last executing test programs: 2.904556415s ago: executing program 4 (id=593): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) sendmmsg$inet(r1, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, 0x0, 0x0, 0x12000000, 0x0, 0x0) 2.792299117s ago: executing program 4 (id=606): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000180)={0x1, 0x10}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x0, 0x800, 0x8e6e) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000060c0)={0x34, r8, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r10 = getpid() unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x8020000) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x1f0, 0x1f0, 0xd0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@rand_addr=0x64010101, @private=0xa010102, 0xff000000, 0xff000000, 'bond_slave_0\x00', 'ipvlan0\x00', {}, {}, 0xb314e828b2fce06e, 0x0, 0x10}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x7, 0x2, 0x3, 0x3, 0x4, 0x6], 0x5}, {0xffffffffffffffff, [0x0, 0x4aee1de731b25b79, 0x4, 0x2, 0x3, 0x2], 0x2, 0x2}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x18, 0x1}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x2, 0x1, 0x1, 0x2, 0x1], 0x4, 0x3}, {0x2, [0x7, 0x4, 0x4, 0x6, 0x0, 0xd205d636531791e1], 0x81, 0x4}}}}, {{@ip={@local, @local, 0x0, 0xffffff00, 'pim6reg\x00', 'caif0\x00', {}, {}, 0x33, 0x0, 0x3}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e22], 0x0, 0x0, 0xffff, 0x6}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) r13 = socket(0x10, 0x3, 0x9) connect$netlink(r13, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x14000000) 2.563272851s ago: executing program 4 (id=600): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="513be0c3f01cf8ed54116fd2078015693a77524527d8381d5977d61e3f35eb9c56da1890e1bd5190e46033dbc6a4273aa4f3c072a799e2f029b37521e2d151ac55412e", 0x43}], 0x1, &(0x7f0000001040)=ANY=[], 0xa0}, 0x4004881) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x32126, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket(0x2, 0xa, 0x300) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x30, 0x3, 0x8, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x5, 0x2, 0x1}]]}}}, @IFLA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x1, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) write$binfmt_misc(r3, &(0x7f00000001c0)="3454e9b14280", 0x6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r8 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8002, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0x164a, 0x4c3, 0x43, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 1.930320994s ago: executing program 1 (id=610): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300), 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0xffffffffffffffff}, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x15, 0x0) 1.752501707s ago: executing program 3 (id=611): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x8000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.708519057s ago: executing program 3 (id=612): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}, {0x6, 0x8, 0x4, 0x32f}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) statx(0xffffffffffffff9c, 0x0, 0x0, 0xffff4a9c0080ffff, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xfc, '\x00', @private2}}}}}}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x2714, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x1002, 0x0, 0x3, 0xfffffffd}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x2400c000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000440)={'syztnl2\x00', r2, 0x7800, 0x1, 0xce, 0xd27, {{0x27, 0x4, 0x1, 0x2, 0x9c, 0x68, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1, {[@noop, @timestamp_prespec={0x44, 0x24, 0xe8, 0x3, 0x6, [{@multicast1, 0xfffffffc}, {@multicast2, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x101}, {@private=0xa010101, 0x3}]}, @ssrr={0x89, 0x13, 0xce, [@remote, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0x2}, @cipso={0x86, 0x47, 0xffffffffffffffff, [{0x0, 0x10, "691931b604cd8f26673e7bcd7785"}, {0x5, 0x5, "aa44b2"}, {0x4c73968277076575, 0xd, "3434d57c6cc79c0509eb88"}, {0x1, 0x3, 'W'}, {0x6, 0x3, "86"}, {0x0, 0xe, "1cb1fd187a418ac83e7610f9"}, {0x0, 0x2}, {0x6, 0x9, "dd99c4e293f571"}]}, @ra={0x94, 0x4, 0x1}]}}}}}) syz_clone3(&(0x7f0000001e80)={0x100, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.707820868s ago: executing program 4 (id=613): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="513be0c3f01cf8ed54116fd2078015693a77524527d8381d5977d61e3f35eb9c56da1890e1bd5190e46033dbc6a4273aa4f3c072a799e2f029b37521e2d151ac55412e", 0x43}], 0x1, &(0x7f0000001040)=ANY=[], 0xa0}, 0x4004881) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x32126, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket(0x2, 0xa, 0x300) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x30, 0x3, 0x8, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x5, 0x2, 0x1}]]}}}, @IFLA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x1, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) write$binfmt_misc(r3, &(0x7f00000001c0)="3454e9b14280", 0x6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r8 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8002, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0x164a, 0x4c3, 0x43, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r11], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 1.614219489s ago: executing program 3 (id=614): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x6}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 1.549574351s ago: executing program 3 (id=615): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="513be0c3f01cf8ed54116fd2078015693a77524527d8381d5977d61e3f35eb9c56da1890e1bd5190e46033dbc6a4273aa4f3c072a799e2f029b37521e2d151ac55412e", 0x43}], 0x1, &(0x7f0000001040)=ANY=[], 0xa0}, 0x4004881) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x32126, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket(0x2, 0xa, 0x300) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x30, 0x3, 0x8, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x5, 0x2, 0x1}]]}}}, @IFLA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x1, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) write$binfmt_misc(r3, &(0x7f00000001c0)="3454e9b14280", 0x6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r8 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8002, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0x164a, 0x4c3, 0x43, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r11], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 1.316292135s ago: executing program 0 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000faffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.315375055s ago: executing program 0 (id=622): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="513be0c3f01cf8ed54116fd2078015693a77524527d8381d5977d61e3f35eb9c56da1890e1bd5190e46033dbc6a4273aa4f3c072a799e2f029b37521e2d151ac55412e", 0x43}], 0x1, &(0x7f0000001040)=ANY=[], 0xa0}, 0x4004881) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x32126, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket(0x2, 0xa, 0x300) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x30, 0x3, 0x8, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x5, 0x2, 0x1}]]}}}, @IFLA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x1, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) write$binfmt_misc(r3, &(0x7f00000001c0)="3454e9b14280", 0x6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r8 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8002, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0x164a, 0x4c3, 0x43, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 1.315090916s ago: executing program 2 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 1.257600946s ago: executing program 2 (id=624): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000180)={0x1, 0x10}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x0, 0x800, 0x8e6e) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000060c0)={0x34, r8, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r10 = getpid() unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x8020000) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x1f0, 0x1f0, 0xd0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@rand_addr=0x64010101, @private=0xa010102, 0xff000000, 0xff000000, 'bond_slave_0\x00', 'ipvlan0\x00', {}, {}, 0xb314e828b2fce06e, 0x0, 0x10}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x7, 0x2, 0x3, 0x3, 0x4, 0x6], 0x5}, {0xffffffffffffffff, [0x0, 0x4aee1de731b25b79, 0x4, 0x2, 0x3, 0x2], 0x2, 0x2}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x18, 0x1}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x2, 0x1, 0x1, 0x2, 0x1], 0x4, 0x3}, {0x2, [0x7, 0x4, 0x4, 0x6, 0x0, 0xd205d636531791e1], 0x81, 0x4}}}}, {{@ip={@local, @local, 0x0, 0xffffff00, 'pim6reg\x00', 'caif0\x00', {}, {}, 0x33, 0x0, 0x3}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e22], 0x0, 0x0, 0xffff, 0x6}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) r13 = socket(0x10, 0x3, 0x9) connect$netlink(r13, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x14000000) 1.122424189s ago: executing program 2 (id=625): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="513be0c3f01cf8ed54116fd2078015693a77524527d8381d5977d61e3f35eb9c56da1890e1bd5190e46033dbc6a4273aa4f3c072a799e2f029b37521e2d151ac55412e", 0x43}], 0x1, &(0x7f0000001040)=ANY=[], 0xa0}, 0x4004881) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x32126, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket(0x2, 0xa, 0x300) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x30, 0x3, 0x8, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x5, 0x2, 0x1}]]}}}, @IFLA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x1, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) write$binfmt_misc(r3, &(0x7f00000001c0)="3454e9b14280", 0x6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r8 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8002, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0x164a, 0x4c3, 0x43, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r11, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 1.07162417s ago: executing program 1 (id=626): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x303}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r3, r0, 