last executing test programs: 2.533929593s ago: executing program 3 (id=145): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="680000001000010029bd7000ffdbdf25000000", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d3000000000000034001680300001802c000c8014000100ffffffff"], 0x68}, 0x1, 0x0, 0x0, 0xc1}, 0x0) getpid() r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x80045510, &(0x7f0000000000)=0x970) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x106, 0xfffffffd, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x2fc}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, 0x0, 0x0, 0xbff, 0x1e, 0x0, 0x38, 0x6a}) 2.476377616s ago: executing program 2 (id=146): r0 = getpgrp(0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x3, &(0x7f0000000f80)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@resgid}]}, 0x8, 0x625, &(0x7f0000002ac0)="$eJzs3c9vFFUcAPDv7PYXrdpCjIoHaWIMJEpLCxhiTIQ7Ifjj5qnSQpBCSVujRRJLghcT48WDiScP4n+hJF49ePXgxZMhIYb0IIbAmpndKdvtbrtdtt3Sfj5h2HkzO/PetP32vX19byaAXWs4/a8QsT8iriYRg1X7uqKyc7j8vqV7188t3Uu3lUrv/5PE9S+SxepzJZXXgcrBDwcj+b0Qsa+4Ot+5hWuXJqanp2Yr6dH5y1dH5xauHb54eeLC1IWpK+Nvjp84fuz4ibEjrV9cMfu37PTNjz8d/OrMhz9+/yAZ++nPM0mcjEeVN6TXVnt4b+s5Z4ZjOEpl96u3p1/XE0947u3i38H85+SxpHYD29b5ys9jd0S8GINRrPpuDsaX73a0cMCmKiWR11HArpO0FP997S8IsMXydkD5s315Wb/VUNjkVgmwFe6eKncAlGO/OyLy+O8q9w1GX9Y30L+UrOjnSSLiCXrmlqV5/PbrmZvpEjX9cHW6DYE2WryR93LX1v9JFptD0Zel+pcKK+K/ULWk299rMf/hmnRz7Q+gHRZvRMRLlfq/JzYU/8NV8f9Ri/mLfwAAAAAAAGif26ci4o164/8Ky+N/euqM/xmIiJNtyH/9v/8V7lRWkjZkB1S5eyri7brjf5fH+A4VK6lns/EA3cn5i9NTRyLiuYg4FN29aXqs5rzVI4QPf73vu0b5V4//S5c0/3wsYOVMd7pqJuJOTsxPPOl1AxF3b0S8nI3/PVDZsnL8T1r/J3Xq/zS+rzaZx77Xbp1ttG/9+Ac2S+mHiIN16//Hze1k7ftzjGbtgdG8VbDaK59/83Oj/MU/dE5a//evHf+9SfX9euY2dv6eiDi60FVqtL/V9n9P8kExFrPz55MY52fHInqS08U839RnE/Pzs+MbKzPsVHk8ZK9j5fg/9Ora/X9JPCy3/6vicE9ELDaZ5wuPBv5qtG84Ir+JmPoftlga/5Nr1/9DK+v/ja+M3xr6pUH2ydmm6v9jWZ1+qLJF/x9UW30/jmYDtCPFBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICnXCEinomkMLK8XiiMjEQMRMTz0V+Ynpmbf/38zCdXJtN92fP/C/mTfgfL6SR//v9QRHRHRJoer6Tz/UcjYm9EfFvck6VHzs1MT3b64gEAAAAAAAAAAAAAAAAAAGCbGMjm/Jd6a+f/p/4udrp0wKbrqryKd9h9ulo+stTb1oIAW671+Aeeds3Hf/emlgPYeo3j//6DUmZLiwNsIe1/2L1ajH9/LoAdQP0Pu1WTfXp9m10OoBPU/wAAAAAAsKPsPXD7jyQiFt/aky2pnso+g/1hZyt0ugBAxxjDC7tX10ynSwB0is/4QLK89l/dyf6NR/8nm1MgAAAAAAAAAAAAAGCVg/vN/4fdau35/8b2w062xvz/esHvdgGwgzR+9Ie6H3Y6n/GBZJ1fBOb/AwAAAAAAAAAAAMA20Hft0sT09NTs3MLTt/JOC0f1drrwixPb4UvX3pVHrR4eyVrv6Y6I7XGB7VpJIqKZN+e34OhgUTv8ewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFj2fwAAAP//st0iDA==") r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000040)=[{0x0}], 0x1, 0x19, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="ac84c1d309", @ANYRES16=r4, @ANYBLOB="01002cbd7000fedbdf250400000008000800ac1414aa0800020003000000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x432002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x69}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10000, 0xcd, 0x1}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.316586345s ago: executing program 1 (id=148): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x28000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000140)={0xf, 0x6, 0x0, 'queue1\x00', 0x6}) 2.237749479s ago: executing program 1 (id=149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x21}, 0x2}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x40, r2, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x40}, 0x4, 0x700000000000000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) socket(0x28, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) 2.164935394s ago: executing program 1 (id=151): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169282, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000880)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000480)=ANY=[@ANYBLOB='-', @ANYRESDEC=r4], 0x27) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) connect$can_j1939(r2, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x4, {0xffff, 0x1}, {0x45, 0x5}, @cond=[{0x2, 0x5388, 0x6, 0x800, 0x80cb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000200)=""/88) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x2) ptrace$pokeuser(0x6, r0, 0x358, 0xafe8) 2.149452835s ago: executing program 2 (id=152): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setreuid(0xee01, 0x0) syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = dup(r0) sendto$packet(r1, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0) ioprio_get$uid(0x3, 0xee01) 2.05403243s ago: executing program 1 (id=154): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x3e, 0x9}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r1, 0xe4776000) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) timer_create(0x3, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000001080)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 2.007744273s ago: executing program 2 (id=155): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000380)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x6) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x2) io_setup(0x3, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000700)='9', 0x1}]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000280)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) clock_gettime(0x0, &(0x7f00000003c0)) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) socket$inet6(0xa, 0x800000000000002, 0x0) setreuid(0x0, 0xee01) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x3e, 0x0, &(0x7f00007d0000)) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b2b, &(0x7f0000000040)) 1.988152974s ago: executing program 1 (id=156): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x3, 0x0, 0x2}) 1.89190375s ago: executing program 3 (id=158): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x3f00, 0x88be, 0x8}}}}}, 0x0) 1.36442074s ago: executing program 3 (id=162): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x3f00, 0x88be, 0x8}}}}}, 0x0) 1.080058827s ago: executing program 2 (id=164): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x2) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 1.046436069s ago: executing program 4 (id=165): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x10001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)={[{0x2b, 'freezer'}]}, 0x9) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) 1.02030481s ago: executing program 2 (id=166): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r5, 0x4, 0x1) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) 1.003585331s ago: executing program 3 (id=167): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x10001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) semtimedop(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)={[{0x2b, 'freezer'}]}, 0x9) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) 945.099225ms ago: executing program 0 (id=168): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x3f00, 0x88be, 0x8}}}}}, 0x0) 901.338127ms ago: executing program 4 (id=169): futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_emit_ethernet(0x5a, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df30c", 0x24, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x6, 0x0, 0x0, {[@generic={0x3, 0x2}, @exp_fastopen={0xfe, 0xc, 0xf989, "000000d27ebc0a2f"}]}}}}}}}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7fff) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) pidfd_send_signal(r2, 0x14, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000004000000000000000000ea"], 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xff, 0x8, 0x5, 0x7, 0x0, 0x5, 0x80122, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x2, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1012, 0x0, 0x12011, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800dd8d0900000000000000020000fc0000000500000000060015000200000014001680100008800c000380050001"], 0x38}}, 0x0) 844.430291ms ago: executing program 4 (id=170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) close(0x3) 818.805862ms ago: executing program 0 (id=171): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x3c673a39b90bcfd2, &(0x7f0000000040), 0x1, 0xbc8, &(0x7f0000001240)="$eJzs3M9rXNUeAPDvvZn8zmvSx+O91/LgBaRVFKdpUyp01boWFXThsjGZlJDpD5MIJnSR1r26EHFRkP4Jgnu7cSW4qAutf0ERixTdtAVH7vxIp5mZNGkmuU36+cDJPeeee+/5fufO5J4LcyeA59Z49ieNOBQR55KI0fr6NCL6qrWBiNXadg/uXZnOShKVyju/J5FExP17V6Ybx0rqy+F6YyAibr2exD8/bh13cXllfqpcLi3U28eWLlw+tri88urchanzpfOliycnXzs5eWpysou53rn8/pf/+/HNo9dufDLx1hcHvk/iTIzU+5rzeEpH168Yj/G116RZISKmtjnYs6Knnk9znklhU7v+VanZsdgAAGiVNs3h/h2j0ROPJm+j8d1PuQYHAAAAdEWlJ6ICAAAA7HOJ+38AAADY5xrfA7h/78p0o+T7jYTddfdsRIzV8m8831zrKcRqdTkQvREx9EcSzY+1JrXdtm08G+mbH0pZie48h7wlq1cj4r/tzn9SzX+s+hR3a/5pREx0Yfzxde29lP+ZLoyfd/4APJ9unq1dyFqvf+na/CfaXP8Kba5dTyPv619j/vegZf73KP+eDvO/tzc5xuGHL9/q1Nc8/3vv019msvGz5baS2oK7VyMOF9rln6zln3TI/1yb47X76Zfh6TvXO42f5Z/l2yi7nX/lRsSR6myuNf+GZKPfJzo2O1cuTdT+tjn+8qmNx28+/1nJxm/cC+yG7PwPxZbOf09j38ubHGPsP78d6tT35PzTX/uSd6u1vvqaj6aWlhaOR/Qlb7SuP7FxLI1tGsfI8n/phY0//+3e/9mLsFp/b2Tvnqv1Zda+tm7M4SMnvn76/HdWlv/M1s5/vTfis02O8dW31z/o1Jd3/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsDWlEjESSFtfqaVosRgxHxL9iKC1fWlx6ZfbShxdnsr6IsehNZ+fKpYmIGK21k6x9vFp/1D6xrj0ZEQcj4vPRwWq7OH2pPJN38gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwZjoiRSNJiRKQR8edomhaLeUcFAAAAdN1Y3gEAAAAAO879PwAAAOx/Lff/hcdaA7sZCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPvSwf/fvJ1ExOrpwWrJ9NX7enONDNhp6eY2G9rpOIDd15N3AEBuCk31SqVSyTEUYJe5xweSJ/QPdOzp73osAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADy7Xjx083YSEaunB6sl01fv6801MmCnpXkHAOSmZ6PO5IkrgD2skHcAQG7c4wO1mf3DSk1r/0DHPfu3PSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe8dItSRpMSLSaj1Ni8WIf0TEWPQms3Pl0kREHIiIn0d7+7P28byDBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOsWl1fmp8rl0oKKikoXK4Oxa2MN1j/MHbbp79y1QSXnf0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAORicXllfqpcLi0s5h0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkLfF5ZX5qXK5tPBYpb9lzXYqeecIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+/g4AAP//RD0Rew==") sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x2a, 0x2c2, &(0x7f00000008c0)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) 747.691396ms ago: executing program 3 (id=172): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0xc000, 0xe, "0062ba7d8200000016001b000200f705096604"}) r1 = syz_open_pts(r0, 0x20000) r2 = dup3(r1, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") socket$nl_route(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000540)={0x100, 0xd0, 0x4, 0x6, 