last executing test programs: 1.479547922s ago: executing program 0 (id=1): mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x406, r1) syz_genetlink_get_family_id$devlink(0x0, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x4, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xfffffffd}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x14, 0xe, [@ext_channel_switch={0x1c, 0x4, {0xfc, 0x0, 0x38}}, @random_vendor={0xdd, 0x8, "f9b4597add28936f"}]}]}, 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r4, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0xffffffff, 0x6, 0x5, {0xa, 0x4e20, 0x1000003, @loopback, 0x2}}}, 0x3a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a0000000002000000000000180009"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt(r0, 0x111, 0x1, 0x0, &(0x7f0000000040)) 1.454712463s ago: executing program 2 (id=3): r0 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) 1.430156424s ago: executing program 4 (id=5): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x1c, 0x19, 0x15, 0x3, 0xffffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x02'}]}, 0x1c}], 0x1}, 0x0) 1.313948307s ago: executing program 4 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.313682416s ago: executing program 2 (id=7): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfb, {{@in6=@mcast2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x200000000, 0x0, 0x1c6, 0x7, 0x0, 0x0, 0x5, 0x543}, {0x7, 0x7fffffffffffffff}, {0x0, 0x0, 0x4}, 0x70fd26, 0x3500, 0x2, 0x4, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x40090}, 0x4000010) 1.268014428s ago: executing program 1 (id=2): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xe}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0xffffffff, 0xffffffff, 0x1, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x3, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x98, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008007, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x9, 0x2f, 0xe, 0x312, 0x78, 0x4000ea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x6, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x5, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xfff, 0xa2, 0x7, 0x9, 0x405, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x80001, 0xa, 0x0, 0x5, 0x1c, 0x101, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0xa, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x6, 0x2000004, 0x7fff, 0xfffc, 0xa620, 0x2, 0x5, 0x800000, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x6, 0xff, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d697, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xff, 0x200, 0xffff3441, 0xfff]}, 0x45c) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) fdatasync(r2) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 1.151132691s ago: executing program 3 (id=4): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffb) r3 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) r6 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) pwrite64(r6, &(0x7f0000000040)='-N', 0x2, 0xd84) eventfd2(0xbd49, 0x800) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, 0x0, 0x1) io_uring_enter(r3, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) 1.069832153s ago: executing program 2 (id=8): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x138, 0x18, 0xa01, 0xfffffffc, 0x0, {0x8a}, [@typed={0x5, 0x10a, 0x0, 0x0, @str='\x00'}, @generic="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", @typed={0x4, 0xcf}, @nested={0x4, 0x8f}, @nested={0x4, 0x81}]}, 0x138}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r3, &(0x7f00000002c0)='0', 0x1) 985.817025ms ago: executing program 1 (id=9): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000010428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="88dd0300007e03001400030076657468315f6d61637674617040000008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x36, &(0x7f00000002c0)={@remote, @remote, @void, {@ipv4={0x86dd, @tcp={{0x5, 0x4, 0x0, 0x0, 0xfffffe58, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 777.20582ms ago: executing program 4 (id=10): r0 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 494.394738ms ago: executing program 1 (id=11): r0 = syz_io_uring_setup(0x141c, &(0x7f0000000200)={0x0, 0x2af2, 0x1, 0x1, 0x139}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0, &(0x7f00000001c0)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x7f9d, 0xf427, 0x8, 0x0, 0x0) io_uring_enter(r0, 0x20, 0x20, 0x1, 0x0, 0x0) 0s ago: executing program 4 (id=12): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000025000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x138, 0x18, 0xa01, 0xfffffffc, 0x0, {0x8a}, [@typed={0x5, 0x10a, 0x0, 0x0, @str='\x00'}, @generic="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", @typed={0x4, 0xcf}, @nested={0x4, 0x8f}, @nested={0x4, 0x81}]}, 0x138}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='0', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.67' (ED25519) to the list of known hosts. [ 30.659794][ T30] audit: type=1400 audit(1786730392.946:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.663408][ T277] cgroup: Unknown subsys name 'net' [ 30.682443][ T30] audit: type=1400 audit(1786730392.956:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.709764][ T30] audit: type=1400 audit(1786730392.976:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.710131][ T277] cgroup: Unknown subsys name 'devices' [ 30.822444][ T277] cgroup: Unknown subsys name 'hugetlb' [ 30.828087][ T277] cgroup: Unknown subsys name 'rlimit' [ 30.968378][ T30] audit: type=1400 audit(1786730393.256:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.991576][ T30] audit: type=1400 audit(1786730393.256:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.016388][ T30] audit: type=1400 audit(1786730393.256:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.034497][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 31.048587][ T30] audit: type=1400 audit(1786730393.336:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.074029][ T30] audit: type=1400 audit(1786730393.336:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.109291][ T30] audit: type=1400 audit(1786730393.396:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.110551][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.134808][ T30] audit: type=1400 audit(1786730393.396:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.697196][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.704331][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.711819][ T285] device bridge_slave_0 entered promiscuous mode [ 31.719709][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.726808][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.734234][ T285] device bridge_slave_1 entered promiscuous mode [ 31.847857][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.855068][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.862557][ T286] device bridge_slave_0 entered promiscuous mode [ 31.869187][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.876280][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.883749][ T289] device bridge_slave_0 entered promiscuous mode [ 31.892184][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.899237][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.906705][ T289] device bridge_slave_1 entered promiscuous mode [ 31.913298][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.920430][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.927812][ T286] device bridge_slave_1 entered promiscuous mode [ 31.987245][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.994396][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.001839][ T288] device bridge_slave_0 entered promiscuous mode [ 32.008511][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.015623][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.023016][ T287] device bridge_slave_0 entered promiscuous mode [ 32.036220][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.043349][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.050824][ T288] device bridge_slave_1 entered promiscuous mode [ 32.057329][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.064414][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.071825][ T287] device bridge_slave_1 entered promiscuous mode [ 32.126320][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.133407][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.140737][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.147774][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.238955][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.246065][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.253377][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.260435][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.273665][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.280742][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.288039][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.295097][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.326107][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.333742][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.341710][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.348939][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.356420][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.363609][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.371687][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.379079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.392492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.411283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.419437][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.426497][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.433948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.442194][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.449213][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.460432][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.468737][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.475804][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.494806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.503038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.511326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.519448][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.526505][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.556213][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.564453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.572139][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.580715][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.587765][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.595405][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.603605][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.610679][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.618025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.626232][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.633271][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.640691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.648789][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.655844][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.663681][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.687180][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.695354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.703694][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.711869][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.719801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.728078][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.736092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.744154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.771452][ T285] device veth0_vlan entered promiscuous mode [ 32.778033][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.786845][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.795250][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.803244][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.812212][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.819594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.827292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.835736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.844059][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.851134][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.858531][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.867046][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.875193][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.882253][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.889631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.897977][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.906292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.913838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.921291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.930993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.939386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.949944][ T287] device veth0_vlan entered promiscuous mode [ 