0x4, r0}, 0x9) 1.022301461s ago: executing program 1 (id=627): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="513be0c3f01cf8ed54116fd2078015693a77524527d8381d5977d61e3f35eb9c56da1890e1bd5190e46033dbc6a4273aa4f3c072a799e2f029b37521e2d151ac55412e", 0x43}], 0x1, &(0x7f0000001040)=ANY=[], 0xa0}, 0x4004881) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x32126, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket(0x2, 0xa, 0x300) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x30, 0x3, 0x8, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x5, 0x2, 0x1}]]}}}, @IFLA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x1, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) write$binfmt_misc(r3, &(0x7f00000001c0)="3454e9b14280", 0x6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r8 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8002, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0x164a, 0x4c3, 0x43, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 860.957334ms ago: executing program 4 (id=629): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="513be0c3f01cf8ed54116fd2078015693a77524527d8381d5977d61e3f35eb9c56da1890e1bd5190e46033dbc6a4273aa4f3c072a799e2f029b37521e2d151ac55412e", 0x43}], 0x1, &(0x7f0000001040)=ANY=[], 0xa0}, 0x4004881) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x32126, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket(0x2, 0xa, 0x300) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x30, 0x3, 0x8, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x5, 0x2, 0x1}]]}}}, @IFLA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x1, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) write$binfmt_misc(r3, &(0x7f00000001c0)="3454e9b14280", 0x6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r8 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8002, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0x164a, 0x4c3, 0x43, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 738.377476ms ago: executing program 3 (id=630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) 672.151447ms ago: executing program 3 (id=631): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="513be0c3f01cf8ed54116fd2078015693a77524527d8381d5977d61e3f35eb9c56da1890e1bd5190e46033dbc6a4273aa4f3c072a799e2f029b37521e2d151ac55412e", 0x43}], 0x1, &(0x7f0000001040)=ANY=[], 0xa0}, 0x4004881) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x32126, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket(0x2, 0xa, 0x300) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x30, 0x3, 0x8, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x5, 0x2, 0x1}]]}}}, @IFLA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x1, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) write$binfmt_misc(r3, &(0x7f00000001c0)="3454e9b14280", 0x6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r8 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8002, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0x164a, 0x4c3, 0x43, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 479.260331ms ago: executing program 0 (id=632): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) lsetxattr$security_capability(0x0, &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 466.314691ms ago: executing program 0 (id=633): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000"], 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x9) setrlimit(0x9, &(0x7f0000000380)) io_setup(0x2004, &(0x7f0000000680)) 409.711592ms ago: executing program 0 (id=634): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa20000000000000702"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 409.467012ms ago: executing program 0 (id=635): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa048ac44c63ed287a665f2c34b9e2278e78aaae0b120c255ab10ea38b054ba09f60ad3c2bf21e965b71d8eb98bc84eed4f0bd3328057355205890abf0e68f3ebc151dd697ab4a22a73f621c6ea0e69273df84fe8b7be01000000000000", 0x93) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 268.559455ms ago: executing program 2 (id=636): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x8001, @multicast, 'gre0\x00'}}, 0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 251.662686ms ago: executing program 2 (id=637): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000180)={0x1, 0x10}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x9) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x0, 0x800, 0x8e6e) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000060c0)={0x34, r8, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) r10 = getpid() unshare(0x2c020400) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x8020000) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x350, 0xffffffff, 0x1f0, 0x1f0, 0xd0, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@rand_addr=0x64010101, @private=0xa010102, 0xff000000, 0xff000000, 'bond_slave_0\x00', 'ipvlan0\x00', {}, {}, 0xb314e828b2fce06e, 0x0, 0x10}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x7, 0x2, 0x3, 0x3, 0x4, 0x6], 0x5}, {0xffffffffffffffff, [0x0, 0x4aee1de731b25b79, 0x4, 0x2, 0x3, 0x2], 0x2, 0x2}}}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x18, 0x1}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x2, 0x1, 0x1, 0x2, 0x1], 0x4, 0x3}, {0x2, [0x7, 0x4, 0x4, 0x6, 0x0, 0xd205d636531791e1], 0x81, 0x4}}}}, {{@ip={@local, @local, 0x0, 0xffffff00, 'pim6reg\x00', 'caif0\x00', {}, {}, 0x33, 0x0, 0x3}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e22], 0x0, 0x0, 0xffff, 0x6}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x10) r13 = socket(0x10, 0x3, 0x9) connect$netlink(r13, &(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbf8}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x14000000) 167.790767ms ago: executing program 1 (id=638): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000580), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) syz_emit_ethernet(0x12, &(0x7f00000004c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@llc={0x4, {@llc={0x42, 0x42, "f3", "f4"}}}}}, 0x0) 141.906648ms ago: executing program 1 (id=639): r0 = io_uring_setup(0x77da, &(0x7f0000000240)={0x0, 0xdb5e, 0x40, 0x0, 0x12f}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000040), 0x0) 69.458999ms ago: executing program 1 (id=640): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="513be0c3f01cf8ed54116fd2078015693a77524527d8381d5977d61e3f35eb9c56da1890e1bd5190e46033dbc6a4273aa4f3c072a799e2f029b37521e2d151ac55412e", 0x43}], 0x1, &(0x7f0000001040)=ANY=[], 0xa0}, 0x4004881) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x32126, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket(0x2, 0xa, 0x300) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x30, 0x3, 0x8, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x5, 0x2, 0x1}]]}}}, @IFLA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x1, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) write$binfmt_misc(r3, &(0x7f00000001c0)="3454e9b14280", 0x6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r8 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8002, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0x164a, 0x4c3, 0x43, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 19.14212ms ago: executing program 2 (id=641): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000700)="513be0c3f01cf8ed54116fd2078015693a77524527d8381d5977d61e3f35eb9c56da1890e1bd5190e46033dbc6a4273aa4f3c072a799e2f029b37521e2d151ac55412e", 0x43}], 0x1, &(0x7f0000001040)=ANY=[], 0xa0}, 0x4004881) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x32126, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket(0x2, 0xa, 0x300) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000200)=[{0x30, 0x3, 0x8, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x5, 0x2, 0x1}]]}}}, @IFLA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x1, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) write$binfmt_misc(r3, &(0x7f00000001c0)="3454e9b14280", 0x6) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r8 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x79ab, 0x8, 0x8002, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r8, 0x164a, 0x4c3, 0x43, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000) 0s ago: executing program 4 (id=642): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'sh\x00', 0x19e172f08959ac4a, 0x10001, 0x47}, 0x2c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.153' (ED25519) to the list of known hosts. [ 23.041167][ T29] audit: type=1400 audit(1757152358.682:62): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.042012][ T3289] cgroup: Unknown subsys name 'net' [ 23.063876][ T29] audit: type=1400 audit(1757152358.682:63): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.091192][ T29] audit: type=1400 audit(1757152358.712:64): avc: denied { unmount } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.220002][ T3289] cgroup: Unknown subsys name 'cpuset' [ 23.226066][ T3289] cgroup: Unknown subsys name 'rlimit' [ 23.354687][ T29] audit: type=1400 audit(1757152358.992:65): avc: denied { setattr } for pid=3289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.377970][ T29] audit: type=1400 audit(1757152358.992:66): avc: denied { create } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.398405][ T29] audit: type=1400 audit(1757152358.992:67): avc: denied { write } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.398833][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.418748][ T29] audit: type=1400 audit(1757152358.992:68): avc: denied { read } for pid=3289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.447614][ T29] audit: type=1400 audit(1757152359.002:69): avc: denied { mounton } for pid=3289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.472381][ T29] audit: type=1400 audit(1757152359.002:70): avc: denied { mount } for pid=3289 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.477681][ T3289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.495680][ T29] audit: type=1400 audit(1757152359.072:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.510290][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 25.550472][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 25.563822][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 