost=57 audit_rate_limit=0 audit_backlog_limit=64 [ 280.955615][ T3622] net_ratelimit: 34 callbacks suppressed [ 280.955636][ T3622] bond2: (slave bridge2): failed to get link speed/duplex [ 281.075649][ T3622] bond2: (slave bridge2): failed to get link speed/duplex [ 281.185790][ T3665] bond2: (slave bridge2): failed to get link speed/duplex