0x18, "e8381d3c39ce1ff81803b95a9c5b202e2f8b0d"}) io_setup(0x8, &(0x7f0000004200)=0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) 611.208184ms ago: executing program 4 (id=173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x3f00, 0x88be, 0x8}}}}}, 0x0) 606.320274ms ago: executing program 0 (id=174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x3f00, 0x88be, 0x8}}}}}, 0x0) 366.280078ms ago: executing program 0 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x3f00, 0x88be, 0x8}}}}}, 0x0) 349.914149ms ago: executing program 4 (id=176): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x10001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000000d7c0d6eb00000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)={[{0x2b, 'freezer'}]}, 0x9) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@gettfilter={0x24, 0x25, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c004}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) 250.093845ms ago: executing program 0 (id=177): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200), &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x180, 0x111, 0x4b4, 0x0, 0x700, 0x288, 0x278, 0x278, 0x288, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1ff0000fe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6, 0x0, 0x0, 0x41}, 0x0, 0x118, 0x180, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@helper={{0x48}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [], 'geneve1\x00', 'vxcan1\x00', {}, {}, 0x8}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x20}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1f, 0x4, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) 243.381755ms ago: executing program 3 (id=178): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 141.322341ms ago: executing program 2 (id=179): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}}}, 0x24}}, 0x0) 101.590313ms ago: executing program 4 (id=180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000000)='bridge0\x00') 64.313416ms ago: executing program 0 (id=181): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 0s ago: executing program 1 (id=182): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000400)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x3f00, 0x88be, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): [ 20.475386][ T29] audit: type=1400 audit(1769869446.195:62): avc: denied { search } for pid=3196 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.497473][ T29] audit: type=1400 audit(1769869446.195:63): avc: denied { search } for pid=3196 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.520488][ T29] audit: type=1400 audit(1769869446.195:64): avc: denied { search } for pid=3196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.543473][ T29] audit: type=1400 audit(1769869446.195:65): avc: denied { search } for pid=3196 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.566492][ T29] audit: type=1400 audit(1769869446.195:66): avc: denied { read open } for pid=3197 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.213' (ED25519) to the list of known hosts. [ 27.066462][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 27.066479][ T29] audit: type=1400 audit(1769869452.785:70): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.095720][ T29] audit: type=1400 audit(1769869452.815:71): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.096400][ T3302] cgroup: Unknown subsys name 'net' [ 27.123557][ T29] audit: type=1400 audit(1769869452.845:72): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.242528][ T3302] cgroup: Unknown subsys name 'cpuset' [ 27.248637][ T3302] cgroup: Unknown subsys name 'rlimit' [ 27.398152][ T29] audit: type=1400 audit(1769869453.115:73): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.422138][ T29] audit: type=1400 audit(1769869453.115:74): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.443101][ T29] audit: type=1400 audit(1769869453.115:75): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.446753][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.463675][ T29] audit: type=1400 audit(1769869453.115:76): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.493269][ T29] audit: type=1400 audit(1769869453.115:77): avc: denied { read } for pid=3043 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.514703][ T29] audit: type=1400 audit(1769869453.115:78): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.522211][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.539577][ T29] audit: type=1400 audit(1769869453.115:79): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.624831][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.700484][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 28.733152][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.758810][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.766148][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.773423][ T3314] bridge_slave_0: entered allmulticast mode [ 28.779814][ T3314] bridge_slave_0: entered promiscuous mode [ 28.801323][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 28.809940][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.817181][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.824515][ T3314] bridge_slave_1: entered allmulticast mode [ 28.830796][ T3314] bridge_slave_1: entered promiscuous mode [ 28.874953][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.886585][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 28.902644][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.937891][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.944996][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.952297][ T3313] bridge_slave_0: entered allmulticast mode [ 28.958599][ T3313] bridge_slave_0: entered promiscuous mode [ 28.969222][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.976390][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.983633][ T3313] bridge_slave_1: entered allmulticast mode [ 28.990014][ T3313] bridge_slave_1: entered promiscuous mode [ 29.014339][ T3314] team0: Port device team_slave_0 added [ 29.020040][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.027238][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.034464][ T3317] bridge_slave_0: entered allmulticast mode [ 29.040877][ T3317] bridge_slave_0: entered promiscuous mode [ 29.058271][ T3314] team0: Port device team_slave_1 added [ 29.063993][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.071038][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.078222][ T3317] bridge_slave_1: entered allmulticast mode [ 29.084872][ T3317] bridge_slave_1: entered promiscuous mode [ 29.091108][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.098206][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.105603][ T3321] bridge_slave_0: entered allmulticast mode [ 29.112083][ T3321] bridge_slave_0: entered promiscuous mode [ 29.119971][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.129259][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.136493][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.143712][ T3321] bridge_slave_1: entered allmulticast mode [ 29.149990][ T3321] bridge_slave_1: entered promiscuous mode [ 29.171980][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.192261][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.199269][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.225314][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.241091][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.248161][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.274104][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.286085][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.311980][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.323211][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.337671][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.344789][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.351940][ T3320] bridge_slave_0: entered allmulticast mode [ 29.358309][ T3320] bridge_slave_0: entered promiscuous mode [ 29.365616][ T3313] team0: Port device team_slave_0 added [ 29.381351][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.394735][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.401938][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.409308][ T3320] bridge_slave_1: entered allmulticast mode [ 29.415845][ T3320] bridge_slave_1: entered promiscuous mode [ 29.422549][ T3313] team0: Port device team_slave_1 added [ 29.433285][ T3317] team0: Port device team_slave_0 added [ 29.448147][ T3321] team0: Port device team_slave_0 added [ 29.463599][ T3314] hsr_slave_0: entered promiscuous mode [ 29.469571][ T3314] hsr_slave_1: entered promiscuous mode [ 29.476399][ T3317] team0: Port device team_slave_1 added [ 29.491333][ T3321] team0: Port device team_slave_1 added [ 29.501934][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.508888][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.534893][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.546835][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.556925][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.583058][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.590028][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.616003][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.634189][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.641176][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.667304][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.678520][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.685538][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.711712][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.742241][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.749204][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.775150][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.786259][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.793238][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.819248][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.836458][ T3320] team0: Port device team_slave_0 added [ 29.860398][ T3313] hsr_slave_0: entered promiscuous mode [ 29.866377][ T3313] hsr_slave_1: entered promiscuous mode [ 29.872250][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 29.877968][ T3313] Cannot create hsr debugfs directory [ 29.892536][ T3320] team0: Port device team_slave_1 added [ 29.921015][ T3321] hsr_slave_0: entered promiscuous mode [ 29.927084][ T3321] hsr_slave_1: entered promiscuous mode [ 