last executing test programs: 24.915451262s ago: executing program 1 (id=194): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}]}}) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 24.888402823s ago: executing program 1 (id=195): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @loopback, 0x2}, 0x1c) 23.983736141s ago: executing program 1 (id=218): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\v\x00'], 0x50) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) 23.361633613s ago: executing program 1 (id=230): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) 23.070933139s ago: executing program 1 (id=233): r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r0, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000280)={0x10000, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) 22.396596262s ago: executing program 1 (id=247): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x400, 0x800}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) bpf$PROG_LOAD(0x5, 0x0, 0x0) 22.378859312s ago: executing program 32 (id=247): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x400, 0x800}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.785856344s ago: executing program 2 (id=665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.738656216s ago: executing program 0 (id=669): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0xa) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x9, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x400000}, {0x0, 0xfffffffc, 0x0, 0x0, 0xffffffff}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0x4, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x4}, {0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x10}, {0x0, 0x4, 0x1000000, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x10000000, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x5}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x2000, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9, 0xe4}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x15, 0x0, 0x48510}, {}, {}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x3, 0x0, 0x1}, {0x0, 0x4}, {0x5}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {0x0, 0x6}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x5, 0x0, 0x200}, {}, {0x0, 0x2000}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {0xfffffffe}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x9, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0x69}, {0x0, 0x0, 0x100, 0x0, 0x0, 0xffefffff}, {0x4}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0xfffffff8}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5, 0x0, 0x7d}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0xfffffffc, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x4000}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x1}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {}, {}, {0x2}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0xb941c340790f7527}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {0x1}, {0x3}, {0x5}, {}, {0x3}, {}, {0x1}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {0x1, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 1.723730446s ago: executing program 5 (id=670): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143042, 0xb3) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 1.49385939s ago: executing program 2 (id=673): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x29}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = shmget(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r3, 0xe, &(0x7f0000000800)=""/245) 1.356845543s ago: executing program 0 (id=676): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x2c020400) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) listen(r0, 0x0) 1.348121923s ago: executing program 5 (id=677): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0xc4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) 1.315988784s ago: executing program 2 (id=678): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) 947.194271ms ago: executing program 4 (id=679): r0 = socket(0x23, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, &(0x7f0000000500)={'#! ', './file0'}, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2, 0x0, 0x9}, 0x18) close_range(r0, r1, 0x0) 918.041362ms ago: executing program 5 (id=681): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x161200, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xffffffff, 0x0, 0x7, "ff00"}) syz_open_pts(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x9, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffe, 0x3, 0x2, 0x0, 0x7fffffff, 0x8}, 0x0, 0x0) close(r0) 877.025413ms ago: executing program 3 (id=682): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = io_uring_setup(0x58e6, &(0x7f0000000140)={0x0, 0xb5fa, 0x1000}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 876.547103ms ago: executing program 4 (id=683): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x8, &(0x7f0000001480)=ANY=[@ANYBLOB="180100000000000000000000040000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f0000001440)='syzkaller\x00', 0x5, 0xf1, &(0x7f0000000580)=""/241, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) 771.694885ms ago: executing program 4 (id=684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x42, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 769.791834ms ago: executing program 5 (id=695): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) 769.345944ms ago: executing program 2 (id=685): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) 767.223405ms ago: executing program 3 (id=686): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f00000002c0), 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 451.945581ms ago: executing program 2 (id=687): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000540)='\x00', &(0x7f0000001c80)='n', 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) close(r0) 451.768991ms ago: executing program 3 (id=688): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r2, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 451.611571ms ago: executing program 4 (id=689): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) 408.824842ms ago: executing program 2 (id=691): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x0) splice(r3, 0x0, r2, 0x0, 0x7f, 0xe) write(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000734000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) bpf$MAP_CREATE(0x0, 0x0, 0x48) 407.970102ms ago: executing program 0 (id=702): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e12"], 0x44}, 0x1, 0x0, 0x0, 0x8000040}, 0x20000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 390.748082ms ago: executing program 5 (id=692): mlockall(0x7) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x1, 0x0, &(0x7f0000000000)=0x54) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$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") 358.940513ms ago: executing program 0 (id=693): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x2a02, &(0x7f0000000140)={0x0, 0xb22b, 0x20000, 0x0, 0x259}, 0x0, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1, 0x0, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) close(0x3) 321.860623ms ago: executing program 0 (id=694): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x3, 0x80}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r3, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r3, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 274.171634ms ago: executing program 3 (id=706): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x300, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xc}, {0x9}, {0xffff, 0xfcacb606a5e126d}}}, 0x24}, 0x1, 0x0, 0x0, 0x40448d4}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 273.928104ms ago: executing program 0 (id=696): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x161200, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40c00, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xffffffff, 0x0, 0x7, "ff00"}) syz_open_pts(r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x5, 0x9, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xfffffffffffffffe, 0x3, 0x2, 0x0, 0x7fffffff, 0x8}, 0x0, 0x0) close(r0) 114.810907ms ago: executing program 5 (id=697): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 114.676597ms ago: executing program 3 (id=698): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xa55c}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001"], 0x290}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r2) 75.707168ms ago: executing program 3 (id=699): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write$P9_RREAD(r1, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xa0) sendfile(r1, r0, 0x0, 0x3ffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendfile(r1, r0, 0x0, 0x7fffeffd) 74.596268ms ago: executing program 4 (id=700): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011906a5a318"], 0xdd12}], 0x1}, 0x20040051) 0s ago: executing program 4 (id=701): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000003c0), 0x200044, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 34.890216][ T29] audit: type=1400 audit(1758842602.451:62): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.891490][ T3290] cgroup: Unknown subsys name 'net' [ 34.913075][ T29] audit: type=1400 audit(1758842602.451:63): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.940789][ T29] audit: type=1400 audit(1758842602.481:64): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.201418][ T3290] cgroup: Unknown subsys name 'cpuset' [ 35.207872][ T3290] cgroup: Unknown subsys name 'rlimit' [ 35.378705][ T29] audit: type=1400 audit(1758842602.941:65): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.403038][ T29] audit: type=1400 audit(1758842602.941:66): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.423732][ T29] audit: type=1400 audit(1758842602.941:67): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.444761][ T29] audit: type=1400 audit(1758842602.941:68): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.465483][ T29] audit: type=1400 audit(1758842602.951:69): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.474444][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.490718][ T29] audit: type=1400 audit(1758842602.951:70): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.523151][ T29] audit: type=1400 audit(1758842603.061:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.553665][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.688512][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 36.763186][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.770751][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.777994][ T3300] bridge_slave_0: entered allmulticast mode [ 36.784845][ T3300] bridge_slave_0: entered promiscuous mode [ 36.791906][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.799067][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.806249][ T3300] bridge_slave_1: entered allmulticast mode [ 36.813250][ T3300] bridge_slave_1: entered promiscuous mode [ 36.831637][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 36.855886][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.878815][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.923178][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 36.932889][ T3300] team0: Port device team_slave_0 added [ 36.951581][ T3300] team0: Port device team_slave_1 added [ 36.985473][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.992685][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.999863][ T3307] bridge_slave_0: entered allmulticast mode [ 37.006510][ T3307] bridge_slave_0: entered promiscuous mode [ 37.013336][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 37.033246][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.040321][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.047744][ T3307] bridge_slave_1: entered allmulticast mode [ 37.054253][ T3307] bridge_slave_1: entered promiscuous mode [ 37.065674][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.072773][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.099458][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.117950][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 37.129170][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.136253][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.162200][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.186528][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.213082][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.220203][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.227823][ T3309] bridge_slave_0: entered allmulticast mode [ 37.234697][ T3309] bridge_slave_0: entered promiscuous mode [ 37.242317][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.268224][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.275324][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.282676][ T3309] bridge_slave_1: entered allmulticast mode [ 37.289213][ T3309] bridge_slave_1: entered promiscuous mode [ 37.302024][ T3307] team0: Port device team_slave_0 added [ 37.332381][ T3307] team0: Port device team_slave_1 added [ 37.351302][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.362927][ T3300] hsr_slave_0: entered promiscuous mode [ 37.369096][ T3300] hsr_slave_1: entered promiscuous mode [ 37.392212][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.399316][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.406807][ T3305] bridge_slave_0: entered allmulticast mode [ 37.413343][ T3305] bridge_slave_0: entered promiscuous mode [ 37.423754][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.438548][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.445784][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.472409][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.483199][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.490394][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.497812][ T3305] bridge_slave_1: entered allmulticast mode [ 37.504491][ T3305] bridge_slave_1: entered promiscuous mode [ 37.536518][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.543988][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.570494][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.586855][ T3309] team0: Port device team_slave_0 added [ 37.592924][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.600210][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.607796][ T3301] bridge_slave_0: entered allmulticast mode [ 37.614477][ T3301] bridge_slave_0: entered promiscuous mode [ 37.629950][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.639982][ T3309] team0: Port device team_slave_1 added [ 37.656135][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.663304][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.670668][ T3301] bridge_slave_1: entered allmulticast mode [ 37.677162][ T3301] bridge_slave_1: entered promiscuous mode [ 37.693466][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.714443][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.721650][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.748253][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.778711][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.785856][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.812151][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.826191][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.845082][ T3307] hsr_slave_0: entered promiscuous mode [ 37.851465][ T3307] hsr_slave_1: entered promiscuous mode [ 37.857482][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 37.863504][ T3307] Cannot create hsr debugfs directory [ 37.873230][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.890542][ T3305] team0: Port device team_slave_0 added [ 37.898049][ T3305] team0: Port device team_slave_1 added [ 37.933459][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.942990][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.969251][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.983936][ T3301] team0: Port device team_slave_0 added [ 37.999988][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.007051][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.033550][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.050647][ T3301] team0: Port device team_slave_1 added [ 38.067398][ T3309] hsr_slave_0: entered promiscuous mode [ 38.073759][ T3309] hsr_slave_1: entered promiscuous mode [ 38.079611][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 38.085461][ T3309] Cannot create hsr debugfs directory [ 38.119853][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.127163][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.153414][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.177588][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.184647][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.211655][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.240202][ T3305] hsr_slave_0: entered promiscuous mode [ 38.246480][ T3305] hsr_slave_1: entered promiscuous mode [ 38.252792][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 38.258894][ T3305] Cannot create hsr debugfs directory [ 38.295936][ T3301] hsr_slave_0: entered promiscuous mode [ 38.302046][ T3301] hsr_slave_1: entered promiscuous mode [ 38.308191][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 38.314110][ T3301] Cannot create hsr debugfs directory [ 38.393264][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.410403][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.430920][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.444283][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.478863][ T3307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.489825][ T3307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.505494][ T3307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.516366][ T3307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.548599][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.559217][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.570528][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.587933][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.635417][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.644851][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.654022][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.664416][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.674846][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.706767][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.716248][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.733078][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.751543][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.760340][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.777405][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.785145][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.795271][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.816157][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.833569][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.840677][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.849912][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.857275][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.881424][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.888577][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.912077][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.923674][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.936371][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.954167][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.961456][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.970424][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.977854][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.010640][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.049522][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.074685][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.105201][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.112517][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.122706][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.130214][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.155529][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.166296][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.183764][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.198145][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.205417][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.224079][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.231583][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.249311][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.334396][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.385966][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.418031][ T3307] veth0_vlan: entered promiscuous mode [ 39.438108][ T3305] veth0_vlan: entered promiscuous mode [ 39.474666][ T3305] veth1_vlan: entered promiscuous mode [ 39.491831][ T3307] veth1_vlan: entered promiscuous mode [ 39.498094][ T3300] veth0_vlan: entered promiscuous mode [ 39.522177][ T3300] veth1_vlan: entered promiscuous mode [ 39.543488][ T3305] veth0_macvtap: entered promiscuous mode [ 39.560273][ T3307] veth0_macvtap: entered promiscuous mode [ 39.569396][ T3309] veth0_vlan: entered promiscuous mode [ 39.576845][ T3307] veth1_macvtap: entered promiscuous mode [ 39.587495][ T3305] veth1_macvtap: entered promiscuous mode [ 39.597921][ T3309] veth1_vlan: entered promiscuous mode [ 39.624230][ T3300] veth0_macvtap: entered promiscuous mode [ 39.636762][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.647110][ T3300] veth1_macvtap: entered promiscuous mode [ 39.654701][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.666756][ T3309] veth0_macvtap: entered promiscuous mode [ 39.675707][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.689976][ T3309] veth1_macvtap: entered promiscuous mode [ 39.697285][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.707122][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.714443][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.733250][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.741997][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.752736][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.769550][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.779868][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.796151][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.805054][ T3301] veth0_vlan: entered promiscuous mode [ 39.811836][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.821554][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.839673][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.852484][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.866829][ T3301] veth1_vlan: entered promiscuous mode [ 39.874245][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.892551][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.902091][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.935829][ T3301] veth0_macvtap: entered promiscuous mode [ 39.936783][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 39.936801][ T29] audit: type=1400 audit(1758842607.501:90): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.947774][ T3301] veth1_macvtap: entered promiscuous mode [ 39.947938][ T29] audit: type=1400 audit(1758842607.501:91): avc: denied { open } for pid=3305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.017696][ T29] audit: type=1400 audit(1758842607.541:92): avc: denied { ioctl } for pid=3305 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.035832][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.069729][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.082274][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.096993][ T29] audit: type=1400 audit(1758842607.651:93): avc: denied { prog_load } for pid=3473 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.115796][ T29] audit: type=1400 audit(1758842607.651:94): avc: denied { bpf } for pid=3473 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.134745][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.136205][ T29] audit: type=1400 audit(1758842607.651:95): avc: denied { perfmon } for pid=3473 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 40.164003][ T29] audit: type=1400 audit(1758842607.651:96): avc: denied { prog_run } for pid=3473 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.165545][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.182861][ T29] audit: type=1400 audit(1758842607.661:97): avc: denied { create } for pid=3473 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.211259][ T29] audit: type=1400 audit(1758842607.661:98): avc: denied { bind } for pid=3473 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.230656][ T29] audit: type=1400 audit(1758842607.661:99): avc: denied { listen } for pid=3473 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.269563][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.300098][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.309495][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.353468][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.367842][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.385079][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.423439][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.500921][ T3492] process 'syz.3.10' launched '/dev/fd/4' with NULL argv: empty string added [ 40.542333][ T3515] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.574779][ T3515] Zero length message leads to an empty skb [ 40.583619][ T3508] loop0: detected capacity change from 0 to 8192 [ 40.644890][ T3524] netlink: zone id is out of range [ 40.651723][ T3524] netlink: zone id is out of range [ 40.682789][ T3524] netlink: zone id is out of range [ 40.687960][ T3524] netlink: zone id is out of range [ 40.734677][ T3524] netlink: zone id is out of range [ 40.740041][ T3524] netlink: zone id is out of range [ 40.745564][ T3524] netlink: zone id is out of range [ 40.753971][ T3524] netlink: zone id is out of range [ 40.759175][ T3524] netlink: zone id is out of range [ 40.767967][ T3524] netlink: zone id is out of range [ 40.844145][ T3535] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 40.914678][ T3542] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 40.933017][ T3542] FAT-fs (loop5): unable to read boot sector [ 41.027997][ T3548] loop4: detected capacity change from 0 to 1024 [ 41.036048][ T3548] ======================================================= [ 41.036048][ T3548] WARNING: The mand mount option has been deprecated and [ 41.036048][ T3548] and is ignored by this kernel. Remove the mand [ 41.036048][ T3548] option from the mount to silence this warning. [ 41.036048][ T3548] ======================================================= [ 41.151035][ T3548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.216226][ T3556] netlink: 68 bytes leftover after parsing attributes in process `syz.2.31'. [ 41.239279][ T3560] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 41.260761][ T3560] FAT-fs (loop7): unable to read boot sector [ 41.266659][ T3556] bond1: entered promiscuous mode [ 41.272047][ T3556] bond1: entered allmulticast mode [ 41.283021][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.292475][ T3556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.311777][ T3556] bond1 (unregistering): Released all slaves [ 41.396690][ T3566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3566 comm=syz.3.34 [ 41.480432][ T3573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.37'. [ 41.576758][ T3578] syz.3.39 (3578) used greatest stack depth: 10888 bytes left [ 41.795979][ T3593] loop3: detected capacity change from 0 to 512 [ 41.842843][ T3593] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.856223][ T3593] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.889635][ T3593] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.912708][ T3593] EXT4-fs (loop3): 1 truncate cleaned up [ 41.918811][ T3593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.944136][ T3601] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 41.970238][ T3601] SELinux: failed to load policy [ 41.994047][ T3604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 42.072976][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.261341][ T3617] netlink: 14 bytes leftover after parsing attributes in process `syz.2.53'. [ 42.275717][ T3617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.294242][ T3617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.315106][ T3617] bond0 (unregistering): Released all slaves [ 42.579888][ T3622] loop2: detected capacity change from 0 to 1024 [ 42.635835][ T3622] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 42.724227][ T3626] loop0: detected capacity change from 0 to 512 [ 42.780761][ T3626] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.818796][ T3626] EXT4-fs error (device loop0): ext4_init_orphan_info:611: comm syz.0.57: orphan file block 0: bad magic [ 42.845425][ T3626] EXT4-fs (loop0): mount failed [ 42.857293][ T3636] loop2: detected capacity change from 0 to 512 [ 42.871480][ T3636] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.941884][ T3636] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 42.978540][ T3636] System zones: 1-12 [ 42.997856][ T3645] loop1: detected