25.628626][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.635712][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.642926][ T3305] bridge_slave_0: entered allmulticast mode [ 25.649219][ T3305] bridge_slave_0: entered promiscuous mode [ 25.657517][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.664620][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.671705][ T3305] bridge_slave_1: entered allmulticast mode [ 25.678133][ T3305] bridge_slave_1: entered promiscuous mode [ 25.692667][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 25.720593][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.741681][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.776718][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.783804][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.791067][ T3308] bridge_slave_0: entered allmulticast mode [ 25.797318][ T3308] bridge_slave_0: entered promiscuous mode [ 25.803621][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.810743][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.817856][ T3299] bridge_slave_0: entered allmulticast mode [ 25.824444][ T3299] bridge_slave_0: entered promiscuous mode [ 25.831403][ T3305] team0: Port device team_slave_0 added [ 25.837127][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 25.847771][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.854828][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.861934][ T3308] bridge_slave_1: entered allmulticast mode [ 25.868244][ T3308] bridge_slave_1: entered promiscuous mode [ 25.874428][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.881503][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.888570][ T3299] bridge_slave_1: entered allmulticast mode [ 25.894895][ T3299] bridge_slave_1: entered promiscuous mode [ 25.901527][ T3305] team0: Port device team_slave_1 added [ 25.953042][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.960138][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.967855][ T3303] bridge_slave_0: entered allmulticast mode [ 25.974313][ T3303] bridge_slave_0: entered promiscuous mode [ 25.980956][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.987990][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.995074][ T3303] bridge_slave_1: entered allmulticast mode [ 26.001601][ T3303] bridge_slave_1: entered promiscuous mode [ 26.008756][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.022906][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.029895][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.055820][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.067562][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.076816][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.083770][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.109704][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.125932][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.140701][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.162027][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.172520][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.205171][ T3299] team0: Port device team_slave_0 added [ 26.216081][ T3308] team0: Port device team_slave_0 added [ 26.228561][ T3305] hsr_slave_0: entered promiscuous mode [ 26.234568][ T3305] hsr_slave_1: entered promiscuous mode [ 26.241233][ T3299] team0: Port device team_slave_1 added [ 26.252156][ T3308] team0: Port device team_slave_1 added [ 26.258421][ T3303] team0: Port device team_slave_0 added [ 26.264950][ T3303] team0: Port device team_slave_1 added [ 26.275895][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.282954][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.291021][ T3300] bridge_slave_0: entered allmulticast mode [ 26.297312][ T3300] bridge_slave_0: entered promiscuous mode [ 26.324725][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.331807][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.338926][ T3300] bridge_slave_1: entered allmulticast mode [ 26.345207][ T3300] bridge_slave_1: entered promiscuous mode [ 26.369923][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.376863][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.402784][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.418404][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.425361][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.451252][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.462275][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.469206][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.495125][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.508850][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.515855][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.541782][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.553627][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.562983][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.569937][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.595934][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.610138][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.617092][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.643011][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.667199][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.695661][ T3308] hsr_slave_0: entered promiscuous mode [ 26.701665][ T3308] hsr_slave_1: entered promiscuous mode [ 26.707543][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 26.713278][ T3308] Cannot create hsr debugfs directory [ 26.735699][ T3300] team0: Port device team_slave_0 added [ 26.760445][ T3300] team0: Port device team_slave_1 added [ 26.768034][ T3303] hsr_slave_0: entered promiscuous mode [ 26.773974][ T3303] hsr_slave_1: entered promiscuous mode [ 26.779833][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 26.785542][ T3303] Cannot create hsr debugfs directory [ 26.793367][ T3299] hsr_slave_0: entered promiscuous mode [ 26.799272][ T3299] hsr_slave_1: entered promiscuous mode [ 26.805254][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 26.811010][ T3299] Cannot create hsr debugfs directory [ 26.830200][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.837131][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.863050][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.885609][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.892575][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.918528][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.992888][ T3300] hsr_slave_0: entered promiscuous mode [ 26.998757][ T3300] hsr_slave_1: entered promiscuous mode [ 27.004600][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 27.010323][ T3300] Cannot create hsr debugfs directory [ 27.080805][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.089336][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.108719][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.123962][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.163323][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.176664][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.190899][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.199886][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.215297][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.223655][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.237707][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.250523][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.286019][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.303190][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.311929][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.329638][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.338439][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.353437][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.364658][ T3300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.373633][ T3300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.382599][ T3300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.392121][ T3300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.408902][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.416004][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.425149][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.432314][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.475390][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.486455][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.505181][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.519046][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.526151][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.545588][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.558223][ T1959] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.565289][ T1959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.580789][ T1959] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.587844][ T1959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.598215][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.605290][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.627736][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.645667][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.658928][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.681159][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.706449][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.720637][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.727691][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.737672][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.744728][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.760784][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.767831][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.796416][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.803498][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.827305][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.856240][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.875248][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.931125][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.991460][ T3308] veth0_vlan: entered promiscuous mode [ 28.016630][ T3305] veth0_vlan: entered promiscuous mode [ 28.025096][ T3305] veth1_vlan: entered promiscuous mode [ 28.046764][ T3308] veth1_vlan: entered