29.932921][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 29.938653][ T3321] Cannot create hsr debugfs directory [ 29.954908][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.961915][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.987842][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.015806][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.022856][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.048767][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.069607][ T3317] hsr_slave_0: entered promiscuous mode [ 30.075993][ T3317] hsr_slave_1: entered promiscuous mode [ 30.082134][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 30.087871][ T3317] Cannot create hsr debugfs directory [ 30.152696][ T3320] hsr_slave_0: entered promiscuous mode [ 30.158728][ T3320] hsr_slave_1: entered promiscuous mode [ 30.164637][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 30.170355][ T3320] Cannot create hsr debugfs directory [ 30.248536][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.272265][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.289593][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.300431][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.326028][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.340402][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.348811][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.357968][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.383154][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.403400][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.413435][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.422403][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.451635][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.460164][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.468835][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.483280][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.498283][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.525887][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.537763][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.549261][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.562958][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.574401][ T1987] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.581456][ T1987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.592235][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.607400][ T1987] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.614523][ T1987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.633217][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.660327][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.679154][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.688779][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.703866][ T1987] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.710986][ T1987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.719817][ T1987] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.726929][ T1987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.741098][ T1870] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.748257][ T1870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.778932][ T1870] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.786206][ T1870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.798156][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.835532][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.857310][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.883311][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.890388][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.918270][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.936076][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.943329][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.978034][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.004553][ T1870] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.011652][ T1870] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.023931][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.039347][ T1870] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.046476][ T1870] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.072849][ T3314] veth0_vlan: entered promiscuous mode [ 31.084330][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.102226][ T3314] veth1_vlan: entered promiscuous mode [ 31.114946][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.137739][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.150091][ T3314] veth0_macvtap: entered promiscuous mode [ 31.168086][ T3314] veth1_macvtap: entered promiscuous mode [ 31.212889][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.234397][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.294233][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.317595][ T1870] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.343350][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.356866][ T1870] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.392940][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.397579][ T3321] veth0_vlan: entered promiscuous mode [ 31.414893][ T3317] veth0_vlan: entered promiscuous mode [ 31.423535][ T3313] veth0_vlan: entered promiscuous mode [ 31.437922][ T3313] veth1_vlan: entered promiscuous mode [ 31.451190][ T1870] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.465032][ T3321] veth1_vlan: entered promiscuous mode [ 31.473480][ T3317] veth1_vlan: entered promiscuous mode [ 31.489994][ T3313] veth0_macvtap: entered promiscuous mode [ 31.518769][ T3321] veth0_macvtap: entered promiscuous mode [ 31.531482][ T3317] veth0_macvtap: entered promiscuous mode [ 31.541311][ T3479] process 'syz.2.3' launched './file2' with NULL argv: empty string added [ 31.543493][ C1] hrtimer: interrupt took 87497 ns [ 31.552471][ T3317] veth1_macvtap: entered promiscuous mode [ 31.573738][ T3321] veth1_macvtap: entered promiscuous mode [ 31.582349][ T3313] veth1_macvtap: entered promiscuous mode [ 31.594205][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.609458][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.626588][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.644860][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.654986][ T52] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.668395][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.680228][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.687801][ T374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.696871][ T374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.713055][ T374] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.732216][ T374] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.741112][ T374] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.753612][ T3320] veth0_vlan: entered promiscuous mode [ 31.772747][ T374] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.800056][ T3320] veth1_vlan: entered promiscuous mode [ 31.806828][ T3488] Zero length message leads to an empty skb [ 31.807084][ T374] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.853791][ T374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.870312][ T3320] veth0_macvtap: entered promiscuous mode [ 31.892811][ T3320] veth1_macvtap: entered promiscuous mode [ 31.902560][ T3497] loop1: detected capacity change from 0 to 512 [ 31.910284][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.924160][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.943294][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.950892][ T3497] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.953662][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.004610][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.034200][ T3503] netlink: 'syz.4.10': attribute type 13 has an invalid length. [ 32.047823][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.080073][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 32.080101][ T29] audit: type=1326 audit(1769869457.795:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3501 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 32.109505][ T29] audit: type=1326 audit(1769869457.795:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3501 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 32.112258][ T3497] mmap: syz.1.2 (3497) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.133024][ T29] audit: type=1326 audit(1769869457.795:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3501 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 32.168229][ T3507] loop3: detected capacity change from 0 to 1024 [ 32.177375][ T3507] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 32.211918][ T3507] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 32.232324][ T29] audit: type=1326 audit(1769869457.795:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3501 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 32.255479][ T29] audit: type=1326 audit(1769869457.795:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3501 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 32.278840][ T29] audit: type=1326 audit(1769869457.795:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3501 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 32.283815][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.301879][ T29] audit: type=1326 audit(1769869457.795:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3501 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 32.333869][ T29] audit: type=1326 audit(1769869457.795:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3501 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 32.339804][ T1870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.357076][ T29] audit: type=1326 audit(1769869457.795:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3501 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 32.357118][ T29] audit: type=1326 audit(1769869457.795:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3501 comm="syz.2.9" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 32.383132][ T3508] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 32.402501][ T3507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.466378][ T3508] syzkaller0: entered promiscuous mode [ 32.472002][ T3508] syzkaller0: entered allmulticast mode [ 32.478820][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.492231][ T1870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.531968][ T3517] bridge_slave_0: left allmulticast