capacity change from 0 to 1024 [ 43.019006][ T3636] EXT4-fs (loop2): 1 truncate cleaned up [ 43.058398][ T3636] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.075505][ T3645] EXT4-fs: Ignoring removed orlov option [ 43.135260][ T3645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.178421][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.655763][ T3685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 43.890871][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.959830][ T3703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 43.981286][ T3703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 44.486638][ T3729] loop4: detected capacity change from 0 to 1024 [ 44.531986][ T3729] EXT4-fs: inline encryption not supported [ 44.537881][ T3729] EXT4-fs: Ignoring removed i_version option [ 44.581162][ T3729] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.619586][ T3729] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.94: lblock 2 mapped to illegal pblock 2 (length 1) [ 44.651546][ T3729] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.94: lblock 0 mapped to illegal pblock 48 (length 1) [ 44.665793][ T3729] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.94: Failed to acquire dquot type 0 [ 44.723865][ T3729] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 44.769600][ T3729] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.94: mark_inode_dirty error [ 44.805484][ T3738] netlink: 16 bytes leftover after parsing attributes in process `syz.1.97'. [ 44.822062][ T3729] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 44.842519][ T3729] EXT4-fs (loop4): 1 orphan inode deleted [ 44.854597][ T3729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.867151][ T37] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 44.894167][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:2: Failed to release dquot type 0 [ 44.896035][ T3729] netlink: 'syz.4.94': attribute type 3 has an invalid length. [ 44.941831][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 44.941846][ T29] audit: type=1326 audit(1758842612.511:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 44.998674][ T29] audit: type=1326 audit(1758842612.511:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 45.022524][ T29] audit: type=1326 audit(1758842612.541:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 45.046564][ T29] audit: type=1326 audit(1758842612.541:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 45.069923][ T29] audit: type=1326 audit(1758842612.541:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 45.074348][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.093693][ T29] audit: type=1326 audit(1758842612.541:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 45.093743][ T29] audit: type=1326 audit(1758842612.541:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 45.149771][ T29] audit: type=1326 audit(1758842612.541:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 45.173923][ T29] audit: type=1326 audit(1758842612.541:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 45.197613][ T29] audit: type=1326 audit(1758842612.541:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3742 comm="syz.1.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 45.208669][ T3301] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 45.253585][ T3746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3746 comm=syz.1.100 [ 45.286849][ T3301] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 45.340757][ T3301] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 45.399454][ T3754] mmap: syz.1.104 (3754) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.622112][ T3768] loop0: detected capacity change from 0 to 128 [ 45.655151][ T3768] syz.0.108: attempt to access beyond end of device [ 45.655151][ T3768] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 45.916137][ T3794] netlink: 24 bytes leftover after parsing attributes in process `syz.2.119'. [ 45.948140][ T3798] loop0: detected capacity change from 0 to 128 [ 45.959036][ T3797] loop3: detected capacity change from 0 to 256 [ 45.993559][ T3798] FAT-fs (loop0): Directory bread(block 32) failed [ 46.012352][ T3797] FAT-fs (loop3): Directory bread(block 64) failed [ 46.027978][ T3797] FAT-fs (loop3): Directory bread(block 65) failed [ 46.040941][ T3797] FAT-fs (loop3): Directory bread(block 66) failed [ 46.047725][ T3797] FAT-fs (loop3): Directory bread(block 67) failed [ 46.054560][ T3798] FAT-fs (loop0): Directory bread(block 33) failed [ 46.067608][ T3798] FAT-fs (loop0): Directory bread(block 34) failed [ 46.074388][ T3798] FAT-fs (loop0): Directory bread(block 35) failed [ 46.098207][ T3797] FAT-fs (loop3): Directory bread(block 68) failed [ 46.114768][ T3798] FAT-fs (loop0): Directory bread(block 36) failed [ 46.121543][ T3797] FAT-fs (loop3): Directory bread(block 69) failed [ 46.140101][ T3798] FAT-fs (loop0): Directory bread(block 37) failed [ 46.148844][ T3797] FAT-fs (loop3): Directory bread(block 70) failed [ 46.157121][ T3797] FAT-fs (loop3): Directory bread(block 71) failed [ 46.163991][ T3798] FAT-fs (loop0): Directory bread(block 38) failed [ 46.177006][ T3798] FAT-fs (loop0): Directory bread(block 39) failed [ 46.183806][ T3797] FAT-fs (loop3): Directory bread(block 72) failed [ 46.190371][ T3797] FAT-fs (loop3): Directory bread(block 73) failed [ 46.227001][ T3798] FAT-fs (loop0): Directory bread(block 40) failed [ 46.249206][ T3798] FAT-fs (loop0): Directory bread(block 41) failed [ 46.330345][ T3798] syz.0.121: attempt to access beyond end of device [ 46.330345][ T3798] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 46.353834][ T3798] FAT-fs (loop0): Filesystem has been set read-only [ 46.369808][ T3798] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 46.820471][ T3834] netlink: 'syz.3.138': attribute type 49 has an invalid length. [ 46.901224][ T3850] vlan0: entered allmulticast mode [ 46.908118][ T3850] dummy0: entered allmulticast mode [ 46.924590][ T3853] netlink: 'syz.2.145': attribute type 30 has an invalid length. [ 46.960568][ T3859] loop3: detected capacity change from 0 to 1024 [ 46.968264][ T3859] EXT4-fs: Ignoring removed orlov option [ 46.983719][ T3859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.025346][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.026275][ T3864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.148'. [ 47.070014][ T3864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'. [ 47.147465][ T3872] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.195759][ T3877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'. [ 47.204807][ T3877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 47.217276][ T3877] netlink: 28 bytes leftover after parsing attributes in process `syz.2.155'. [ 47.226434][ T3877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.155'. [ 47.274563][ T3882] wg2: entered promiscuous mode [ 47.279755][ T3882] wg2: entered allmulticast mode [ 47.405010][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 47.433209][ T3895] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.440756][ T3895] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.472017][ T3895] wg2: left promiscuous mode [ 47.476693][ T3895] wg2: left allmulticast mode [ 47.493975][ T3904] loop1: detected capacity change from 0 to 512 [ 47.504415][ T3904] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.506674][ T3906] netlink: 'syz.4.168': attribute type 1 has an invalid length. [ 47.522610][ T3906] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.168'. [ 47.534706][ T3904] EXT4-fs (loop1): 1 truncate cleaned up [ 47.540117][ T3895] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.540932][ T3904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.552089][ T3895] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.606586][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.651761][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.679133][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.697134][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.722865][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.787159][ T3895] syz.2.163 (3895) used greatest stack depth: 10832 bytes left [ 47.859060][ T3927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.176'. [ 48.089237][ T3949] syzkaller0: create flow: hash 686877893 index 1 [ 48.101454][ T12] syzkaller0: tun_net_xmit 76 [ 48.107622][ T12] syzkaller0: tun_net_xmit 48 [ 48.120800][ T2953] syzkaller0: tun_net_xmit 76 [ 48.146052][ T3936] syzkaller0: delete flow: hash 686877893 index 1 [ 48.312593][ T3967] bridge0: entered promiscuous mode [ 48.317931][ T3967] macvtap1: entered allmulticast mode [ 48.323476][ T3967] bridge0: entered allmulticast mode [ 48.332146][ T3967] bridge0: port 3(macvtap1) entered blocking state [ 48.338866][ T3967] bridge0: port 3(macvtap1) entered disabled state [ 48.346867][ T3967] bridge0: left allmulticast mode [ 48.352073][ T3967] bridge0: left promiscuous mode [ 48.362317][ T3971] loop0: detected capacity change from 0 to 256 [ 48.369539][ T3971] msdos: Bad value for 'tz' [ 48.949107][ T4002] netlink: 'syz.0.205': attribute type 3 has an invalid length. [ 48.957888][ T4002] netlink: 'syz.0.205': attribute type 3 has an invalid length. [ 48.972197][ T4004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'. [ 49.027166][ T4010] uprobe: syz.2.209:4010 failed to unregister, leaking uprobe [ 49.163302][ T4021] syzkaller0: refused to change device tx_queue_len [ 49.387369][ C1] hrtimer: interrupt took 46964 ns [ 49.403383][ T4031] syz.0.217 (4031) used greatest stack depth: 10824 bytes left [ 49.497466][ T4036] syz.2.220 uses obsolete (PF_INET,SOCK_PACKET) [ 49.620448][ T4044] loop2: detected capacity change from 0 to 256 [ 49.644308][ T4044] vfat: Bad value for 'fmask' [ 49.727102][ T4050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.739322][ T4050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.904131][ T4055] loop2: detected capacity change from 0 to 1024 [ 49.959466][ T4055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 49.998079][ T4060] loop4: detected capacity change from 0 to 8192 [ 50.005247][ T4062] loop1: detected capacity change from 0 to 2048 [ 50.014320][ T4055] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.228: Freeing blocks not in datazone - block = 0, count = 16 [ 50.053265][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.084262][ T4062] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.110138][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 50.110155][ T29] audit: type=1326 audit(50.078:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 50.143069][ T29] audit: type=1400 audit(50.088:593): avc: denied { execmem } for pid=4065 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 50.161674][ T29] audit: type=1326 audit(50.108:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 50.184424][ T29] audit: type=1326 audit(50.108:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 50.207195][ T29] audit: type=1326 audit(50.108:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 50.230024][ T29] audit: type=1326 audit(50.108:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 50.253058][ T29] audit: type=1326 audit(50.108:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 50.256827][ T3309] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 50.275928][ T29] audit: type=1326 audit(50.118:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 50.312980][ T29] audit: type=1326 audit(50.118:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4069 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f68f13e1785 code=0x7ffc0000 [ 50.335657][ T29] audit: type=1326 audit(50.118:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4061 comm="syz.1.230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68f13aeec9 code=0x7ffc0000 [ 50.400857][ T3309] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 50.416658][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 50.428914][ T31] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.428914][ T31] [ 50.438598][ T31] EXT4-fs (loop1): Total free blocks count 0 [ 50.444708][ T31] EXT4-fs (loop1): Free/Dirty block details [ 50.450788][ T31] EXT4-fs (loop1): free_blocks=0 [ 50.455775][ T31] EXT4-fs (loop1): dirty_blocks=1216 [ 50.461096][ T31] EXT4-fs (loop1): Block reservation details [ 50.467650][ T31] EXT4-fs (loop1): i_reserved_data_blocks=76 [ 50.623207][ T4069] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 4 with max blocks 1204 with error 28 [ 50.657206][ T4086] pimreg: entered allmulticast mode [ 50.681202][ T4086] pimreg: left allmulticast mode [ 50.703591][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.713511][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.887690][ T4101] syzkaller0: entered allmulticast mode [ 50.911278][ T4101] syzkaller0: entered promiscuous mode [ 50.919443][ T4101] syzkaller0 (unregistering): left allmulticast mode [ 50.926278][ T4101] syzkaller0 (unregistering): left promiscuous mode [ 50.933801][ T3309] syz-executor (3309) used greatest stack depth: 10776 bytes left [ 50.997179][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.064983][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.105242][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.166126][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.297597][ T12] bridge_slave_1: left allmulticast mode [ 51.303360][ T12] bridge_slave_1: left promiscuous mode [ 51.309396][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.333650][ T12] bridge_slave_0: left allmulticast mode [ 51.339485][ T12] bridge_slave_0: left promiscuous mode [ 51.345257][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.489806][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.513377][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.529226][ T12] bond0 (unregistering): Released all slaves [ 51.567380][ T4106] chnl_net:caif_netlink_parms(): no params data found [ 51.591135][ T12] hsr_slave_0: left promiscuous mode [ 51.596843][ T12] hsr_slave_1: left promiscuous mode [ 51.602608][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.610011][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.618051][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.625684][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.637710][ T12] veth1_macvtap: left promiscuous mode [ 51.644264][ T12] veth0_macvtap: left promiscuous mode [ 51.782500][ T12] team0 (unregistering): Port device team_slave_1 removed [ 51.817555][ T12] team0 (unregistering): Port device team_slave_0 removed [ 51.878712][ T4177] wg2: entered promiscuous mode [ 51.883748][ T4177] wg2: entered allmulticast mode [ 51.944476][ T4106] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.951608][ T4106] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.967001][ T4106] bridge_slave_0: entered allmulticast mode [ 51.974034][ T4106] bridge_slave_0: entered promiscuous mode [ 51.992727][ T4106] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.999870][ T4106] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.058557][ T4106] bridge_slave_1: entered allmulticast mode [ 52.065917][ T4106] bridge_slave_1: entered promiscuous mode [ 52.094615][ T4106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.125993][ T4106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.206282][ T4208] syz.4.278 (4208) used greatest stack depth: 10184 bytes left [ 52.224323][ T4106] team0: Port device team_slave_0 added [ 52.239578][ T4106] team0: Port device team_slave_1 added [ 52.288677][ T4106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.296181][ T4106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.323010][ T4106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.335138][ T4106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.342234][ T4106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.368797][ T4106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.403767][ T4224] loop2: detected capacity change from 0 to 1024 [ 52.414558][ T4224] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.436111][ T4224] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #3: block 1: comm syz.2.282: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.451331][ T4224] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.282: Failed to acquire dquot type 0 [ 52.468352][ T4106] hsr_slave_0: entered promiscuous mode [ 52.474582][ T4224] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.282: Freeing blocks not in datazone - block = 0, count = 4096 [ 52.488574][ T4106] hsr_slave_1: entered promiscuous mode [ 52.498809][ T4106] debugfs: 'hsr0' already exists in 'hsr' [ 52.504812][ T4106] Cannot create hsr debugfs directory [ 52.511998][ T4224] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.282: Invalid inode bitmap blk 0 in block_group 0 [ 52.530975][ T53] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 52.546924][ T53] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 52.558721][ T4224] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 52.567758][ T4224] EXT4-fs (loop2): 1 orphan inode deleted [ 52.574882][ T4224] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.588945][ T4224] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.845685][ T4106] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.861069][ T4106] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.870783][ T4106] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.901995][ T4106] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.982093][ T4266] smc: net device bond0 applied user defined pnetid SYZ0 [ 52.996475][ T4266] smc: net device bond0 erased user defined pnetid SYZ0 [ 53.022887][ T4106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.041944][ T4106] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.062253][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.069375][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.102331][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.109671][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.179599][ T4106] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 53.190161][ T4106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.275369][ T4106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.397151][ T4292] syz.2.297 (4292) used greatest stack depth: 10176 bytes left [ 53.520159][ T4106] veth0_vlan: entered promiscuous mode [ 53.543212][ T4106] veth1_vlan: entered promiscuous mode [ 53.613265][ T4106] veth0_macvtap: entered promiscuous mode [ 53.622231][ T4106] veth1_macvtap: entered promiscuous mode [ 53.646218][ T4106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.656559][ T4106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.664082][ T4336] loop4: detected capacity change from 0 to 128 [ 53.682907][ T125] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.708527][ T125] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.723596][ T125] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.733837][ T125] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.838234][ T4348] loop4: detected capacity change from 0 to 764 [ 53.859752][ T4348] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 53.889566][ T4351] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.961435][ T4351] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.060297][ T4351] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.104497][ T4365] loop4: detected capacity change from 0 to 1024 [ 54.111595][ T4365] EXT4-fs: Ignoring removed orlov option [ 54.134676][ T4365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.148352][ T4351] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.207744][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.341356][ T4373] __nla_validate_parse: 3 callbacks suppressed [ 54.341375][ T4373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.317'. [ 54.389536][ T4373] team0 (unregistering): Port device team_slave_0 removed [ 54.402925][ T4373] team0 (unregistering): Port device team_slave_1 removed [ 54.415430][ T4371] netlink: 'syz.0.316': attribute type 4 has an invalid length. [ 54.556197][ T4397] syz.2.328 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 54.577824][ T4400] netlink: 'syz.4.327': attribute type 1 has an invalid length. [ 54.605651][ T4400] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.660903][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.327'. [ 54.693554][ T4405] bond2 (unregistering): Released all slaves [ 54.738136][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.331'. [ 54.821682][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 54.830704][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 55.111020][ T4430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.339'. [ 55.151854][ T53] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.174053][ T53] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.192658][ T29] kauditd_printk_skb: 603 callbacks suppressed [ 55.192676][ T29] audit: type=1326 audit(55.168:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6232feec9 code=0x7ffc0000 [ 55.206968][ T53] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.230001][ T53] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.238375][ T29] audit: type=1326 audit(55.198:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6232feec9 code=0x7ffc0000 [ 55.261699][ T29] audit: type=1326 audit(55.198:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6232feec9 code=0x7ffc0000 [ 55.284733][ T29] audit: type=1326 audit(55.198:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6232feec9 code=0x7ffc0000 [ 55.309419][ T29] audit: type=1326 audit(55.208:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6232feec9 code=0x7ffc0000 [ 55.332536][ T29] audit: type=1326 audit(55.208:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6232feec9 code=0x7ffc0000 [ 55.355447][ T29] audit: type=1326 audit(55.208:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6232feec9 code=0x7ffc0000 [ 55.378819][ T29] audit: type=1326 audit(55.258:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6232feec9 code=0x7ffc0000 [ 55.401598][ T29] audit: type=1326 audit(55.258:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6232feec9 code=0x7ffc0000 [ 55.424642][ T29] audit: type=1326 audit(55.258:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4432 comm="syz.3.340" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6232feec9 code=0x7ffc0000 [ 55.494386][ T4439] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 55.588150][ T4445] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 55.597627][ T4445] FAT-fs (loop7): unable to read boot sector [ 55.685807][ T4451] loop3: detected capacity change from 0 to 512 [ 55.703645][ T4451] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.836998][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.941225][ T4464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.351'. [ 55.973406][ T4464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 55.990390][ T4464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 56.005394][ T4464] bond2 (unregistering): Released all slaves [ 56.058639][ T4467] loop4: detected capacity change from 0 to 2048 [ 56.074228][ T4467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.105215][ T3301] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 56.122636][ T3301] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 56.136794][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.152594][ T4473] loop3: detected capacity change from 0 to 512 [ 56.159466][ T4473] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 56.172697][ T4473] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.355: invalid indirect mapped block 4294967295 (level 0) [ 56.203240][ T4473] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.355: invalid indirect mapped block 4294967295 (level 1) [ 56.217860][ T4473] EXT4-fs (loop3): 1 orphan inode deleted [ 56.223708][ T4473] EXT4-fs (loop3): 1 truncate cleaned up [ 56.243214][ T4473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.277661][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.684250][ T4553] lo speed is unknown, defaulting to 1000 [ 56.696133][ T4553] lo speed is unknown, defaulting to 1000 [ 56.712494][ T4553] lo speed is unknown, defaulting to 1000 [ 56.732496][ T4553] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.740143][ T4553] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 56.782520][ T4553] lo speed is unknown, defaulting to 1000 [ 56.797709][ T4553] lo speed is unknown, defaulting to 1000 [ 56.813971][ T4553] lo speed is unknown, defaulting to 1000 [ 56.829182][ T4553] lo speed is unknown, defaulting to 1000 [ 56.835608][ T4553] lo speed is unknown, defaulting to 1000 [ 56.859673][ T4565] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 57.022906][ T4577] net_ratelimit: 2 callbacks suppressed [ 57.023000][ T4577] netlink: zone id is out of range [ 57.050806][ T4577] netlink: zone id is out of range [ 57.056021][ T4577] netlink: zone id is out of range [ 57.061270][ T4577] netlink: zone id is out of range [ 57.071045][ T4577] netlink: zone id is out of range [ 57.076202][ T4577] netlink: zone id is out of range [ 57.083350][ T4577] netlink: zone id is out of range [ 57.088494][ T4577] netlink: zone id is out of range [ 57.100835][ T4577] netlink: zone id is out of range [ 57.106744][ T4577] netlink: zone id is out of range [ 57.194680][ T4585] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 57.217321][ T4585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'. [ 57.473106][ T4595] loop3: detected capacity change from 0 to 8192 [ 57.644272][ T4600] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 57.652639][ T4600] SELinux: failed to load policy [ 57.713880][ T4597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.724484][ T4597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.868994][ T4608] ªªªªªª: renamed from vlan0 (while UP) [ 57.965498][ T4614] tipc: Started in network mode [ 57.970820][ T4614] tipc: Node identity ac1414aa, cluster identity 4711 [ 57.978145][ T4614] tipc: Enabled bearer , priority 10 [ 58.006423][ T4617] netlink: 24 bytes leftover after parsing attributes in process `syz.5.390'. [ 58.088881][ T4623] loop4: detected capacity change from 0 to 1024 [ 58.101683][ T4623] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 58.166754][ T4628] loop4: detected capacity change from 0 to 512 [ 58.177710][ T4628] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 58.190473][ T4628] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 58.199452][ T4628] System zones: 1-12 [ 58.203554][ T4628] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.210394][ T4628] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.395: invalid indirect mapped block 12 (level 1) [ 58.224944][ T4628] EXT4-fs (loop4): Remounting filesystem read-only [ 58.234025][ T4628] EXT4-fs (loop4): 1 truncate cleaned up [ 58.240374][ T4628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 58.270969][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 58.664836][ T4652] loop4: detected capacity change from 0 to 1024 [ 58.687126][ T4652] EXT4-fs: Ignoring removed orlov option [ 58.709073][ T4652] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.115095][ T4676] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 59.123647][ T4676] netlink: 'syz.0.414': attribute type 4 has an invalid length. [ 59.133514][ T2953] tipc: Node number set to 2886997162 [ 59.156429][ T4676] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 59.164459][ T4676] netlink: 'syz.0.414': attribute type 4 has an invalid length. [ 59.265569][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.551756][ T4694] __nla_validate_parse: 2 callbacks suppressed [ 59.551780][ T4694] netlink: 96 bytes leftover after parsing attributes in process `syz.3.421'. [ 59.743328][ T4713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4713 comm=syz.3.429 [ 59.945152][ T4719] loop3: detected capacity change from 0 to 128 [ 60.099372][ T4727] loop4: detected capacity change from 0 to 2048 [ 60.177342][ T4732] loop3: detected capacity change from 0 to 2048 [ 60.200195][ T4734] team0: Port device team_slave_0 removed [ 60.269414][ T4727] loop4: unable to read partition table [ 60.282471][ T4727] loop4: partition table beyond EOD, truncated [ 60.288865][ T4727] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 60.366165][ T4745] netem: incorrect ge model size [ 60.372055][ T4745] netem: change failed [ 60.510496][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 60.510513][ T29] audit: type=1326 audit(60.478:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 60.573186][ T29] audit: type=1326 audit(60.478:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 60.596365][ T29] audit: type=1326 audit(60.528:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 60.620622][ T29] audit: type=1326 audit(60.528:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f276dabef03 code=0x7ffc0000 [ 60.644180][ T29] audit: type=1326 audit(60.528:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f276dabd97f code=0x7ffc0000 [ 60.678149][ T29] audit: type=1326 audit(60.608:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f276dabef57 code=0x7ffc0000 [ 60.686358][ T4754] loop4: detected capacity change from 0 to 2048 [ 60.735143][ T29] audit: type=1326 audit(60.658:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f276dabd710 code=0x7ffc0000 [ 60.758421][ T29] audit: type=1326 audit(60.658:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f276dabeacb code=0x7ffc0000 [ 60.918203][ T29] audit: type=1326 audit(60.888:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f276dabdb2a code=0x7ffc0000 [ 60.941087][ T29] audit: type=1326 audit(60.888:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4753 comm="syz.4.449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f276dabdb2a code=0x7ffc0000 [ 61.008257][ T4768] loop0: detected capacity change from 0 to 512 [ 61.023539][ T4754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.095120][ T4768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.114137][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.151439][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.313833][ T4791] netlink: 64 bytes leftover after parsing attributes in process `syz.0.460'. [ 61.416856][ T4802] SELinux: ebitmap: truncated map [ 61.423039][ T4802] SELinux: failed to load policy [ 61.423457][ T4801] netlink: 664 bytes leftover after parsing attributes in process `syz.5.467'. [ 61.522058][ T4808] netlink: 'syz.0.470': attribute type 49 has an invalid length. [ 61.536868][ T4815] loop4: detected capacity change from 0 to 1024 [ 61.558386][ T4817] loop5: detected capacity change from 0 to 164 [ 61.582885][ T4815] EXT4-fs: Ignoring removed orlov option [ 61.600018][ T4815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.647058][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.748391][ T4844] netlink: 'syz.0.492': attribute type 1 has an invalid length. [ 61.767484][ T4844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.783856][ T4844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.492'. [ 61.799000][ T4844] bond1 (unregistering): Released all slaves [ 61.938900][ T4858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 61.948692][ T4858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 61.962934][ T4860] loop0: detected capacity change from 0 to 512 [ 61.970246][ T4860] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.986652][ T4860] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 62.004092][ T4860] System zones: 1-12 [ 62.011254][ T4860] EXT4-fs (loop0): 1 truncate cleaned up [ 62.020545][ T4860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.073124][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.214574][ T4878] loop0: detected capacity change from 0 to 1024 [ 62.233843][ T4878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.292325][ T4878] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.497: Allocating blocks 385-513 which overlap fs metadata [ 62.533989][ T4878] EXT4-fs (loop0): pa ffff8881070191c0: logic 16, phys. 129, len 24 [ 62.542293][ T4878] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 62.643281][ T4878] syz.0.497 (4878) used greatest stack depth: 10136 bytes left [ 62.643356][ T4891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.500'. [ 62.672956][ T4852] cgroup: fork rejected by pids controller in /syz5 [ 62.693853][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.792966][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'. [ 62.802035][ T4931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.502'. [ 62.819680][ T4932] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 62.863116][ T4933] netlink: 'syz.0.503': attribute type 10 has an invalid length. [ 63.238899][ T4952] loop3: detected capacity change from 0 to 8192 [ 63.284248][ T4957] loop2: detected capacity change from 0 to 512 [ 63.292469][ T4957] EXT4-fs: Ignoring removed mblk_io_submit option [ 63.311695][ T4952] loop3: p1 p2 p3 p4 [ 63.321045][ T4957] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.333231][ T4952] loop3: p3 start 331777 is beyond EOD, truncated [ 63.340232][ T4952] loop3: p4 size 262144 extends beyond EOD, truncated [ 63.349640][ T4957] EXT4-fs (loop2): 1 truncate cleaned up [ 63.356026][ T4957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.437605][ T4960] syzkaller1: entered promiscuous mode [ 63.443368][ T4960] syzkaller1: entered allmulticast mode [ 63.552100][ T4966] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 63.709369][ T4975] netlink: 64 bytes leftover after parsing attributes in process `syz.3.521'. [ 63.735667][ T4977] netlink: 'syz.5.522': attribute type 10 has an invalid length. [ 63.881874][ T4988] bridge: RTM_NEWNEIGH with invalid ether address [ 63.905711][ T4986] loop0: detected capacity change from 0 to 8192 [ 63.931795][ T4986] loop0: p1 p2 p3 p4 [ 63.940312][ T4986] loop0: p3 start 331777 is beyond EOD, truncated [ 63.946897][ T4986] loop0: p4 size 262144 extends beyond EOD, truncated [ 63.985227][ T5000] netlink: 'syz.4.532': attribute type 1 has an invalid length. [ 64.000108][ T5000] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.064019][ T5000] bond2 (unregistering): Released all slaves [ 64.093336][ T23] Process accounting resumed [ 64.322419][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.579979][ T5037] loop2: detected capacity change from 0 to 512 [ 64.588635][ T5037] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 64.644190][ T5039] syzkaller1: entered promiscuous mode [ 64.649811][ T5039] syzkaller1: entered allmulticast mode [ 64.784020][ T5045] loop3: detected capacity change from 0 to 1024 [ 64.794821][ T5045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.819502][ T5049] __nla_validate_parse: 1 callbacks suppressed [ 64.819521][ T5049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.552'. [ 64.835673][ T5049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.552'. [ 64.864077][ T5045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.940214][ T5061] netlink: 'syz.4.556': attribute type 30 has an invalid length. [ 64.980572][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.229813][ T5065] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 65.355034][ T5069] loop2: detected capacity change from 0 to 8192 [ 65.550019][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 65.550035][ T29] audit: type=1400 audit(65.518:1590): avc: denied { read } for pid=5092 comm="syz.0.571" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.579374][ T29] audit: type=1400 audit(65.518:1591): avc: denied { open } for pid=5092 comm="syz.0.571" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.623386][ T5095] bridge: RTM_NEWNEIGH with invalid ether address [ 65.649020][ T29] audit: type=1400 audit(65.578:1592): avc: denied { ioctl } for pid=5092 comm="syz.0.571" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 65.778101][ T29] audit: type=1400 audit(65.748:1593): avc: denied { write } for pid=5099 comm="syz.2.574" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 65.857252][ T5108] netlink: 64 bytes leftover after parsing attributes in process `syz.4.575'. [ 66.143320][ T5126] netlink: 'syz.0.581': attribute type 4 has an invalid length. [ 66.220250][ T5135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.265667][ T5142] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 66.290482][ T5142] FAT-fs (loop9): unable to read boot sector [ 66.345435][ T5150] netlink: 64 bytes leftover after parsing attributes in process `syz.0.592'. [ 66.441263][ T29] audit: type=1326 audit(66.418:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 66.478188][ T5140] netlink: 'syz.5.588': attribute type 4 has an invalid length. [ 66.486406][ T5159] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.594'. [ 66.496267][ T5159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.594'. [ 66.510892][ T29] audit: type=1326 audit(66.418:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 66.534663][ T29] audit: type=1326 audit(66.418:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 66.557743][ T29] audit: type=1326 audit(66.448:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f276dabef03 code=0x7ffc0000 [ 66.581345][ T29] audit: type=1326 audit(66.458:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f276dabef03 code=0x7ffc0000 [ 66.604290][ T29] audit: type=1326 audit(66.458:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.4.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 66.662664][ T5163] loop2: detected capacity change from 0 to 512 [ 66.669695][ T5163] EXT4-fs: Ignoring removed mblk_io_submit option [ 66.676430][ T5163] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 66.694302][ T5163] EXT4-fs (loop2): 1 truncate cleaned up [ 66.702048][ T5163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.000291][ T5177] wg2: left promiscuous mode [ 67.005952][ T5177] wg2: left allmulticast mode [ 67.549565][ T5182] netlink: 'syz.4.602': attribute type 10 has an invalid length. [ 67.603254][ T5188] netlink: 8 bytes leftover after parsing attributes in process `syz.5.603'. [ 67.651323][ T5186] loop3: detected capacity change from 0 to 8192 [ 67.689889][ T5190] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 67.706282][ T5190] FAT-fs (loop11): unable to read boot sector [ 67.730449][ T5192] netlink: 68 bytes leftover after parsing attributes in process `syz.4.605'. [ 67.784229][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.843145][ T5192] bond2: entered promiscuous mode [ 67.848231][ T5192] bond2: entered allmulticast mode [ 67.877283][ T5192] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.922282][ T5192] bond2 (unregistering): Released all slaves [ 68.099902][ T5185] net_ratelimit: 41 callbacks suppressed [ 68.099920][ T5185] Set syz1 is full, maxelem 65536 reached [ 68.431096][ T5226] netlink: 'syz.2.619': attribute type 10 has an invalid length. [ 68.516323][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 68.593874][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 68.624794][ T5237] loop3: detected capacity change from 0 to 1024 [ 68.632661][ T5237] EXT4-fs: Ignoring removed orlov option [ 68.643946][ T5237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.694842][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.134990][ T5266] loop2: detected