32.958300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.967202][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.975369][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.983569][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.991709][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.999728][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.009674][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.017224][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.026903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.035100][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.043183][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.051366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.063429][ T289] device veth0_vlan entered promiscuous mode [ 33.071035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.079135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.088205][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.095710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.109867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.118188][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.128045][ T285] device veth1_macvtap entered promiscuous mode [ 33.139007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.146763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.155235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.166114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.174525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.189158][ T288] device veth0_vlan entered promiscuous mode [ 33.197344][ T287] device veth1_macvtap entered promiscuous mode [ 33.205696][ T289] device veth1_macvtap entered promiscuous mode [ 33.212805][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.220971][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.228355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.236159][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.243940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.252331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.260572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.268713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.276510][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.285418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.302085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.310559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.318868][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.326803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.339741][ T286] device veth0_vlan entered promiscuous mode [ 33.347050][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.354506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.362179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.381921][ T288] device veth1_macvtap entered promiscuous mode [ 33.390977][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.399344][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.400056][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 33.409182][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.422986][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.431445][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.439617][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.448115][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.456435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.466640][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.475081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.491994][ T286] device veth1_macvtap entered promiscuous mode [ 33.529967][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.539289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.556756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.573387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.584376][ T306] blk_update_request: I/O error, dev sda, sector 274742 op 0x1:(WRITE) flags 0x4000 phys_seg 56 prio class 0 [ 33.586648][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.609883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.622235][ T306] blk_update_request: I/O error, dev sda, sector 275248 op 0x1:(WRITE) flags 0x4000 phys_seg 45 prio class 0 [ 33.632359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.643862][ T306] blk_update_request: I/O error, dev sda, sector 275760 op 0x1:(WRITE) flags 0x4000 phys_seg 36 prio class 0 [ 33.646196][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.656857][ T306] blk_update_request: I/O error, dev sda, sector 276272 op 0x1:(WRITE) flags 0x4000 phys_seg 41 prio class 0 [ 33.668644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.676489][ T306] blk_update_request: I/O error, dev sda, sector 276784 op 0x1:(WRITE) flags 0x4000 phys_seg 42 prio class 0 [ 33.695179][ T306] blk_update_request: I/O error, dev sda, sector 277296 op 0x1:(WRITE) flags 0x4000 phys_seg 24 prio class 0 [ 33.715646][ T306] blk_update_request: I/O error, dev sda, sector 277808 op 0x1:(WRITE) flags 0x0 phys_seg 18 prio class 0 [ 33.727127][ T306] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 34749) [ 33.729175][ T324] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 33.744216][ T306] blk_update_request: I/O error, dev sda, sector 277998 op 0x1:(WRITE) flags 0x4000 phys_seg 58 prio class 0 [ 33.767859][ T306] blk_update_request: I/O error, dev sda, sector 278504 op 0x1:(WRITE) flags 0x4000 phys_seg 54 prio class 0 [ 33.779942][ T306] blk_update_request: I/O error, dev sda, sector 279016 op 0x1:(WRITE) flags 0x4000 phys_seg 63 prio class 0 [ 33.797879][ T306] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35045) [ 33.811079][ T306] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35399) [ 33.825572][ T306] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2021 starting block 35486) [ 33.837242][ T306] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139303) [ 33.837358][ T322] Buffer I/O error on device sda1, logical block 35361 [ 33.858641][ T306] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139411) [ 33.877100][ T306] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139424) [ 33.888757][ T306] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139434) [ 33.893619][ T322] Buffer I/O error on device sda1, logical block 35362 [ 33.900624][ T306] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139467) [ 33.909718][ T329] loop3: detected capacity change from 0 to 512 [ 33.926198][ T322] Buffer I/O error on device sda1, logical block 35363 [ 33.929043][ T306] EXT4-fs warning (device sda1): ext4_end_bio:348: I/O error 10 writing to inode 2022 starting block 139486) [ 33.946995][ T322] Buffer I/O error on device sda1, logical block 35364 [ 33.955478][ T322] Buffer I/O error on device sda1, logical block 35365 [ 33.962408][ T322] Buffer I/O error on device sda1, logical block 35366 [ 33.969326][ T322] Buffer I/O error on device sda1, logical block 35367 [ 33.976253][ T322] Buffer I/O error on device sda1, logical block 35368 [ 33.983278][ T322] Buffer I/O error on device sda1, logical block 35369 [ 34.010044][ T322] Buffer I/O error on device sda1, logical block 35370 [ 34.017342][ T329] EXT4-fs (loop3): Test dummy encryption mode enabled [ 34.043336][ T309] Buffer I/O error on dev sda1, logical block 132, lost async page write [ 34.045280][ T329] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.4: inode has both inline data and extents flags [ 34.051862][ T309] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 34.051909][ T309] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 34.066643][ T329] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 34.073347][ T309] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 34.082433][ T329] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 34.093367][ T309] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 34.123170][ T309] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 34.131711][ T309] Buffer I/O error on dev sda1, logical block 159, lost async page write [ 34.140564][ T309] Buffer I/O error on dev sda1, logical block 226, lost async page write [ 34.149034][ T309] Buffer I/O error on dev sda1, logical block 243, lost async page write [ 34.154036][ T337] EXT4-fs error (device sda1): ext4_check_bdev_write_error:218: comm syz.1.9: Error while async write back metadata [ 34.157612][ T309] Buffer I/O error on dev sda1, logical block 261, lost async page write [ 34.179277][ T332] EXT4-fs error (device sda1): ext4_check_bdev_write_error:218: comm syz.2.8: Error while async write back metadata [ 34.193811][ T340] bridge0: port 3(syz_tun) entered blocking state [ 34.201153][ T340] bridge0: port 3(syz_tun) entered disabled state [ 34.212148][ T64] Aborting journal on device sda1-8. [ 34.217621][ T310] EXT4-fs (sda1): I/O error while writing superblock [ 34.218792][ T340] device syz_tun entered promiscuous mode [ 34.231542][ T340] bridge0: port 3(syz_tun) entered blocking state [ 34.238354][ T340] bridge0: port 3(syz_tun) entered forwarding state [ 34.247048][ T64] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 34.255953][ T337] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.9: Detected aborted journal [ 34.267137][ T337] EXT4-fs (sda1): previous I/O error to superblock detected [ 34.276578][ T337] EXT4-fs (sda1): I/O error while writing superblock [ 34.283897][ T337] EXT4-fs (sda1): Remounting filesystem read-only [ 34.290863][ T337] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.9: Detected aborted journal [ 34.302047][ T337] EXT4-fs (sda1): I/O error while writing superblock [ 34.316812][ T337] EXT4-fs (sda1): Remounting filesystem read-only [ 34.330325][ T337] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.9: Detected aborted journal [ 34.341163][ T307] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1: Detected aborted journal [ 34.351973][ T310] EXT4-fs (sda1): I/O error while writing superblock [ 34.361855][ T337] EXT4-fs (sda1): I/O error while writing superblock [ 34.368561][ T337] EXT4-fs (sda1): Remounting filesystem read-only [ 34.376941][ T337] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.9: Detected aborted journal [ 34.387829][ T307] EXT4-fs (sda1): I/O error while writing superblock [ 34.394842][ T337] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.9: Detected aborted journal [ 34.400600][ T334] Write-error on swap-device (8:0:787790) [ 34.406481][ T307] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.1: Detected aborted journal [ 34.411549][ T334] Write-error on swap-device (8:0:787798) [ 34.423454][ T337] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.9: Detected aborted journal [ 34.427955][ T334] Write-error on swap-device (8:0:787806) [ 34.444619][ T334] Write-error on swap-device (8:0:787814) [ 34.450411][ T334] Write-error on swap-device (8:0:787822) [ 34.456179][ T334] Write-error on swap-device (8:0:787830) [ 34.461947][ T334] Write-error on swap-device (8:0:787838) [ 34.467697][ T334] Write-error on swap-device (8:0:787846) [ 34.473470][ T334] Write-error on swap-device (8:0:787854) [ 34.479223][ T334] Write-error on swap-device (8:0:787862) SYZFAIL: failed to send rpc fd=3 want=47032 sent=0 n=-1 (errno 14: Bad address) [ 35.175483][ T277] syz-executor (277) used greatest stack depth: 21280 bytes left [ 35.307235][ T309] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 35.374180][ T350] bridge0: port 3(syz_tun) entered disabled state [ 35.382100][ T350] device syz_tun left promiscuous mode [ 35.387585][ T350] bridge0: port 3(syz_tun) entered disabled state [ 35.544024][ T285] syz-executor (285) used greatest stack depth: 20096 bytes left [ 36.130781][ T306] device bridge_slave_1 left promiscuous mode [ 36.136919][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.144484][ T306] device bridge_slave_0 left promiscuous mode [ 36.150758][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.158580][ T306] device veth1_macvtap left promiscuous mode [ 36.164855][ T306] device veth0_vlan left promiscuous mode [ 37.471507][ T306] device bridge_slave_1 left promiscuous mode [ 37.477630][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.485227][ T306] device bridge_slave_0 left promiscuous mode [ 37.491390][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.499134][ T306] device bridge_slave_1 left promiscuous mode [ 37.505325][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.512767][ T306] device bridge_slave_0 left promiscuous mode [ 37.518870][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.526714][ T306] device bridge_slave_1 left promiscuous mode [ 37.533126][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.540760][ T306] device bridge_slave_0 left promiscuous mode [ 37.546874][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.554864][ T306] device bridge_slave_1 left promiscuous mode [ 37.561056][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.568484][ T306] device bridge_slave_0 left promiscuous mode [ 37.574726][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.583253][ T306] device veth1_macvtap left promiscuous mode [ 37.589256][ T306] device veth0_vlan left promiscuous mode [ 37.595311][ T306] device veth1_macvtap left promiscuous mode [ 37.601327][ T306] device veth0_vlan left promiscuous mode [ 37.607277][ T306] device veth1_macvtap left promiscuous mode [ 37.613331][ T306] device veth0_vlan left promiscuous mode [ 37.619341][ T306] device veth1_macvtap left promiscuous mode [ 37.625589][ T306] device veth0_vlan left promiscuous mode