mode [ 32.537738][ T3517] bridge_slave_0: left promiscuous mode [ 32.543573][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.561274][ T3519] netlink: 20 bytes leftover after parsing attributes in process `syz.1.15'. [ 32.603518][ T3517] bridge_slave_1: left allmulticast mode [ 32.609391][ T3517] bridge_slave_1: left promiscuous mode [ 32.615196][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.619142][ T3523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 32.635122][ T3517] bond0: (slave bond_slave_0): Releasing backup interface [ 32.635974][ T3525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16'. [ 32.663973][ T3517] bond0: (slave bond_slave_1): Releasing backup interface [ 32.683489][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'. [ 32.694362][ T3517] team0: Port device team_slave_0 removed [ 32.702966][ T3529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16'. [ 32.703475][ T3517] team0: Port device team_slave_1 removed [ 32.728513][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.735999][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.742109][ T3530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 32.751977][ T3530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13'. [ 32.758470][ T3521] netlink: 72 bytes leftover after parsing attributes in process `syz.3.14'. [ 32.770279][ T3531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17'. [ 32.779068][ T3531] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17'. [ 32.791335][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.798757][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.800777][ T3533] netlink: 'syz.2.13': attribute type 10 has an invalid length. [ 32.815376][ T3517] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 32.821422][ T3534] netlink: 'syz.4.17': attribute type 10 has an invalid length. [ 32.840515][ T3534] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.847865][ T3534] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.858072][ T3535] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 32.869891][ T3534] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.877034][ T3534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.884403][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.891576][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.901646][ T3534] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 32.903328][ T3526] netlink: 'syz.3.14': attribute type 13 has an invalid length. [ 32.994280][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.001570][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.034402][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.043450][ T3526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.069494][ T3543] netlink: 'syz.1.18': attribute type 10 has an invalid length. [ 33.107225][ T3528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.128959][ T3529] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.141060][ T3531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.150062][ T3531] bond1: (slave bond0): making interface the new active one [ 33.158643][ T3531] bond1: (slave bond0): Enslaving as an active interface with an up link [ 33.170000][ T3532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.179207][ T3532] bond1: (slave bond0): making interface the new active one [ 33.188402][ T3532] bond1: (slave bond0): Enslaving as an active interface with an up link [ 33.200330][ T3533] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 33.209258][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.216564][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.225437][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.232530][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.239871][ T3535] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.247011][ T3535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.256517][ T3535] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 33.265509][ T3536] bridge0: port 1(syz_tun) entered blocking state [ 33.271999][ T3536] bridge0: port 1(syz_tun) entered disabled state [ 33.278657][ T3536] syz_tun: entered allmulticast mode [ 33.285498][ T3536] syz_tun: entered promiscuous mode [ 33.291175][ T3536] bridge0: port 1(syz_tun) entered blocking state [ 33.297670][ T3536] bridge0: port 1(syz_tun) entered forwarding state [ 33.305110][ T3537] bridge0: port 3(syz_tun) entered blocking state [ 33.311731][ T3537] bridge0: port 3(syz_tun) entered disabled state [ 33.318453][ T3537] syz_tun: entered allmulticast mode [ 33.324480][ T3537] syz_tun: entered promiscuous mode [ 33.330019][ T3537] bridge0: port 3(syz_tun) entered blocking state [ 33.336629][ T3537] bridge0: port 3(syz_tun) entered forwarding state [ 33.350731][ T3531] syz.4.17 (3531) used greatest stack depth: 10328 bytes left [ 33.373016][ T3540] bridge_slave_0: left allmulticast mode [ 33.378986][ T3540] bridge_slave_0: left promiscuous mode [ 33.385108][ T3540] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.399384][ T3540] bridge_slave_1: left allmulticast mode [ 33.405150][ T3540] bridge_slave_1: left promiscuous mode [ 33.410974][ T3540] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.429594][ T3540] bond0: (slave bond_slave_0): Releasing backup interface [ 33.438801][ T3540] bond0: (slave bond_slave_1): Releasing backup interface [ 33.450229][ T3540] team0: Port device team_slave_0 removed [ 33.458434][ T3540] team0: Port device team_slave_1 removed [ 33.465321][ T3540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.469425][ T3532] syz.0.16 (3532) used greatest stack depth: 10264 bytes left [ 33.472803][ T3540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.488935][ T3540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.496551][ T3540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.505484][ T3540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 33.535862][ T3543] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 33.546650][ T374] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.556776][ T374] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.570795][ T3525] bridge0: port 3(syz_tun) entered blocking state [ 33.577484][ T3525] bridge0: port 3(syz_tun) entered disabled state [ 33.584500][ T3525] syz_tun: entered allmulticast mode [ 33.590519][ T3525] syz_tun: entered promiscuous mode [ 33.603005][ T3525] bridge0: port 3(syz_tun) entered blocking state [ 33.609536][ T3525] bridge0: port 3(syz_tun) entered forwarding state [ 33.621853][ T3553] bond1: (slave bond0): Releasing active interface [ 33.635658][ T374] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.645267][ T3546] bridge0: port 1(syz_tun) entered blocking state [ 33.651985][ T3546] bridge0: port 1(syz_tun) entered disabled state [ 33.660179][ T3546] syz_tun: entered allmulticast mode [ 33.675960][ T3546] syz_tun: entered promiscuous mode [ 33.682342][ T3546] bridge0: port 1(syz_tun) entered blocking state [ 33.688952][ T3546] bridge0: port 1(syz_tun) entered forwarding state [ 33.699172][ T374] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.731528][ T3540] syz.1.18 (3540) used greatest stack depth: 10120 bytes left [ 33.864380][ T3573] bond1: option mode: unable to set because the bond device is up [ 33.886077][ T3573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.924877][ T3578] netlink: 'syz.4.29': attribute type 10 has an invalid length. [ 33.941420][ T3573] bond1: (slave bond0): making interface the new active one [ 33.957232][ T3573] bond1: (slave bond0): Enslaving as an active interface with an up link [ 33.975252][ T3580] syz_tun: left allmulticast mode [ 33.980354][ T3580] syz_tun: left promiscuous mode [ 33.985612][ T3580] bridge0: port 1(syz_tun) entered disabled state [ 34.004940][ T3580] bond0: (slave bridge0): Releasing backup interface [ 34.048993][ T3580] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 34.066697][ T3578] bridge0: port 3(syz_tun) entered disabled state [ 34.073421][ T3578] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.080770][ T3578] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.102054][ T3581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.109746][ T3565] netlink: 'syz.0.26': attribute type 13 has an invalid length. [ 34.149001][ T3565] bridge0: port 3(syz_tun) entered disabled state [ 34.162702][ T3587] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.169942][ T3565] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.181846][ T3565] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.211493][ T3587] loop4: detected capacity change from 0 to 512 [ 34.218724][ T3577] netlink: 'syz.2.31': attribute type 13 has an invalid length. [ 34.231260][ T3587] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.33: invalid indirect mapped block 256 (level 2) [ 34.244950][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.256672][ T3565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.262321][ T3587] EXT4-fs (loop4): 2 truncates cleaned up [ 34.270616][ T3587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.285490][ T3580] netlink: 'syz.1.32': attribute type 10 has an invalid length. [ 34.322748][ T3583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.332641][ T3583] bond1: (slave bond0): Enslaving as an active interface with a down link [ 34.369851][ T3577] bridge0: port 1(syz_tun) entered disabled state [ 34.467479][ T3580] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 34.486404][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.507205][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.525156][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.534537][ T374] bond1: (slave bond0): failed to get link speed/duplex [ 34.542045][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.553341][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.562502][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.572078][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.581255][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.633270][ T3596] syz_tun: left allmulticast mode [ 34.638446][ T3596] syz_tun: left promiscuous mode [ 34.643673][ T3596] bridge0: port 1(syz_tun) entered disabled state [ 34.656561][ T3596] bond0: (slave bridge0): Releasing backup interface [ 34.675741][ T3596] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 34.692273][ T12] bond1: (slave bond0): failed to get link speed/duplex [ 34.737480][ T3596] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 34.748403][ T3596] bridge0: port 1(syz_tun) entered blocking state [ 34.754908][ T3596] bridge0: port 1(syz_tun) entered disabled state [ 34.761480][ T3596] syz_tun: entered allmulticast mode [ 34.767820][ T3596] syz_tun: entered promiscuous mode [ 34.801907][ T374] bond1: (slave bond0): failed to get link speed/duplex [ 34.864704][ T3600] macvlan2: entered promiscuous mode [ 34.894012][ T3600] macvlan3: entered promiscuous mode [ 34.902657][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.922179][ T374] bond1: (slave bond0): failed to get link speed/duplex [ 34.962601][ T3604] syz_tun: left allmulticast mode [ 34.967678][ T3604] syz_tun: left promiscuous mode [ 34.972889][ T3604] bridge0: port 3(syz_tun) entered disabled state [ 34.993486][ T3604] bond0: (slave bridge0): Releasing backup interface [ 35.013537][ T3604] bond1: (slave bond0): Releasing active interface [ 35.020738][ T3604] bridge_slave_0: left allmulticast mode [ 35.026438][ T3604] bridge_slave_0: left promiscuous mode [ 35.032375][ T3604] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.059144][ T3604] bridge_slave_1: left allmulticast mode [ 35.064894][ T3604] bridge_slave_1: left promiscuous mode [ 35.070645][ T3604] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.102735][ T3604] bond0: (slave bond_slave_0): Releasing backup interface [ 35.123851][ T3604] bond0: (slave bond_slave_1): Releasing backup interface [ 35.147168][ T3604] team0: Port device team_slave_0 removed [ 35.166509][ T3604] team0: Port device team_slave_1 removed [ 35.181203][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.202060][ T3604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.209864][ T3604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 35.225948][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 35.245330][ T3606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.262961][ T3606] bond1: (slave bond0): Enslaving as an active interface with a down link [ 35.293671][ T3609] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 35.312213][ T3611] bridge0: port 1(syz_tun) entered blocking state [ 35.318731][ T3611] bridge0: port 1(syz_tun) entered disabled state [ 35.331349][ T3611] syz_tun: entered allmulticast mode [ 35.342398][ T3611] syz_tun: entered promiscuous mode [ 35.423223][ T3616] syz_tun: left allmulticast mode [ 35.428362][ T3616] syz_tun: left promiscuous mode [ 35.433605][ T3616] bridge0: port 1(syz_tun) entered disabled state [ 35.442681][ T3616] bond0: (slave bridge0): Releasing backup interface [ 35.453325][ T3616] bond1: (slave bond0): Releasing active interface [ 35.476299][ T3616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.497449][ T3616] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 35.508121][ T3616] bridge0: port 1(syz_tun) entered blocking state [ 35.510172][ T3591] loop1: detected capacity change from 0 to 2048 [ 35.514615][ T3616] bridge0: port 1(syz_tun) entered disabled state [ 35.514772][ T3616] syz_tun: entered allmulticast mode [ 35.515336][ T3616] syz_tun: entered promiscuous mode [ 35.545572][ T3618] macvlan2: entered promiscuous mode [ 35.557637][ T3620] bridge_slave_0: left allmulticast mode [ 35.563404][ T3620] bridge_slave_0: left promiscuous mode [ 35.569064][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.573536][ T3622] loop0: detected capacity change from 0 to 512 [ 35.607571][ T3620] bridge_slave_1: left allmulticast mode [ 35.613281][ T3620] bridge_slave_1: left promiscuous mode [ 35.619104][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.622922][ T3622] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 35.641915][ T3622] EXT4-fs (loop0): orphan cleanup on readonly fs [ 35.650669][ T3622] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.44: Failed to acquire dquot type 1 [ 35.662983][ T3622] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.44: bg 0: block 40: padding at end of block bitmap is not set [ 35.677677][ T3622] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 35.686876][ T3622] EXT4-fs (loop0): 1 truncate cleaned up [ 35.693401][ T3622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.720299][ T3620] bond0: (slave bond_slave_0): Releasing backup interface [ 35.758378][ T3620] bond0: (slave bond_slave_1): Releasing backup interface [ 35.773388][ T3620] team0: Port device team_slave_0 removed [ 35.790270][ T3620] team0: Port device team_slave_1 removed [ 35.799792][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.809354][ T3620] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.820934][ T3618] macvlan3: entered promiscuous mode [ 35.837423][ T3624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.851930][ T3631] bond0: (slave bridge0): Releasing backup interface [ 35.869467][ T3631] bond1: (slave bond0): Releasing active interface [ 35.910962][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.929791][ T3630] syz_tun: left allmulticast mode [ 35.934991][ T3630] syz_tun: left promiscuous mode [ 35.940142][ T3630] bridge0: port 1(syz_tun) entered disabled state [ 35.970251][ T3630] bond0: (slave bridge0): Releasing backup interface [ 36.005135][ T3627] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 36.020695][ T3633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.033652][ T3632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.061253][ T3632] bond1: (slave bond0): Enslaving as an active interface with a down link [ 36.069984][ T3620] bridge0: port 1(syz_tun) entered blocking state [ 36.076521][ T3620] bridge0: port 1(syz_tun) entered disabled state [ 36.090193][ T3620] syz_tun: entered allmulticast mode [ 36.104731][ T3620] syz_tun: entered promiscuous mode [ 36.119020][ T3637] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 36.129278][ T3638] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 36.146400][ T3630] bridge0: port 1(syz_tun) entered blocking state [ 36.152924][ T3630] bridge0: port 1(syz_tun) entered disabled state [ 36.159649][ T3630] syz_tun: entered allmulticast mode [ 36.166014][ T3630] syz_tun: entered promiscuous mode [ 36.173473][ T3631] bridge0: port 1(syz_tun) entered blocking state [ 36.180040][ T3631] bridge0: port 1(syz_tun) entered disabled state [ 36.223274][ T3631] syz_tun: entered allmulticast mode [ 36.231549][ T3631] syz_tun: entered promiscuous mode [ 36.238648][ T3631] bridge0: port 1(syz_tun) entered blocking state [ 36.245206][ T3631] bridge0: port 1(syz_tun) entered forwarding state [ 36.739478][ T3667] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.803763][ T3667] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.865515][ T3667] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.930836][ T3667] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.985862][ T3677] syz_tun: left allmulticast mode [ 36.991140][ T3677] syz_tun: left promiscuous mode [ 36.996384][ T3677] bridge0: port 1(syz_tun) entered disabled state [ 37.047504][ T3677] bond0: (slave bridge0): Releasing backup interface [ 37.063183][ T3677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.081854][ T3677] bond1: (slave bond0): Enslaving as an active interface with a down link [ 37.107317][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.119485][ T29] kauditd_printk_skb: 576 callbacks suppressed [ 37.119502][ T29] audit: type=1400 audit(1769869462.835:719): avc: denied { map } for pid=3682 comm="syz.2.62" path="socket:[4859]" dev="sockfs" ino=4859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 37.145216][ T3677] validate_nla: 11 callbacks suppressed [ 37.145234][ T3677] netlink: 'syz.0.60': attribute type 10 has an invalid length. [ 37.148514][ T374] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.172932][ T3669] netlink: 'syz.3.57': attribute type 13 has an invalid length. [ 37.173789][ T3677] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 37.192111][ T374] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.221767][ T374] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.230419][ T3681] bridge0: port 1(syz_tun) entered blocking state [ 37.236969][ T3681] bridge0: port 1(syz_tun) entered disabled state [ 37.243738][ T3681] syz_tun: entered allmulticast mode [ 37.249974][ T3681] syz_tun: entered promiscuous mode [ 37.301128][ T3688] macvlan3: entered promiscuous mode [ 37.327102][ T3693] syz_tun: left allmulticast mode [ 37.332236][ T3693] syz_tun: left promiscuous mode [ 37.337391][ T3693] bridge0: port 1(syz_tun) entered disabled state [ 37.357358][ T3693] bond0: (slave bridge0): Releasing backup interface [ 37.375083][ T3693] bond1: (slave bond0): Releasing active interface [ 37.412835][ T3695] macvlan3: entered promiscuous mode [ 37.420247][ T3696] bond1: option mode: unable to set because the bond device is up [ 37.431386][ T3699] netlink: 'syz.3.65': attribute type 13 has an invalid length. [ 37.485508][ T3693] netlink: 'syz.1.66': attribute type 10 has an invalid length. [ 37.495804][ T29] audit: type=1400 audit(1769869463.215:720): avc: denied { create } for pid=3701 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.514228][ T3693] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 37.516801][ T29] audit: type=1400 audit(1769869463.235:721): avc: denied { write } for pid=3701 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.527406][ T3703] macvlan2: entered promiscuous mode [ 37.544530][ T29] audit: type=1400 audit(1769869463.235:722): avc: denied { nlmsg_write } for pid=3701 comm="syz.4.68" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.560539][ T3693] bridge0: port 1(syz_tun) entered blocking state [ 37.577121][ T3693] bridge0: port 1(syz_tun) entered disabled state [ 37.601762][ T3693] syz_tun: entered allmulticast mode [ 37.607794][ T3693] syz_tun: entered promiscuous mode [ 37.613556][ T3693] bridge0: port 1(syz_tun) entered blocking state [ 37.620053][ T3693] bridge0: port 1(syz_tun) entered forwarding state [ 37.632667][ T3705] syz_tun: left allmulticast mode [ 37.637853][ T3705] syz_tun: left promiscuous mode [ 37.642975][ T3705] bridge0: port 3(syz_tun) entered disabled state [ 37.659992][ T3708] __nla_validate_parse: 55 callbacks suppressed [ 37.660009][ T3708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 37.675797][ T3705] bond0: (slave bridge0): Releasing backup interface [ 37.712962][ T3713] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 37.721810][ T3713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.69'. [ 37.746325][ T3705] bond1: (slave bond0): Releasing active interface [ 37.757145][ T3711] loop1: detected capacity change from 0 to 8192 [ 37.764548][ T29] audit: type=1400 audit(1769869463.475:723): avc: denied { read } for pid=3706 comm="syz.3.70" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 