promiscuous mode [ 28.054636][ T3305] veth0_macvtap: entered promiscuous mode [ 28.063561][ T3303] veth0_vlan: entered promiscuous mode [ 28.076554][ T3305] veth1_macvtap: entered promiscuous mode [ 28.088350][ T3303] veth1_vlan: entered promiscuous mode [ 28.097640][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.111526][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.123613][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.131552][ T3299] veth0_vlan: entered promiscuous mode [ 28.139847][ T3421] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.148764][ T3421] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.174549][ T3299] veth1_vlan: entered promiscuous mode [ 28.181151][ T3303] veth0_macvtap: entered promiscuous mode [ 28.187345][ T3421] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.197579][ T3308] veth0_macvtap: entered promiscuous mode [ 28.207085][ T3303] veth1_macvtap: entered promiscuous mode [ 28.213678][ T3421] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.223431][ T3308] veth1_macvtap: entered promiscuous mode [ 28.236521][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.257425][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 28.257437][ T29] audit: type=1400 audit(1757152363.892:81): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.fhvjyH/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.257524][ T3299] veth0_macvtap: entered promiscuous mode [ 28.268456][ T29] audit: type=1400 audit(1757152363.912:82): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.290670][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.293367][ T29] audit: type=1400 audit(1757152363.912:83): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.fhvjyH/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.322275][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.322468][ T29] audit: type=1400 audit(1757152363.912:84): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.354769][ T3299] veth1_macvtap: entered promiscuous mode [ 28.354892][ T29] audit: type=1400 audit(1757152363.912:85): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.fhvjyH/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 28.408832][ T29] audit: type=1400 audit(1757152363.912:86): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.fhvjyH/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3617 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 28.436105][ T29] audit: type=1400 audit(1757152363.912:87): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.457223][ T29] audit: type=1400 audit(1757152364.102:88): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.459124][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.480013][ T29] audit: type=1400 audit(1757152364.102:89): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=4897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 28.511130][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.520891][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.531147][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.540596][ T3300] veth0_vlan: entered promiscuous mode [ 28.557593][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.572732][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.581181][ T29] audit: type=1400 audit(1757152364.232:90): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.600249][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.630184][ T3300] veth1_vlan: entered promiscuous mode [ 28.644034][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.663076][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.686542][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.709275][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.732009][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.743086][ T3300] veth0_macvtap: entered promiscuous mode [ 28.752652][ T1959] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.762208][ T3300] veth1_macvtap: entered promiscuous mode [ 28.771181][ T1959] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.785056][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.793663][ T1959] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.804036][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.812624][ T1959] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.828520][ T1959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.858999][ T1959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.875078][ T1959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.884469][ T1959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.899147][ T3486] netlink: 'syz.1.2': attribute type 9 has an invalid length. [ 28.906732][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 28.934336][ T51] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.934354][ T3486] netlink: 'syz.1.2': attribute type 9 has an invalid length. [ 28.934368][ T3486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 28.950256][ T51] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 28.967919][ T3486] Zero length message leads to an empty skb [ 28.979660][ T3498] netlink: 'syz.4.10': attribute type 27 has an invalid length. [ 29.029777][ T3486] syz.1.2 (3486) used greatest stack depth: 10584 bytes left [ 29.042512][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.049799][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.069736][ T3507] loop9: detected capacity change from 0 to 7 [ 29.076170][ T3507] Buffer I/O error on dev loop9, logical block 0, async page read [ 29.084774][ T3507] Buffer I/O error on dev loop9, logical block 0, async page read [ 29.092727][ T3507] loop9: unable to read partition table [ 29.098794][ T3507] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 29.098794][ T3507] ) failed (rc=-5) [ 29.101425][ T3383] Buffer I/O error on dev loop9, logical block 0, async page read [ 29.120561][ T3383] Buffer I/O error on dev loop9, logical block 0, async page read [ 29.138621][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.140686][ T3383] Buffer I/O error on dev loop9, logical block 0, async page read [ 29.155312][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.165462][ T3383] Buffer I/O error on dev loop9, logical block 0, async page read [ 29.174204][ T3383] Buffer I/O error on dev loop9, logical block 0, async page read [ 29.211254][ T51] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.223264][ T3502] $H: renamed from bond0 (while UP) [ 29.231432][ T3502] $H: entered promiscuous mode [ 29.236516][ T3502] bond_slave_0: entered promiscuous mode [ 29.242275][ T3502] bond_slave_1: entered promiscuous mode [ 29.283323][ T3517] loop2: detected capacity change from 0 to 764 [ 29.331283][ T3503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.339703][ T3503] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.366778][ T3503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 29.402435][ T51] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 29.410738][ T3517] Symlink component flag not implemented [ 29.418608][ T51] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.422553][ T3517] Symlink component flag not implemented (129) [ 29.437730][ T3421] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.456554][ T3421] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.467219][ T3421] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.469394][ C0] hrtimer: interrupt took 37427 ns [ 29.485686][ T3517] rock: directory entry would overflow storage [ 29.491881][ T3517] rock: sig=0x4f50, size=4, remaining=3 [ 29.497448][ T3517] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 29.498108][ T3498] syz.4.10 (3498) used greatest stack depth: 10416 bytes left [ 29.584908][ T3542] SELinux: Context is not valid (left unmapped). [ 29.593228][ T3532] syz.1.25 uses obsolete (PF_INET,SOCK_PACKET) [ 29.603065][ T3540] loop3: detected capacity change from 0 to 512 [ 29.629006][ T3543] netlink: 'syz.1.25': attribute type 2 has an invalid length. [ 29.645064][ T3536] netlink: 'syz.0.28': attribute type 2 has an invalid length. [ 29.681389][ T3540] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 29.732067][ T3540] EXT4-fs (loop3): mount failed [ 29.834038][ T3558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.35'. [ 29.863035][ T3560] mmap: syz.3.36 (3560) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 29.942902][ T3571] netlink: 'syz.3.41': attribute type 21 has an invalid length. [ 29.951111][ T3571] netlink: 132 bytes leftover after parsing attributes in process `syz.3.41'. [ 29.979489][ T3574] netlink: 'syz.4.42': attribute type 2 has an invalid length. [ 29.992175][ T3576] loop3: detected capacity change from 0 to 764 [ 30.023877][ T3576] Symlink component flag not implemented [ 30.030492][ T3576] Symlink component flag not implemented (129) [ 30.037459][ T3576] rock: directory entry would overflow storage [ 30.043719][ T3576] rock: sig=0x4f50, size=4, remaining=3 [ 30.049287][ T3576] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 30.157952][ T3583] netlink: 'syz.3.55': attribute type 2 has an invalid length. [ 30.426676][ T3605] loop0: detected capacity change from 0 to 512 [ 30.459370][ T3605] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.472660][ T3605] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.516033][ T3605] EXT4-fs (loop0): 1 truncate cleaned up [ 30.522863][ T3605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.536176][ T3605] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.588707][ T3664] loop0: detected capacity change from 0 to 128 [ 30.654201][ T3666] netlink: 68 bytes leftover after parsing attributes in process `syz.0.56'. [ 30.841822][ T3670] netlink: 'syz.2.58': attribute type 2 has an invalid length. [ 30.905605][ T3383] udevd[3383]: failed to send result of seq 7441 to main daemon: Connection refused [ 30.916523][ T3678] udevd[3678]: failed to send result of seq 7443 to main daemon: Transport endpoint is not connected [ 31.192324][ T3692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 31.201194][ T3692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.67'. [ 31.379517][ T3700] netlink: 'syz.4.71': attribute type 2 has an invalid length. [ 31.433295][ T3709] loop1: detected capacity change from 0 to 128 [ 31.454067][ T3709] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 31.465373][ T3709] System zones: 1-3, 19-19, 35-36 [ 31.471969][ T3709] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 31.485014][ T3709] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 31.531106][ T3299] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.548440][ T3715] 9pnet_fd: Insufficient options for proto=fd [ 31.710515][ T3727] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3727 comm=syz.0.75 [ 31.867092][ T3750] random: crng reseeded on system resumption [ 31.910129][ T3753] loop0: detected capacity change from 0 to 8192 [ 31.917980][ T3753] ======================================================= [ 31.917980][ T3753] WARNING: The mand mount option has been deprecated and [ 31.917980][ T3753] and is ignored by this kernel. Remove the mand [ 31.917980][ T3753] option from the mount to silence this warning. [ 31.917980][ T3753] ======================================================= [ 31.966315][ T3756] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3756 comm=syz.2.89 [ 31.990499][ T3755] loop1: detected capacity change from 0 to 128 [ 32.017507][ T3755] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 32.025387][ T3755] FAT-fs (loop1): Filesystem has been set read-only [ 32.039190][ T3755] syz.1.92: attempt to access beyond end of device [ 32.039190][ T3755] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 32.058801][ T3755] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 32.066679][ T3755] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 32.080705][ T3755] syz.1.92: attempt to access beyond end of device [ 32.080705][ T3755] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.094056][ T3755] syz.1.92: attempt to access beyond end of device [ 32.094056][ T3755] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.094119][ T3765] loop0: detected capacity change from 0 to 512 [ 32.094149][ T3755] syz.1.92: attempt to access beyond end of device [ 32.094149][ T3755] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.126797][ T3755] syz.1.92: attempt to access beyond end of device [ 32.126797][ T3755] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.140462][ T3755] syz.1.92: attempt to access beyond end of device [ 32.140462][ T3755] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.151851][ T3765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.167027][ T3765] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.184144][ T3755] syz.1.92: attempt to access beyond end of device [ 32.184144][ T3755] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.184560][ T3765] capability: warning: `syz.0.95' uses deprecated v2 capabilities in a way that may be insecure [ 32.197337][ T3755] syz.1.92: attempt to access beyond end of device [ 32.197337][ T3755] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.220843][ T3755] syz.1.92: attempt to access beyond end of device [ 32.220843][ T3755] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.234042][ T3755] syz.1.92: attempt to access beyond end of device [ 32.234042][ T3755] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 32.263910][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.379356][ T3787] loop0: detected capacity change from 0 to 1024 [ 32.388717][ T3787] EXT4-fs: Ignoring removed bh option [ 32.395452][ T3787] EXT4-fs: inline encryption not supported [ 32.419459][ T3787] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.432184][ T3789] SELinux: failed to load policy [ 32.432274][ T3787] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 32.446467][ T3787] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.104: lblock 2 mapped to illegal pblock 2 (length 1) [ 32.462533][ T3787] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.104: lblock 0 mapped to illegal pblock 48 (length 1) [ 32.477587][ T3792] syz.4.106 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.477684][ T3787] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.104: Failed to acquire dquot type 0 [ 32.499233][ T3787] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 32.511870][ T3787] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.104: mark_inode_dirty error [ 32.564535][ T3787] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 32.619527][ T3787] EXT4-fs (loop0): 1 orphan inode deleted [ 32.628954][ T3787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.646110][ T3625] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:31: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.671491][ T3625] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:31: Failed to release dquot type 0 [ 32.772655][ T3787] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 32.804081][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.921195][ T3810] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 32.965123][ T3812] loop2: detected capacity change from 0 to 1024 [ 32.976318][ T3801] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3801 comm=syz.1.109 [ 32.985118][ T3812] EXT4-fs: Ignoring removed nobh option [ 33.012838][ T3812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.043545][ T3820] loop1: detected capacity change from 0 to 512 [ 33.060411][ T3812] EXT4-fs warning (device loop2): ext4_rename_delete:3731: inode #12: comm syz.2.113: Deleting old file: nlink 2, error=-2 [ 33.087233][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.097442][ T3820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.111017][ T3820] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.180774][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.193095][ T3831] binfmt_misc: register: failed to install interpreter file ./file2 [ 33.287996][ T29] kauditd_printk_skb: 844 callbacks suppressed [ 33.288011][ T29] audit: type=1326 audit(1757152368.922:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 33.317567][ T29] audit: type=1326 audit(1757152368.922:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 33.343865][ T29] audit: type=1326 audit(1757152368.942:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 33.367183][ T29] audit: type=1326 audit(1757152368.942:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 33.390524][ T29] audit: type=1326 audit(1757152368.942:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 33.417829][ T29] audit: type=1400 audit(1757152369.052:936): avc: denied { read write } for pid=3839 comm="syz.2.124" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.441402][ T29] audit: type=1400 audit(1757152369.052:937): avc: denied { ioctl open } for pid=3839 comm="syz.2.124" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 33.467094][ T29] audit: type=1326 audit(1757152369.092:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 33.490600][ T29] audit: type=1326 audit(1757152369.092:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3832 comm="syz.1.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 33.617518][ T3862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.132'. [ 33.633190][ T3858] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3858 comm=syz.4.126 [ 33.669522][ T29] audit: type=1326 audit(1757152369.302:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3868 comm="syz.2.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 33.729249][ T3872] program syz.4.137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.793074][ T3873] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3873 comm=syz.3.135 [ 33.888619][ T3884] netlink: 80 bytes leftover after parsing attributes in process `syz.3.142'. [ 33.967254][ T3888] validate_nla: 6 callbacks suppressed [ 33.967289][ T3888] netlink: 'syz.0.144': attribute type 2 has an invalid length. [ 34.161307][ T3909] netlink: 'syz.3.154': attribute type 2 has an invalid length. [ 34.243318][ T3911] netlink: 'syz.1.155': attribute type 2 has an invalid length. [ 34.566289][ T3915] netlink: 'syz.2.156': attribute type 2 has an invalid length. [ 34.796299][ T3924] bridge0: entered promiscuous mode [ 34.801702][ T3924] macsec1: entered promiscuous mode [ 34.807897][ T3924] bridge0: port 3(macsec1) entered blocking state [ 34.814557][ T3924] bridge0: port 3(macsec1) entered disabled state [ 34.822291][ T3924] macsec1: entered allmulticast mode [ 34.827581][ T3924] bridge0: entered allmulticast mode [ 34.834231][ T3924] macsec1: left allmulticast mode [ 34.839303][ T3924] bridge0: left allmulticast mode [ 34.846788][ T3924] bridge0: left promiscuous mode [ 34.925993][ T3928] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 34.949931][ T3930] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 34.956551][ T3930] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 34.964113][ T3930] vhci_hcd vhci_hcd.0: Device attached [ 35.088727][ T3931] vhci_hcd: cannot find a urb of seqnum 5 max seqnum 0 [ 35.097003][ T3606] vhci_hcd: stop threads [ 35.101305][ T3606] vhci_hcd: release socket [ 35.105739][ T3606] vhci_hcd: disconnect device [ 35.149693][ T3359] vhci_hcd: vhci_device speed not set [ 35.227895][ T3942] netlink: 'syz.3.167': attribute type 2 has an invalid length. [ 35.581079][ T3955] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3955 comm=syz.1.171 [ 35.744112][ T3959] netlink: 'syz.4.173': attribute type 2 has an invalid length. [ 35.838383][ T3970] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3970 comm=syz.0.176 [ 35.863728][ T3973] netlink: 'syz.1.178': attribute type 2 has an invalid length. [ 35.985914][ T3384] IPVS: starting estimator thread 0... [ 36.083447][ T3988] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 36.089466][ T3979] IPVS: using max 2832 ests per chain, 141600 per kthread [ 36.170910][ T3654] IPVS: stop unused estimator thread 0... [ 36.188815][ T4002] netlink: 'syz.3.189': attribute type 6 has an invalid length. [ 36.220898][ T4000] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4000 comm=syz.0.186 [ 36.283005][ T4004] netlink: 'syz.3.190': attribute type 2 has an invalid length. [ 36.338410][ T4011] netlink: 'syz.0.192': attribute type 2 has an invalid length. [ 36.908871][ T3359] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 36.916295][ T3359] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 36.923769][ T3359] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 36.932016][ T3359] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 37.003659][ T4061] loop1: detected capacity change from 0 to 512 [ 37.021405][ T4061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.034014][ T4061] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.065547][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.086554][ T4070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 37.097571][ T4070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 37.725546][ T4120] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4120 comm=syz.0.229 [ 37.726475][ T4119] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4119 comm=syz.4.228 [ 37.826624][ T4127] loop4: detected capacity change from 0 to 2048 [ 37.879825][ T4127] loop4: p1 < > p3 p4 [ 37.884805][ T4127] loop4: p3 size 83886080 extends beyond EOD, truncated [ 37.893448][ T4127] loop4: p4 start 33554432 is beyond EOD, truncated [ 37.997070][ T4134] netlink: 96 bytes leftover after parsing attributes in process `syz.1.235'. [ 38.314426][ T29] kauditd_printk_skb: 1104 callbacks suppressed [ 38.314440][ T29] audit: type=1326 audit(1757152373.952:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046232ebe9 code=0x7ffc0000 [ 38.344133][ T29] audit: type=1326 audit(1757152373.952:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046232ebe9 code=0x7ffc0000 [ 38.349557][ T4147] loop3: detected capacity change from 0 to 2048 [ 38.369269][ T29] audit: type=1326 audit(1757152373.952:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f046232ebe9 code=0x7ffc0000 [ 38.397185][ T29] audit: type=1326 audit(1757152373.952:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046232ebe9 code=0x7ffc0000 [ 38.420612][ T29] audit: type=1326 audit(1757152373.952:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f046232ebe9 code=0x7ffc0000 [ 38.443964][ T29] audit: type=1326 audit(1757152373.952:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046232ebe9 code=0x7ffc0000 [ 38.467317][ T29] audit: type=1326 audit(1757152373.952:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f046232ebe9 code=0x7ffc0000 [ 38.490878][ T29] audit: type=1326 audit(1757152373.952:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f046232ebe9 code=0x7ffc0000 [ 38.514423][ T29] audit: type=1326 audit(1757152373.952:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f046232ebe9 code=0x7ffc0000 [ 38.537736][ T29] audit: type=1326 audit(1757152373.952:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4146 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f046232ec23 code=0x7ffc0000 [ 38.594040][ T4147] loop3: p2 p3 p7 [ 38.695906][ T4159] Falling back ldisc for ttyS3. [ 38.716336][ T4155] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4155 comm=syz.2.241 [ 38.751191][ T4163] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 39.047832][ T4197] validate_nla: 9 callbacks suppressed [ 39.047881][ T4197] netlink: 'syz.3.261': attribute type 2 has an invalid length. [ 39.073785][ T4194] netlink: 'syz.2.260': attribute type 2 has an invalid length. [ 39.262654][ T4206] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4206 comm=syz.1.262 [ 39.352144][ T4218] I/O error, dev loop1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 39.361503][ T4218] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 39.457472][ T4228] netlink: 'syz.4.273': attribute type 2 has an invalid length. [ 39.488705][ T4230] netlink: 'syz.1.274': attribute type 2 has an invalid length. [ 39.828934][ T4237] loop2: detected capacity change from 0 to 1024 [ 39.835749][ T4237] EXT4-fs: Ignoring removed oldalloc option [ 39.841740][ T4237] EXT4-fs: Ignoring removed bh option [ 39.861297][ T4237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.888861][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.965419][ T4253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.281'. [ 40.128425][ T4261] netlink: 'syz.3.285': attribute type 2 has an invalid length. [ 40.128602][ T4265] netlink: 'syz.0.287': attribute type 2 has an invalid length. [ 40.330918][ T4275] netlink: 48 bytes leftover after parsing attributes in process `syz.1.291'. [ 40.430941][ T4283] netlink: 'syz.1.294': attribute type 2 has an invalid length. [ 40.769964][ T4286] loop2: detected capacity change from 0 to 512 [ 40.790909][ T4286] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.804592][ T4286] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.836229][ T4290] loop4: detected capacity change from 0 to 512 [ 40.843105][ T4290] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.853035][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.870924][ T4290] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 40.878989][ T4290] System zones: 0-2, 18-18, 34-34 [ 40.884950][ T4290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.897833][ T4290] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.929481][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.008558][ T4296] netlink: 'syz.3.299': attribute type 2 has an invalid length. [ 41.016437][ T4304] netlink: 'syz.0.302': attribute type 2 has an invalid length. [ 41.025668][ T4306] netlink: 'syz.2.303': attribute type 6 has an invalid length. [ 41.941114][ T4342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4342 comm=syz.4.316 [ 42.365821][ T4358] loop1: detected capacity change from 0 to 1024 [ 42.374658][ T4358] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.322: Failed to acquire dquot type 0 [ 42.386452][ T4358] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 42.400933][ T4358] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.322: corrupted inode contents [ 42.413013][ T4358] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.322: mark_inode_dirty error [ 42.424386][ T4358] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.322: corrupted inode contents [ 42.436281][ T4358] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.322: mark_inode_dirty error [ 42.447750][ T4358] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.322: corrupted inode contents [ 42.459820][ T4358] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 42.468482][ T4358] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.322: corrupted inode contents [ 42.480525][ T4358] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.322: mark_inode_dirty error [ 42.491758][ T4358] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 42.501072][ T4358] EXT4-fs (loop1): 1 truncate cleaned up [ 42.507094][ T4358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.523217][ T4358] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 42.539188][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.428345][ T29] kauditd_printk_skb: 1326 callbacks suppressed [ 43.428357][ T29] audit: type=1326 audit(1757152379.062:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 43.458045][ T29] audit: type=1326 audit(1757152379.062:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 43.481302][ T29] audit: type=1326 audit(1757152379.062:3381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 43.504705][ T29] audit: type=1326 audit(1757152379.062:3382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 43.528048][ T29] audit: type=1326 audit(1757152379.062:3383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 43.551381][ T29] audit: type=1326 audit(1757152379.062:3384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 43.574728][ T29] audit: type=1326 audit(1757152379.062:3385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 43.598007][ T29] audit: type=1326 audit(1757152379.062:3386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf601ebe9 code=0x7ffc0000 [ 43.621327][ T29] audit: type=1326 audit(1757152379.062:3387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bf601d550 code=0x7ffc0000 [ 43.644670][ T29] audit: type=1326 audit(1757152379.062:3388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4377 comm="syz.1.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0bf6020417 code=0x7ffc0000 [ 43.794327][ T4386] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4386 comm=syz.0.331 [ 44.109878][ T4399] validate_nla: 12 callbacks suppressed [ 44.109921][ T4399] netlink: 'syz.3.335': attribute type 2 has an invalid length. [ 44.119094][ T4401] netlink: 'syz.0.336': attribute type 2 has an invalid length. [ 44.305264][ T4405] netlink: 'syz.1.337': attribute type 2 has an invalid length. [ 44.964388][ T4415] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 45.036377][ T4419] netlink: 'syz.2.340': attribute type 2 has an invalid length. [ 45.048951][ T4423] netlink: 'syz.0.345': attribute type 2 has an invalid length. [ 45.195343][ T4421] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4421 comm=syz.4.344 [ 45.353203][ T4439] netlink: 'syz.4.348': attribute type 2 has an invalid length. [ 45.822030][ T4442] netlink: 'syz.3.349': attribute type 2 has an invalid length. [ 45.930618][ T4444] netlink: 'syz.2.350': attribute type 2 has an invalid length. [ 46.111899][ T4456] netlink: 'syz.1.354': attribute type 2 has an invalid length. [ 46.138987][ T4458] tun0: tun_chr_ioctl cmd 1074812118 [ 46.368287][ T4470] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4470 comm=syz.0.357 [ 47.144139][ T4489] netem: change failed [ 48.238344][ T4528] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4528 comm=syz.0.381 [ 48.439846][ T29] kauditd_printk_skb: 1467 callbacks suppressed [ 48.439860][ T29] audit: type=1326 audit(1757152384.082:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 48.484232][ T29] audit: type=1326 audit(1757152384.112:4857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 48.507496][ T29] audit: type=1326 audit(1757152384.112:4858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 48.530921][ T29] audit: type=1326 audit(1757152384.112:4859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 48.554218][ T29] audit: type=1326 audit(1757152384.112:4860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 48.577575][ T29] audit: type=1326 audit(1757152384.112:4861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 48.600996][ T29] audit: type=1326 audit(1757152384.112:4862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 48.624388][ T29] audit: type=1326 audit(1757152384.112:4863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 48.647733][ T29] audit: type=1326 audit(1757152384.112:4864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff363d1d550 code=0x7ffc0000 [ 48.671044][ T29] audit: type=1326 audit(1757152384.112:4865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4539 comm="syz.2.