37.787099][ T29] audit: type=1400 audit(1769869463.475:724): avc: denied { open } for pid=3706 comm="syz.3.70" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 37.810839][ T3711] ======================================================= [ 37.810839][ T3711] WARNING: The mand mount option has been deprecated and [ 37.810839][ T3711] and is ignored by this kernel. Remove the mand [ 37.810839][ T3711] option from the mount to silence this warning. [ 37.810839][ T3711] ======================================================= [ 37.864226][ T3716] netlink: 'syz.4.69': attribute type 10 has an invalid length. [ 37.895737][ T29] audit: type=1400 audit(1769869463.595:725): avc: denied { mounton } for pid=3710 comm="syz.1.71" path="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 37.933227][ T3313] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 37.941190][ T3313] FAT-fs (loop1): Filesystem has been set read-only [ 37.971192][ T29] audit: type=1400 audit(1769869463.635:726): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.990822][ T3705] bridge_slave_0: left allmulticast mode [ 37.996901][ T3705] bridge_slave_0: left promiscuous mode [ 38.002622][ T3705] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.097804][ T3705] bridge_slave_1: left allmulticast mode [ 38.103599][ T3705] bridge_slave_1: left promiscuous mode [ 38.109474][ T3705] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.136424][ T3705] bond0: (slave bond_slave_0): Releasing backup interface [ 38.167360][ T3705] bond0: (slave bond_slave_1): Releasing backup interface [ 38.213371][ T3705] team0: Port device team_slave_0 removed [ 38.222568][ T3721] netlink: 72 bytes leftover after parsing attributes in process `syz.2.73'. [ 38.236562][ T3705] team0: Port device team_slave_1 removed [ 38.250579][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.258104][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.274413][ T3705] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.281965][ T3705] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.291125][ T3725] netlink: 'syz.2.73': attribute type 13 has an invalid length. [ 38.299856][ T3705] net_ratelimit: 17 callbacks suppressed [ 38.299885][ T3705] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 38.367595][ T3703] macvlan3: entered promiscuous mode [ 38.420297][ T3708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 38.442196][ T3717] bridge0: port 1(syz_tun) entered blocking state [ 38.448704][ T3717] bridge0: port 1(syz_tun) entered disabled state [ 38.455807][ T3717] syz_tun: entered allmulticast mode [ 38.461873][ T3717] syz_tun: entered promiscuous mode [ 38.468129][ T3716] bridge0: port 1(syz_tun) entered blocking state [ 38.474654][ T3716] bridge0: port 1(syz_tun) entered forwarding state [ 38.483684][ T3716] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 38.492397][ T3723] netlink: 4 bytes leftover after parsing attributes in process `syz.1.72'. [ 38.555774][ T29] audit: type=1326 audit(1769869464.265:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3731 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77dfaeb9 code=0x7ffc0000 [ 38.578980][ T29] audit: type=1326 audit(1769869464.265:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3731 comm="syz.1.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca77dfaeb9 code=0x7ffc0000 [ 38.619213][ T3730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.74'. [ 38.622239][ T3732] netlink: 24 bytes leftover after parsing attributes in process `syz.1.75'. [ 38.696429][ T3738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 38.701900][ T3739] syz_tun: left allmulticast mode [ 38.710312][ T3739] syz_tun: left promiscuous mode [ 38.715463][ T3739] bridge0: port 1(syz_tun) entered disabled state [ 38.726798][ T3739] bond0: (slave bridge0): Releasing backup interface [ 38.747509][ T3739] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 38.765437][ T3742] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 38.774831][ T3741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 38.786881][ T3740] syz_tun: left allmulticast mode [ 38.792125][ T3740] syz_tun: left promiscuous mode [ 38.797251][ T3740] bridge0: port 1(syz_tun) entered disabled state [ 38.806268][ T3740] bond0: (slave bridge0): Releasing backup interface [ 38.814704][ T3740] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 38.847265][ T3741] hsr_slave_1 (unregistering): left promiscuous mode [ 38.861196][ T3740] netlink: 'syz.2.77': attribute type 10 has an invalid length. [ 38.870442][ T3742] bond1: option mode: unable to set because the bond device is up [ 38.880215][ T3740] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 38.889851][ T3744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.906356][ T3742] netlink: 'syz.4.78': attribute type 10 has an invalid length. [ 38.914496][ T3744] bond1: (slave bond0): making interface the new active one [ 38.923545][ T3744] bond1: (slave bond0): Enslaving as an active interface with an up link [ 38.937304][ T3742] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 38.947962][ T3740] bridge0: port 1(syz_tun) entered blocking state [ 38.954577][ T3740] bridge0: port 1(syz_tun) entered disabled state [ 38.964763][ T3740] syz_tun: entered allmulticast mode [ 38.967104][ T3749] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.970821][ T3740] syz_tun: entered promiscuous mode [ 39.003184][ T3750] syz_tun: left allmulticast mode [ 39.008283][ T3750] syz_tun: left promiscuous mode [ 39.013571][ T3750] bridge0: port 1(syz_tun) entered disabled state [ 39.024069][ T3750] bond0: (slave bridge0): Releasing backup interface [ 39.046912][ T3750] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 39.064464][ T3739] bridge0: port 1(syz_tun) entered blocking state [ 39.071111][ T3739] bridge0: port 1(syz_tun) entered disabled state [ 39.079656][ T3739] syz_tun: entered allmulticast mode [ 39.085958][ T3739] syz_tun: entered promiscuous mode [ 39.091503][ T3739] bridge0: port 1(syz_tun) entered blocking state [ 39.098096][ T3739] bridge0: port 1(syz_tun) entered forwarding state [ 39.105758][ T3751] bond1: option mode: unable to set because the bond device is up [ 39.120822][ T3754] tap0: tun_chr_ioctl cmd 35111 [ 39.137356][ T3750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.163542][ T3750] bond1: (slave bond0): Enslaving as an active interface with a down link [ 39.184822][ T3750] netlink: 'syz.1.82': attribute type 10 has an invalid length. [ 39.202403][ T3750] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 39.216329][ T3750] bridge0: port 1(syz_tun) entered blocking state [ 39.223038][ T3750] bridge0: port 1(syz_tun) entered disabled state [ 39.230095][ T3750] syz_tun: entered allmulticast mode [ 39.236733][ T3750] syz_tun: entered promiscuous mode [ 39.243144][ T3750] bridge0: port 1(syz_tun) entered blocking state [ 39.249647][ T3750] bridge0: port 1(syz_tun) entered forwarding state [ 39.265272][ T3757] syzkaller0: entered promiscuous mode [ 39.270817][ T3757] syzkaller0: entered allmulticast mode [ 39.336233][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 39.375744][ T3775] syz_tun: left allmulticast mode [ 39.380840][ T3775] syz_tun: left promiscuous mode [ 39.386016][ T3775] bridge0: port 1(syz_tun) entered disabled state [ 39.414152][ T3775] bond0: (slave bridge0): Releasing backup interface [ 39.442430][ T3775] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 39.458573][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 39.466083][ T3778] bond1: option mode: unable to set because the bond device is up [ 39.494266][ T3775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.503075][ T3775] bond1: (slave bond0): Enslaving as an active interface with a down link [ 39.515296][ T3775] netlink: 'syz.4.89': attribute type 10 has an invalid length. [ 39.525458][ T3775] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 39.552190][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 39.570329][ T3781] syz_tun: left allmulticast mode [ 39.575623][ T3781] syz_tun: left promiscuous mode [ 39.580772][ T3781] bridge0: port 1(syz_tun) entered disabled state [ 39.590261][ T3781] bond0: (slave bridge0): Releasing backup interface [ 39.600262][ T3781] bond1: (slave bond0): Releasing active interface [ 39.620544][ T3781] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 39.642215][ T3783] bond0: (slave bridge0): Releasing backup interface [ 39.652200][ T3783] bond1: (slave bond0): Releasing active interface [ 39.671980][ T3783] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 39.688502][ T3784] bond1: option mode: unable to set because the bond device is up [ 39.697854][ T3786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.706220][ T3786] bond1: (slave bond0): Enslaving as an active interface with a down link [ 39.715998][ T3781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.725200][ T3781] bond1: (slave bond0): Enslaving as an active interface with a down link [ 39.742985][ T3781] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 39.755642][ T3783] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 39.764833][ T3781] bridge0: port 1(syz_tun) entered blocking state [ 39.771388][ T3781] bridge0: port 1(syz_tun) entered disabled state [ 39.778215][ T3781] syz_tun: entered allmulticast mode [ 39.784181][ T3781] syz_tun: entered promiscuous mode [ 39.789638][ T3781] bridge0: port 1(syz_tun) entered blocking state [ 39.796163][ T3781] bridge0: port 1(syz_tun) entered forwarding state [ 39.804549][ T3783] bridge0: port 1(syz_tun) entered blocking state [ 39.811022][ T3783] bridge0: port 1(syz_tun) entered disabled state [ 39.817640][ T3783] syz_tun: entered allmulticast mode [ 39.823881][ T3783] syz_tun: entered promiscuous mode [ 39.829367][ T3783] bridge0: port 1(syz_tun) entered blocking state [ 39.835881][ T3783] bridge0: port 1(syz_tun) entered forwarding state [ 39.876049][ T3790] syz_tun: left allmulticast mode [ 39.881182][ T3790] syz_tun: left promiscuous mode [ 39.886405][ T3790] bridge0: port 1(syz_tun) entered disabled state [ 39.896589][ T3790] bond0: (slave bridge0): Releasing backup interface [ 39.906794][ T3790] bond1: (slave bond0): Releasing active interface [ 39.928915][ T3791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.939144][ T3791] bond1: (slave bond0): Enslaving as an active interface with a down link [ 40.039274][ T3793] syz_tun: left allmulticast mode [ 40.044403][ T3793] syz_tun: left promiscuous mode [ 40.049523][ T3793] bridge0: port 1(syz_tun) entered disabled state [ 40.066878][ T3793] bond0: (slave bridge0): Releasing backup interface [ 40.081343][ T3793] bond1: (slave bond0): Releasing active interface [ 40.088388][ T3801] loop3: detected capacity change from 0 to 256 [ 40.107208][ T3790] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 40.117204][ T3799] syz_tun: left allmulticast mode [ 40.122298][ T3799] syz_tun: left promiscuous mode [ 40.127543][ T3799] bridge0: port 1(syz_tun) entered disabled state [ 40.159011][ T3799] bond0: (slave bridge0): Releasing backup interface [ 40.220325][ T3799] bond1: (slave bond0): Releasing active interface [ 40.374987][ T3820] xt_hashlimit: size too large, truncated to 1048576 [ 41.191208][ T3790] bridge0: port 1(syz_tun) entered blocking state [ 41.197790][ T3790] bridge0: port 1(syz_tun) entered disabled state [ 41.205036][ T3790] syz_tun: entered allmulticast mode [ 41.211142][ T3790] syz_tun: entered promiscuous mode [ 41.217152][ T3790] bridge0: port 1(syz_tun) entered blocking state [ 41.223640][ T3790] bridge0: port 1(syz_tun) entered forwarding state [ 41.263397][ T3818] syz_tun: left allmulticast mode [ 41.268505][ T3818] syz_tun: left promiscuous mode [ 41.273773][ T3818] bridge0: port 1(syz_tun) entered disabled state [ 41.287751][ T3818] bond0: (slave bridge0): Releasing backup interface [ 41.351661][ T1694] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.372119][ T1694] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.395294][ T1694] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.413763][ T1694] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.549634][ T3842] syz_tun: left allmulticast mode [ 41.554772][ T3842] syz_tun: left promiscuous mode [ 41.559898][ T3842] bridge0: port 1(syz_tun) entered disabled state [ 41.593184][ T3842] bond0: (slave bridge0): Releasing backup interface [ 41.626128][ T3842] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 41.637193][ T3845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.648740][ T3845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.657977][ T3845] bond1: (slave bond0): Enslaving as an active interface with a down link [ 41.669273][ T3842] bridge0: port 1(syz_tun) entered blocking state [ 41.675932][ T3842] bridge0: port 1(syz_tun) entered disabled state [ 41.700602][ T3842] syz_tun: entered allmulticast mode [ 41.713862][ T3842] syz_tun: entered promiscuous mode [ 41.727218][ T3843] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 41.748071][ T3843] bridge0: port 1(syz_tun) entered blocking state [ 41.754743][ T3843] bridge0: port 1(syz_tun) entered disabled state [ 41.798186][ T3843] syz_tun: entered allmulticast mode [ 41.812531][ T3843] syz_tun: entered promiscuous mode [ 42.040103][ T3859] syz.0.115 uses obsolete (PF_INET,SOCK_PACKET) [ 42.159436][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 42.159546][ T29] audit: type=1400 audit(1769869467.875:1058): avc: denied { write } for pid=3833 comm="syz.1.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 42.223299][ T3861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3861 comm=syz.0.116 [ 42.389731][ T3866] syz_tun: left allmulticast mode [ 42.394886][ T3866] syz_tun: left promiscuous mode [ 42.400049][ T3866] bridge0: port 1(syz_tun) entered disabled state [ 42.428459][ T3866] bond0: (slave bridge0): Releasing backup interface [ 42.443040][ T3866] bond1: (slave bond0): Releasing active interface [ 42.453939][ T3864] validate_nla: 7 callbacks suppressed [ 42.453955][ T3864] netlink: 'syz.0.117': attribute type 13 has an invalid length. [ 42.468136][ T3868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.501312][ T3866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.513723][ T3866] bond1: (slave bond0): Enslaving as an active interface with a down link [ 42.544321][ T3866] bridge0: port 1(syz_tun) entered blocking state [ 42.551020][ T3866] bridge0: port 1(syz_tun) entered disabled state [ 42.571823][ T3866] syz_tun: entered allmulticast mode [ 42.580728][ T3866] syz_tun: entered promiscuous mode [ 42.609582][ T3871] syz_tun: left allmulticast mode [ 42.614701][ T3871] syz_tun: left promiscuous mode [ 42.619888][ T3871] bridge0: port 1(syz_tun) entered disabled state [ 42.627920][ T3871] bond1: (slave bond0): Releasing active interface [ 42.649065][ T3871] bond1: option mode: unable to set because the bond device is up [ 42.658924][ T3871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.667874][ T3871] bond1: (slave bond0): Enslaving as an active interface with a down link [ 42.686832][ T3871] netlink: 'syz.2.119': attribute type 10 has an invalid length. [ 42.696881][ T3871] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 42.719273][ T3871] bridge0: port 1(syz_tun) entered blocking state [ 42.725901][ T3871] bridge0: port 1(syz_tun) entered disabled state [ 42.739877][ T3871] syz_tun: entered allmulticast mode [ 42.745911][ T3871] syz_tun: entered promiscuous mode [ 42.753919][ T3875] bond1: (slave bond0): Releasing active interface [ 42.763881][ T3875] __nla_validate_parse: 38 callbacks suppressed [ 42.763897][ T3875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 42.805746][ T3882] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 42.819283][ T29] audit: type=1400 audit(1769869468.535:1059): avc: denied { mounton } for pid=3881 comm="syz.3.125" path="/28/bus" dev="tmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.849837][ T3886] loop3: detected capacity change from 0 to 512 [ 42.859665][ T3886] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 42.870319][ T3886] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.127: casefold flag without casefold feature [ 42.883541][ T3886] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.127: couldn't read orphan inode 15 (err -117) [ 42.896713][ T3886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.918160][ T29] audit: type=1326 audit(1769869468.635:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 42.941564][ T29] audit: type=1326 audit(1769869468.635:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 43.005467][ T3895] syzkaller0: entered promiscuous mode [ 43.010973][ T3895] syzkaller0: entered allmulticast mode [ 43.015540][ T29] audit: type=1326 audit(1769869468.665:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 43.040013][ T29] audit: type=1326 audit(1769869468.665:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 43.063603][ T29] audit: type=1326 audit(1769869468.665:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 43.091075][ T29] audit: type=1326 audit(1769869468.665:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 43.114591][ T29] audit: type=1326 audit(1769869468.665:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 43.138271][ T29] audit: type=1326 audit(1769869468.665:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.2.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb82000aeb9 code=0x7ffc0000 [ 43.220660][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.286531][ T3911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.134'. [ 43.304158][ T3911] 8021q: adding VLAN 0 to HW filter on device bond2 [ 43.321973][ T3911] ip6erspan0: entered promiscuous mode [ 43.330245][ T3911] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 43.340753][ T1987] net_ratelimit: 34 callbacks suppressed [ 43.340773][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 43.361917][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 43.401898][ T3911] macvlan3: entered promiscuous mode [ 43.407479][ T3911] bond2: (slave macvlan3): Error -98 calling set_mac_address [ 43.483707][ T374] bond1: (slave bond0): failed to get link speed/duplex [ 43.531518][ T37] bond1: (slave bond0): failed to get link speed/duplex [ 43.591759][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 43.651758][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 43.674012][ T3923] loop2: detected capacity change from 0 to 1024 [ 43.922730][ T374] bond1: (slave bond0): failed to get link speed/duplex [ 43.930827][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 44.031978][ T1694] bond1: (slave bond0): failed to get link speed/duplex [ 44.041679][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 44.086584][ T3923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.098793][ T3923] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.184525][ T3930] loop0: detected capacity change from 0 to 512 [ 44.222294][ T3930] EXT4-fs (loop0): invalid inodes per group: 0 [ 44.222294][ T3930] [ 44.252847][ T3932] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.137: Freeing blocks not in datazone - block = 0, count = 16 [ 44.389380][ T3935] loop4: detected capacity change from 0 to 2048 [ 44.457680][ T3935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.501424][ T3935] autofs4:pid:3935:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.1869771886), cmd(0xc0189379) [ 44.515685][ T3935] autofs4:pid:3935:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189379) [ 44.568833][ T3944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.144'. [ 44.587727][ T1987] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 112: padding at end of block bitmap is not set [ 44.636725][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.642032][ T1987] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 44.658133][ T1987] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.658133][ T1987] [ 44.700958][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.782804][ T3955] loop2: detected capacity change from 0 to 1024 [ 44.812864][ T3955] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 44.830863][ T3955] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 44.854392][ T3955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.914882][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.003611][ T3965] loop4: detected capacity change from 0 to 4096 [ 45.016040][ T3947] netlink: 72 bytes leftover after parsing attributes in process `syz.3.145'. [ 45.043061][ T3965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.093021][ T3947] netlink: 'syz.3.145': attribute type 13 has an invalid length. [ 45.147458][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.187269][ T3977] syz_tun: left allmulticast mode [ 45.192541][ T3977] syz_tun: left promiscuous mode [ 45.197692][ T3977] bridge0: port 1(syz_tun) entered disabled state [ 45.234138][ T3977] bond0: (slave bridge0): Releasing backup interface [ 45.243216][ T3981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 45.248970][ T3979] syz_tun: left allmulticast mode [ 45.257131][ T3979] syz_tun: left promiscuous mode [ 45.262528][ T3979] bridge0: port 1(syz_tun) entered disabled state [ 45.279416][ T3982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 45.292222][ T3979] bond0: (slave bridge0): Releasing backup interface [ 45.308784][ T3977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 45.317893][ T3977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 45.336595][ T3985] loop0: detected capacity change from 0 to 1024 [ 45.346971][ T3979] bond1: (slave bond0): Releasing active interface [ 45.358307][ T3985] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 45.372152][ T3986] netlink: 'syz.3.158': attribute type 10 has an invalid length. [ 45.398983][ T3985] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 45.432174][ T3985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.452287][ T3981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 45.479317][ T3982] bond1: option mode: unable to set because the bond device is up [ 45.488621][ T3977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.546071][ T3977] bond2: (slave bond0): Enslaving as an active interface with a down link [ 45.557332][ T3986] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 45.596302][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.685995][ T3991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.160'. [ 45.718086][ T3995] bond0: (slave bridge0): Releasing backup interface [ 45.739748][ T3995] bond2: (slave bond0): Releasing active interface [ 45.753399][ T3996] netlink: 'syz.4.160': attribute type 10 has an invalid length. [ 45.775341][ T3991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.805063][ T3991] bond1: (slave bond0): Enslaving as an active interface with a down link [ 45.816402][ T3996] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 45.826932][ T3995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.844138][ T3995] bond2: (slave bond0): Enslaving as an active interface with a down link [ 45.854652][ T4000] bridge0: port 1(syz_tun) entered blocking state [ 45.861233][ T4000] bridge0: port 1(syz_tun) entered disabled state [ 45.878204][ T3997] netlink: 'syz.3.162': attribute type 10 has an invalid length. [ 45.892252][ T4000] syz_tun: entered allmulticast mode [ 45.902777][ T4000] syz_tun: entered promiscuous mode [ 45.908332][ T4000] bridge0: port 1(syz_tun) entered blocking state [ 45.914821][ T4000] bridge0: port 1(syz_tun) entered forwarding state [ 45.946701][ T3995] bridge0: port 1(syz_tun) entered blocking state [ 45.953335][ T3995] bridge0: port 1(syz_tun) entered disabled state [ 45.959899][ T3995] syz_tun: entered allmulticast mode [ 45.965826][ T3995] syz_tun: entered promiscuous mode [ 46.007160][ T3997] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 46.139251][ T4015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.153268][ T4015] bond1: (slave bond0): Enslaving as an active interface with a down link [ 46.194603][ T4015] netlink: 'syz.0.168': attribute type 10 has an invalid length. [ 46.251512][ T4020] syzkaller0: entered promiscuous mode [ 46.257126][ T4020] syzkaller0: entered allmulticast mode [ 46.334418][ T4022] loop0: detected capacity change from 0 to 4096 [ 46.377108][ T4022] loop0: detected capacity change from 0 to 256 [ 46.408954][ T4025] loop3: detected capacity change from 0 to 2048 [ 46.476326][ T4025] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.501952][ T4032] bond1: (slave bond0): Releasing active interface [ 46.543255][ T4029] bond1: option mode: unable to set because the bond device has slaves [ 46.565927][ T4032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.607398][ T4029] netlink: 'syz.4.173': attribute type 10 has an invalid length. [ 46.625770][ T4032] netlink: 'syz.0.174': attribute type 10 has an invalid length. [ 46.644285][ T4029] bridge0: port 1(syz_tun) entered disabled state [ 46.732259][ T4036] bond1: option mode: unable to set because the bond device is up [ 46.757599][ T4036] netlink: 'syz.0.175': attribute type 10 has an invalid length. [ 46.822259][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.880781][ T4040] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 46.898656][ T4042] EXT4-fs: Ignoring removed oldalloc option [ 46.904664][ T4042] EXT4-fs: Ignoring removed bh option [ 46.949356][ T4042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.022757][ T4048] syz_tun: left allmulticast mode [ 47.027975][ T4048] syz_tun: left promiscuous mode [ 47.033147][ T4048] bridge0: port 1(syz_tun) entered disabled state [ 47.091537][ T4051] ================================================================== [ 47.094596][ T4048] bond0: (slave bridge0): Releasing backup interface [ 47.099667][ T4051] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 47.113548][ T4051] [ 47.115886][ T4051] write to 0xffff8881006565cc of 4 bytes by task 4042 on cpu 1: [ 47.123540][ T4051] xas_set_mark+0x12b/0x140 [ 47.128162][ T4051] __folio_start_writeback+0x17b/0x370 [ 47.133645][ T4051] ext4_bio_write_folio+0x5ad/0x9f0 [ 47.138882][ T4051] mpage_process_page_bufs+0x4a1/0x620 [ 47.144368][ T4051] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 47.150205][ T4051] ext4_do_writepages+0x9f6/0x2800 [ 47.155347][ T4051] ext4_writepages+0x18f/0x320 [ 47.160156][ T4051] do_writepages+0x1c6/0x310 [ 47.164780][ T4051] file_write_and_wait_range+0x178/0x2f0 [ 47.170448][ T4051] generic_buffers_fsync_noflush+0x45/0x130 [ 47.176369][ T4051] ext4_sync_file+0x1aa/0x680 [ 47.181065][ T4051] vfs_fsync_range+0x10d/0x130 [ 47.185938][ T4051] ext4_buffered_write_iter+0x34f/0x3c0 [ 47.191532][ T4051] ext4_file_write_iter+0x380/0xf70 [ 47.196852][ T4051] iter_file_splice_write+0x6bc/0xa80 [ 47.202254][ T4051] direct_splice_actor+0x156/0x2a0 [ 47.207391][ T4051] splice_direct_to_actor+0x311/0x670 [ 47.212797][ T4051] do_splice_direct+0x119/0x1a0 [ 47.217670][ T4051] do_sendfile+0x382/0x650 [ 47.222110][ T4051] __x64_sys_sendfile64+0x105/0x150 [ 47.227333][ T4051] x64_sys_call+0x2db1/0x3000 [ 47.232041][ T4051] do_syscall_64+0xc0/0x2a0 [ 47.236585][ T4051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.242502][ T4051] [ 47.244843][ T4051] read to 0xffff8881006565cc of 4 bytes by task 4051 on cpu 0: [ 47.252404][ T4051] xas_find_marked+0x5d7/0x620 [ 47.257193][ T4051] filemap_get_folios_tag+0xfa/0x510 [ 47.262516][ T4051] mpage_prepare_extent_to_map+0x328/0xc50 [ 47.268352][ T4051] ext4_do_writepages+0x9f6/0x2800 [ 47.273497][ T4051] ext4_writepages+0x18f/0x320 [ 47.278332][ T4051] do_writepages+0x1c6/0x310 [ 47.283039][ T4051] file_write_and_wait_range+0x178/0x2f0 [ 47.288777][ T4051] generic_buffers_fsync_noflush+0x45/0x130 [ 47.294764][ T4051] ext4_sync_file+0x1aa/0x680 [ 47.299454][ T4051] vfs_fsync_range+0x10d/0x130 [ 47.304225][ T4051] ext4_buffered_write_iter+0x34f/0x3c0 [ 47.309789][ T4051] ext4_file_write_iter+0x380/0xf70 [ 47.315033][ T4051] iter_file_splice_write+0x6bc/0xa80 [ 47.320413][ T4051] direct_splice_actor+0x156/0x2a0 [ 47.325532][ T4051] splice_direct_to_actor+0x311/0x670 [ 47.330907][ T4051] do_splice_direct+0x119/0x1a0 [ 47.335770][ T4051] do_sendfile+0x382/0x650 [ 47.340290][ T4051] __x64_sys_sendfile64+0x105/0x150 [ 47.345495][ T4051] x64_sys_call+0x2db1/0x3000 [ 47.350179][ T4051] do_syscall_64+0xc0/0x2a0 [ 47.354785][ T4051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.360689][ T4051] [ 47.363034][ T4051] value changed: 0x0a000021 -> 0x00000021 [ 47.368750][ T4051] [ 47.371071][ T4051] Reported by Kernel Concurrency Sanitizer on: [ 47.377227][ T4051] CPU: 0 UID: 0 PID: 4051 Comm: syz.3.178 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.386868][ T4051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 47.397017][ T4051] ================================================================== [ 47.420834][ T4048] bond1: (slave bond0): Releasing active interface [ 47.445806][ T4052] bond1: option mode: unable to set because the bond device is up [ 47.453771][ T4053] bond1: option mode: unable to set because the bond device is up [ 47.468687][ T4056] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 47.477747][ T4060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.489357][ T4055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.512280][ T4055] bond1: (slave bond0): Enslaving as an active interface with a down link [ 47.533548][ T4048] bridge0: port 1(syz_tun) entered blocking state [ 47.534453][ T4055] validate_nla: 1 callbacks suppressed [ 47.534468][ T4055] netlink: 'syz.1.182': attribute type 10 has an invalid length. [ 47.540271][ T4048] bridge0: port 1(syz_tun) entered disabled state [ 47.542108][ T4048] syz_tun: entered allmulticast mode [ 47.566862][ T4048] syz_tun: entered promiscuous mode [ 47.572850][ T4048] bridge0: port 1(syz_tun) entered blocking state [ 47.579331][ T4048] bridge0: port 1(syz_tun) entered forwarding state [ 47.589371][ T4055] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 47.796109][ T4051] syz.3.178 (4051) used greatest stack depth: 9176 bytes left [ 47.804534][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.381721][ T374] net_ratelimit: 78 callbacks suppressed [ 48.381737][ T374] bond1: (slave bond0): failed to get link speed/duplex [ 48.401674][ T374] bond2: (slave bond0): failed to get link speed/duplex [ 48.431681][ T374] bond1: (slave bond0): failed to get link speed/duplex [ 48.501773][ T374] bond1: (slave bond0): failed to get link speed/duplex [ 48.511727][ T1987] bond2: (slave bond0): failed to get link speed/duplex [ 48.541685][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 48.611703][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 48.621697][ T1987] bond2: (slave bond0): failed to get link speed/duplex [ 48.651790][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 48.721728][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 53.401666][ T1987] net_ratelimit: 126 callbacks suppressed [ 53.401689][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 53.414450][ T1987] bond2: (slave bond0): failed to get link speed/duplex [ 53.471716][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 53.521686][ T1987] bond2: (slave bond0): failed to get link speed/duplex [ 53.541667][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 53.581670][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 53.631713][ T37] bond2: (slave bond0): failed to get link speed/duplex [ 53.661675][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 53.691652][ T1987] bond1: (slave bond0): failed to get link speed/duplex [ 53.741693][ T1987] bond2: (slave bond0): failed to get link speed/duplex