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff363d20417 code=0x7ffc0000 [ 49.182984][ T4551] atomic_op ffff88811c865528 conn xmit_atomic 0000000000000000 [ 49.476060][ T4563] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4563 comm=syz.3.396 [ 49.530161][ T4580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.400'. [ 49.656985][ T4596] loop1: detected capacity change from 0 to 128 [ 49.680485][ T4585] validate_nla: 14 callbacks suppressed [ 49.680510][ T4585] netlink: 'syz.0.403': attribute type 2 has an invalid length. [ 49.688857][ T4596] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.689017][ T4596] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.701945][ T3651] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.719596][ T4598] netlink: 'syz.3.409': attribute type 2 has an invalid length. [ 49.955751][ T4616] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4616 comm=syz.1.412 [ 50.192711][ T4625] netlink: 'syz.1.416': attribute type 2 has an invalid length. [ 50.293257][ T4632] rdma_op ffff88811dd55d80 conn xmit_rdma 0000000000000000 [ 50.346038][ T4637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.421'. [ 50.373945][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 50.383397][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 50.393404][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 50.402328][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.422'. [ 50.402383][ T4643] netlink: 'syz.4.424': attribute type 2 has an invalid length. [ 50.535209][ T4650] netlink: 'syz.3.427': attribute type 2 has an invalid length. [ 50.566818][ T4645] netlink: 'syz.0.426': attribute type 2 has an invalid length. [ 50.692481][ T4655] netlink: 'syz.2.428': attribute type 2 has an invalid length. [ 51.029068][ T4658] netlink: 'syz.1.429': attribute type 2 has an invalid length. [ 51.366440][ T4670] loop3: detected capacity change from 0 to 512 [ 51.393392][ T4671] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4671 comm=syz.0.431 [ 51.418681][ T4670] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.431701][ T4670] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.471974][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.561457][ T4680] netlink: 'syz.4.436': attribute type 2 has an invalid length. [ 51.578985][ T4684] netlink: 'syz.2.437': attribute type 2 has an invalid length. [ 52.595048][ T4711] loop0: detected capacity change from 0 to 512 [ 52.603212][ T4711] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 52.611298][ T4711] System zones: 1-12 [ 52.616565][ T4711] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.445: error while reading EA inode 32 err=-116 [ 52.639099][ T4711] EXT4-fs (loop0): Remounting filesystem read-only [ 52.645751][ T4711] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.658806][ T4711] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 52.669259][ T4711] EXT4-fs (loop0): 1 orphan inode deleted [ 52.686661][ T4711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.710077][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.817157][ T4722] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4722 comm=syz.3.448 [ 53.647322][ T4748] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4748 comm=syz.1.456 [ 53.671803][ T29] kauditd_printk_skb: 1397 callbacks suppressed [ 53.671816][ T29] audit: type=1326 audit(1757152389.312:6263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ee1aebe9 code=0x7ffc0000 [ 53.701359][ T29] audit: type=1326 audit(1757152389.312:6264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ee1aebe9 code=0x7ffc0000 [ 53.725435][ T29] audit: type=1326 audit(1757152389.362:6265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f89ee1aebe9 code=0x7ffc0000 [ 53.748743][ T29] audit: type=1326 audit(1757152389.362:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ee1aebe9 code=0x7ffc0000 [ 53.772108][ T29] audit: type=1326 audit(1757152389.362:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ee1aebe9 code=0x7ffc0000 [ 53.795468][ T29] audit: type=1326 audit(1757152389.362:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f89ee1aebe9 code=0x7ffc0000 [ 53.818801][ T29] audit: type=1326 audit(1757152389.362:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ee1aebe9 code=0x7ffc0000 [ 53.842124][ T29] audit: type=1326 audit(1757152389.362:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89ee1aebe9 code=0x7ffc0000 [ 53.865694][ T29] audit: type=1326 audit(1757152389.362:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89ee1ad550 code=0x7ffc0000 [ 53.889026][ T29] audit: type=1326 audit(1757152389.362:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4749 comm="syz.0.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f89ee1b0417 code=0x7ffc0000 [ 54.218783][ T4767] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4767 comm=syz.3.461 [ 54.825397][ T4790] validate_nla: 15 callbacks suppressed [ 54.825450][ T4790] netlink: 'syz.1.472': attribute type 2 has an invalid length. [ 55.036327][ T4793] netlink: 'syz.2.473': attribute type 2 has an invalid length. [ 55.179680][ T4796] netlink: 'syz.3.474': attribute type 4 has an invalid length. [ 55.191397][ T4796] netlink: 'syz.3.474': attribute type 4 has an invalid length. [ 55.301761][ T4801] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4801 comm=syz.3.475 [ 55.388331][ T4809] loop0: detected capacity change from 0 to 1024 [ 55.412642][ T4809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.444379][ T4809] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 55.487154][ T4815] netlink: 'syz.3.480': attribute type 2 has an invalid length. [ 55.518567][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.563973][ T4817] loop0: detected capacity change from 0 to 128 [ 55.650503][ T4822] netlink: 'syz.0.483': attribute type 2 has an invalid length. [ 55.701443][ T4826] netlink: 'syz.4.484': attribute type 2 has an invalid length. [ 55.724260][ T4824] netlink: 'syz.1.485': attribute type 2 has an invalid length. [ 55.915193][ T4835] netlink: 'syz.2.488': attribute type 2 has an invalid length. [ 56.363287][ T4846] 9pnet_fd: p9_fd_create_tcp (4846): problem connecting socket to 127.0.0.1 [ 56.540875][ T4864] netlink: 'syz.0.497': attribute type 2 has an invalid length. [ 57.430909][ T4891] SELinux: ebitmap: truncated map [ 57.436429][ T4891] SELinux: failed to load policy [ 57.952597][ T4913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 58.322019][ T4924] SELinux: failed to load policy [ 58.611810][ T4941] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4941 comm=syz.2.525 [ 58.717581][ T29] kauditd_printk_skb: 1542 callbacks suppressed [ 58.717595][ T29] audit: type=1326 audit(1757152394.352:7815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 58.749101][ T29] audit: type=1326 audit(1757152394.352:7816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 58.772513][ T29] audit: type=1326 audit(1757152394.352:7817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 58.795999][ T29] audit: type=1326 audit(1757152394.352:7818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 58.819501][ T29] audit: type=1326 audit(1757152394.372:7819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4947 comm="syz.2.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 58.861365][ T29] audit: type=1326 audit(1757152394.392:7820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 58.884903][ T29] audit: type=1326 audit(1757152394.392:7821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 58.908282][ T29] audit: type=1326 audit(1757152394.392:7822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 58.931624][ T29] audit: type=1326 audit(1757152394.392:7823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 58.954969][ T29] audit: type=1326 audit(1757152394.392:7824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4949 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 59.278019][ T4962] SELinux: failed to load policy [ 59.613609][ T4979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 59.626377][ T4979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 59.626498][ T3655] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.645284][ T3655] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.666171][ T3655] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.675846][ T3655] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.966193][ T4990] validate_nla: 20 callbacks suppressed [ 59.966279][ T4990] netlink: 'syz.0.544': attribute type 2 has an invalid length. [ 60.046982][ T4992] atomic_op ffff88811c867128 conn xmit_atomic 0000000000000000 [ 60.126249][ T4996] netlink: 'syz.1.547': attribute type 2 has an invalid length. [ 60.160797][ T4999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.548'. [ 60.199206][ T5001] loop4: detected capacity change from 0 to 128 [ 60.226710][ T5001] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.238819][ T5001] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.252800][ T3651] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.386127][ T5010] netlink: 'syz.4.553': attribute type 2 has an invalid length. [ 60.402781][ T5008] netlink: 'syz.3.552': attribute type 2 has an invalid length. [ 60.586509][ T5016] netlink: 'syz.2.555': attribute type 2 has an invalid length. [ 60.872967][ T5022] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5022 comm=syz.0.556 [ 60.942296][ T5024] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 649 [ 60.999339][ T5030] $H: renamed from bond0 (while UP) [ 61.008611][ T5030] $H: entered promiscuous mode [ 61.013262][ T5026] netlink: 'syz.1.558': attribute type 2 has an invalid length. [ 61.013712][ T5030] bond_slave_0: entered promiscuous mode [ 61.013826][ T5030] bond_slave_1: entered promiscuous mode [ 61.114583][ T5033] netlink: 'syz.0.561': attribute type 2 has an invalid length. [ 61.265792][ T5035] netlink: 'syz.3.562': attribute type 2 has an invalid length. [ 61.372110][ T5043] netlink: 'syz.4.565': attribute type 2 has an invalid length. [ 61.425018][ T5045] loop2: detected capacity change from 0 to 512 [ 61.450294][ T5045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.463682][ T5045] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.507338][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.540013][ T5051] netlink: 'syz.2.567': attribute type 2 has an invalid length. [ 62.326262][ T5089] random: crng reseeded on system resumption [ 62.977161][ T5104] loop3: detected capacity change from 0 to 1024 [ 62.984009][ T5104] EXT4-fs: Ignoring removed bh option [ 62.990031][ T5104] EXT4-fs: inline encryption not supported [ 62.996505][ T5104] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.008271][ T5104] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 63.017464][ T5104] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.587: lblock 2 mapped to illegal pblock 2 (length 1) [ 63.031650][ T5104] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.587: lblock 0 mapped to illegal pblock 48 (length 1) [ 63.045852][ T5104] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.587: Failed to acquire dquot type 0 [ 63.057677][ T5104] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 63.067425][ T5104] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.587: mark_inode_dirty error [ 63.078774][ T5104] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 63.089098][ T5104] EXT4-fs (loop3): 1 orphan inode deleted [ 63.095178][ T5104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.108431][ T3606] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 63.127053][ T3606] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:12: Failed to release dquot type 0 [ 63.146005][ T5104] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.163965][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.296178][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.3.591'. [ 63.376491][ T5122] loop3: detected capacity change from 0 to 1024 [ 63.388538][ T5122] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.592: Failed to acquire dquot type 0 [ 63.403371][ T5120] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5120 comm=syz.2.590 [ 63.416672][ T5122] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 63.438412][ T5122] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.592: corrupted inode contents [ 63.452557][ T5122] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.592: mark_inode_dirty error [ 63.464920][ T5122] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.592: corrupted inode contents [ 63.477120][ T5122] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.592: mark_inode_dirty error [ 63.491806][ T5122] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.592: corrupted inode contents [ 63.508988][ T5122] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 63.525351][ T5122] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.592: corrupted inode contents [ 63.537356][ T5122] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.592: mark_inode_dirty error [ 63.549411][ T5122] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 63.565403][ T5122] EXT4-fs (loop3): 1 truncate cleaned up [ 63.573430][ T5133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.595'. [ 63.583209][ T5122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.613932][ T5122] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 63.645763][ T3300] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.720262][ T29] kauditd_printk_skb: 1629 callbacks suppressed [ 63.720283][ T29] audit: type=1326 audit(1757152399.362:9449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7a6febe9 code=0x7ffc0000 [ 63.752004][ T29] audit: type=1326 audit(1757152399.392:9450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d7a6febe9 code=0x7ffc0000 [ 63.775376][ T29] audit: type=1326 audit(1757152399.392:9451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7a6febe9 code=0x7ffc0000 [ 63.798705][ T29] audit: type=1326 audit(1757152399.392:9452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7a6febe9 code=0x7ffc0000 [ 63.823860][ T29] audit: type=1326 audit(1757152399.412:9453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.2.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 63.847257][ T29] audit: type=1326 audit(1757152399.412:9454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5135 comm="syz.2.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff363d1ebe9 code=0x7ffc0000 [ 63.870703][ T29] audit: type=1326 audit(1757152399.442:9455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f0d7a6febe9 code=0x7ffc0000 [ 63.894056][ T29] audit: type=1326 audit(1757152399.442:9456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7a6febe9 code=0x7ffc0000 [ 63.917469][ T29] audit: type=1326 audit(1757152399.442:9457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d7a6febe9 code=0x7ffc0000 [ 63.940831][ T29] audit: type=1326 audit(1757152399.442:9458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5139 comm="syz.4.600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0d7a6febe9 code=0x7ffc0000 [ 64.275735][ T5165] loop1: detected capacity change from 0 to 1024 [ 64.290742][ T5165] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.312421][ T5165] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 64.339641][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.982205][ T5200] validate_nla: 13 callbacks suppressed [ 64.982293][ T5200] netlink: 'syz.0.622': attribute type 2 has an invalid length. [ 65.199237][ T5210] netlink: 'syz.2.625': attribute type 2 has an invalid length. [ 65.265271][ T5214] netlink: 'syz.1.627': attribute type 2 has an invalid length. [ 65.433879][ T5218] netlink: 'syz.4.629': attribute type 2 has an invalid length. [ 65.580730][ T5223] netlink: 'syz.3.631': attribute type 2 has an invalid length. [ 65.834612][ T5232] loop0: detected capacity change from 0 to 512 [ 65.841921][ T5232] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.848687][ T5232] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.859939][ T5232] EXT4-fs (loop0): 1 truncate cleaned up [ 65.865792][ T5232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.203475][ T5248] netlink: 'syz.1.640': attribute type 2 has an invalid length. [ 66.359909][ T5253] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 66.374110][ T3359] IPVS: starting estimator thread 0... [ 66.379908][ T5235] ================================================================== [ 66.387980][ T5235] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 66.396045][ T5235] [ 66.398364][ T5235] write to 0xffff88811b6ef2e8 of 8 bytes by task 5232 on cpu 1: [ 66.405982][ T5235] filemap_splice_read+0x4f4/0x740 [ 66.411086][ T5235] ext4_file_splice_read+0x8f/0xb0 [ 66.416218][ T5235] splice_direct_to_actor+0x26f/0x680 [ 66.421591][ T5235] do_splice_direct+0xda/0x150 [ 66.426353][ T5235] do_sendfile+0x380/0x650 [ 66.430775][ T5235] __x64_sys_sendfile64+0x105/0x150 [ 66.436063][ T5235] x64_sys_call+0x2bb0/0x2ff0 [ 66.440753][ T5235] do_syscall_64+0xd2/0x200 [ 66.445268][ T5235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.451599][ T5235] [ 66.453919][ T5235] write to 0xffff88811b6ef2e8 of 8 bytes by task 5235 on cpu 0: [ 66.461533][ T5235] filemap_splice_read+0x4f4/0x740 [ 66.466650][ T5235] ext4_file_splice_read+0x8f/0xb0 [ 66.471777][ T5235] splice_direct_to_actor+0x26f/0x680 [ 66.477145][ T5235] do_splice_direct+0xda/0x150 [ 66.481919][ T5235] do_sendfile+0x380/0x650 [ 66.486335][ T5235] __x64_sys_sendfile64+0x105/0x150 [ 66.491550][ T5235] x64_sys_call+0x2bb0/0x2ff0 [ 66.496231][ T5235] do_syscall_64+0xd2/0x200 [ 66.498636][ T5250] netlink: 'syz.2.641': attribute type 2 has an invalid length. [ 66.500743][ T5235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.500767][ T5235] [ 66.500770][ T5235] value changed: 0x0000000000019e75 -> 0x0000000000019f08 [ 66.500782][ T5235] [ 66.500785][ T5235] Reported by Kernel Concurrency Sanitizer on: [ 66.500806][ T5235] CPU: 0 UID: 0 PID: 5235 Comm: syz.0.635 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.500833][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.500846][ T5235] ================================================================== [ 66.609894][ T5255] IPVS: using max 2832 ests per chain, 141600 per kthread [ 66.651563][ T5235] ================================================================== [ 66.659667][ T5235] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 66.667928][ T5235] [ 66.670244][ T5235] write to 0xffff888108feba18 of 4 bytes by task 5232 on cpu 0: [ 66.677865][ T5235] writeback_single_inode+0x14a/0x3e0 [ 66.683225][ T5235] sync_inode_metadata+0x5b/0x90 [ 66.688171][ T5235] generic_buffers_fsync_noflush+0xd9/0x120 [ 66.694062][ T5235] ext4_sync_file+0x1ab/0x690 [ 66.698738][ T5235] vfs_fsync_range+0x10d/0x130 [ 66.703502][ T5235] ext4_buffered_write_iter+0x34f/0x3c0 [ 66.709057][ T5235] ext4_file_write_iter+0xdbf/0xf00 [ 66.714433][ T5235] iter_file_splice_write+0x663/0xa60 [ 66.719806][ T5235] direct_splice_actor+0x153/0x2a0 [ 66.724909][ T5235] splice_direct_to_actor+0x30f/0x680 [ 66.730281][ T5235] do_splice_direct+0xda/0x150 [ 66.735044][ T5235] do_sendfile+0x380/0x650 [ 66.739467][ T5235] __x64_sys_sendfile64+0x105/0x150 [ 66.744669][ T5235] x64_sys_call+0x2bb0/0x2ff0 [ 66.749350][ T5235] do_syscall_64+0xd2/0x200 [ 66.753856][ T5235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.760137][ T5235] [ 66.762469][ T5235] read to 0xffff888108feba18 of 4 bytes by task 5235 on cpu 1: [ 66.770002][ T5235] __mark_inode_dirty+0x191/0x750 [ 66.775035][ T5235] mark_buffer_dirty+0x133/0x210 [ 66.779972][ T5235] block_write_end+0x12d/0x210 [ 66.784738][ T5235] ext4_write_end+0x134/0x730 [ 66.789414][ T5235] generic_perform_write+0x30f/0x490 [ 66.794704][ T5235] ext4_buffered_write_iter+0x1ee/0x3c0 [ 66.800261][ T5235] ext4_file_write_iter+0xdbf/0xf00 [ 66.805465][ T5235] iter_file_splice_write+0x663/0xa60 [ 66.810831][ T5235] direct_splice_actor+0x153/0x2a0 [ 66.815939][ T5235] splice_direct_to_actor+0x30f/0x680 [ 66.821303][ T5235] do_splice_direct+0xda/0x150 [ 66.826093][ T5235] do_sendfile+0x380/0x650 [ 66.830514][ T5235] __x64_sys_sendfile64+0x105/0x150 [ 66.835717][ T5235] x64_sys_call+0x2bb0/0x2ff0 [ 66.840393][ T5235] do_syscall_64+0xd2/0x200 [ 66.844991][ T5235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.850883][ T5235] [ 66.853200][ T5235] value changed: 0x00000038 -> 0x00000022 [ 66.858907][ T5235] [ 66.861214][ T5235] Reported by Kernel Concurrency Sanitizer on: [ 66.867357][ T5235] CPU: 1 UID: 0 PID: 5235 Comm: syz.0.635 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.876981][ T5235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 66.887031][ T5235] ================================================================== [ 66.919342][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.