capacity change from 0 to 764 [ 69.177452][ T5266] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 69.351043][ T5270] loop4: detected capacity change from 0 to 1024 [ 69.371399][ T5251] Set syz1 is full, maxelem 65536 reached [ 69.384558][ T5270] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.428624][ T5270] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.635: lblock 1 mapped to illegal pblock 1 (length 1) [ 69.451135][ T5270] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.635: Failed to acquire dquot type 0 [ 69.496387][ T5270] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.635: Freeing blocks not in datazone - block = 0, count = 4096 [ 69.512218][ T5270] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.635: Invalid inode bitmap blk 0 in block_group 0 [ 69.525161][ T5270] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 69.534209][ T5274] loop5: detected capacity change from 0 to 512 [ 69.534244][ T12] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 69.555824][ T5270] EXT4-fs (loop4): 1 orphan inode deleted [ 69.556761][ T5274] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 69.564654][ T5270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.584773][ T5274] EXT4-fs (loop5): 1 truncate cleaned up [ 69.588667][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 69.592770][ T5274] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.617096][ T5270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.654590][ T4106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.667008][ T5283] loop0: detected capacity change from 0 to 512 [ 69.675165][ T5283] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 69.688913][ T5283] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002] [ 69.701199][ T5283] System zones: 1-12 [ 69.705319][ T5283] EXT4-fs (loop0): orphan cleanup on readonly fs [ 69.726913][ T5283] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.651: invalid indirect mapped block 12 (level 1) [ 69.773965][ T5292] loop4: detected capacity change from 0 to 512 [ 69.790773][ T5292] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.805461][ T5283] EXT4-fs (loop0): Remounting filesystem read-only [ 69.813328][ T5283] EXT4-fs (loop0): 1 truncate cleaned up [ 69.823281][ T5283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 69.823599][ T5292] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.641: invalid indirect mapped block 4294967295 (level 0) [ 69.851087][ T5283] netlink: zone id is out of range [ 69.856502][ T5283] netlink: zone id is out of range [ 69.867620][ T5283] netlink: zone id is out of range [ 69.870671][ T5292] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.641: invalid indirect mapped block 4294967295 (level 1) [ 69.873661][ T5283] netlink: zone id is out of range [ 69.892740][ T5283] netlink: zone id is out of range [ 69.897891][ T5283] netlink: zone id is out of range [ 69.911055][ T5292] EXT4-fs (loop4): 1 orphan inode deleted [ 69.915981][ T5283] netlink: zone id is out of range [ 69.916851][ T5292] EXT4-fs (loop4): 1 truncate cleaned up [ 69.922246][ T5283] netlink: zone id is out of range [ 69.934389][ T5292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.969358][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 70.026911][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.170445][ T5305] netlink: 68 bytes leftover after parsing attributes in process `syz.5.646'. [ 70.188876][ T5305] bond1: entered promiscuous mode [ 70.194341][ T5305] bond1: entered allmulticast mode [ 70.201254][ T5305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.223533][ T5305] bond1 (unregistering): Released all slaves [ 70.537249][ T5316] loop2: detected capacity change from 0 to 2048 [ 70.607406][ T5316] loop2: unable to read partition table [ 70.623971][ T5316] loop2: partition table beyond EOD, truncated [ 70.630236][ T5316] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 70.837539][ T5324] netlink: 14 bytes leftover after parsing attributes in process `syz.3.655'. [ 70.854890][ T5324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.867868][ T5324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.884170][ T5324] bond0 (unregistering): Released all slaves [ 70.970983][ T5328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 71.058241][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 71.058258][ T29] audit: type=1326 audit(71.028:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 71.076400][ T5333] loop0: detected capacity change from 0 to 764 [ 71.103148][ T29] audit: type=1326 audit(71.068:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 71.126800][ T29] audit: type=1326 audit(71.068:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 71.149564][ T29] audit: type=1326 audit(71.068:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 71.173279][ T29] audit: type=1326 audit(71.068:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 71.197138][ T29] audit: type=1326 audit(71.128:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 71.220923][ T29] audit: type=1326 audit(71.168:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 71.243795][ T29] audit: type=1326 audit(71.168:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 71.273429][ T29] audit: type=1326 audit(71.168:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 71.296808][ T5333] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 71.297537][ T29] audit: type=1326 audit(71.168:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5331 comm="syz.4.660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276dabeec9 code=0x7ffc0000 [ 71.466323][ T5339] lo speed is unknown, defaulting to 1000 [ 71.472502][ T5339] lo speed is unknown, defaulting to 1000 [ 71.478510][ T5339] lo speed is unknown, defaulting to 1000 [ 71.485809][ T5339] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 71.498863][ T5339] lo speed is unknown, defaulting to 1000 [ 71.505074][ T5339] lo speed is unknown, defaulting to 1000 [ 71.512599][ T5339] lo speed is unknown, defaulting to 1000 [ 71.519196][ T5339] lo speed is unknown, defaulting to 1000 [ 71.525494][ T5339] lo speed is unknown, defaulting to 1000 [ 72.043952][ T5383] loop2: detected capacity change from 0 to 1024 [ 72.066353][ T5383] EXT4-fs: Ignoring removed orlov option [ 72.090130][ T5385] netlink: 'syz.5.677': attribute type 10 has an invalid length. [ 72.098700][ T5385] netlink: 156 bytes leftover after parsing attributes in process `syz.5.677'. [ 72.122810][ T5383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.490503][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.594250][ T5410] loop5: detected capacity change from 0 to 1024 [ 72.602729][ T5410] EXT4-fs: Ignoring removed orlov option [ 72.623371][ T5410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.946064][ T5418] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.958159][ T4106] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.005506][ T5418] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.029576][ T5434] netlink: 'syz.3.706': attribute type 30 has an invalid length. [ 73.063748][ T5426] loop5: detected capacity change from 0 to 2048 [ 73.084670][ T5418] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.126351][ T5426] loop5: unable to read partition table [ 73.134766][ T5426] loop5: partition table beyond EOD, truncated [ 73.141158][ T5426] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 73.154896][ T5418] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.200742][ T4477] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.233102][ T4477] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.273841][ T4477] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.283181][ T4477] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.296858][ T5446] loop3: detected capacity change from 0 to 512 [ 73.305835][ T5446] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.313068][ T5446] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.332019][ T5446] EXT4-fs (loop3): 1 truncate cleaned up [ 73.344076][ T5446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.599567][ T5446] ================================================================== [ 73.607701][ T5446] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 73.615528][ T5446] [ 73.617865][ T5446] write to 0xffffea000419f098 of 8 bytes by task 5451 on cpu 1: [ 73.625670][ T5446] __filemap_remove_folio+0x1a5/0x2a0 [ 73.631149][ T5446] folio_unmap_invalidate+0x1dd/0x360 [ 73.636532][ T5446] invalidate_inode_pages2_range+0x27c/0x3d0 [ 73.642584][ T5446] filemap_invalidate_pages+0x16d/0x1a0 [ 73.648321][ T5446] kiocb_invalidate_pages+0x6e/0x80 [ 73.653816][ T5446] __iomap_dio_rw+0x5d4/0x1250 [ 73.658793][ T5446] iomap_dio_rw+0x40/0x90 [ 73.663305][ T5446] ext4_file_write_iter+0xad9/0xf00 [ 73.668527][ T5446] iter_file_splice_write+0x663/0xa60 [ 73.673956][ T5446] direct_splice_actor+0x153/0x2a0 [ 73.679105][ T5446] splice_direct_to_actor+0x30f/0x680 [ 73.684493][ T5446] do_splice_direct+0xda/0x150 [ 73.689278][ T5446] do_sendfile+0x380/0x650 [ 73.693718][ T5446] __x64_sys_sendfile64+0x105/0x150 [ 73.698926][ T5446] x64_sys_call+0x2bb0/0x2ff0 [ 73.703617][ T5446] do_syscall_64+0xd2/0x200 [ 73.708132][ T5446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.714112][ T5446] [ 73.716437][ T5446] read to 0xffffea000419f098 of 8 bytes by task 5446 on cpu 0: [ 73.724115][ T5446] folio_mapping+0xa1/0x120 [ 73.728830][ T5446] lru_add+0x80/0x430 [ 73.732814][ T5446] folio_batch_move_lru+0x1c5/0x280 [ 73.738103][ T5446] lru_add_drain_cpu+0x77/0x250 [ 73.743143][ T5446] __folio_batch_release+0x44/0xb0 [ 73.748378][ T5446] filemap_splice_read+0x59e/0x740 [ 73.753725][ T5446] ext4_file_splice_read+0x8f/0xb0 [ 73.758871][ T5446] splice_direct_to_actor+0x26f/0x680 [ 73.764306][ T5446] do_splice_direct+0xda/0x150 [ 73.769094][ T5446] do_sendfile+0x380/0x650 [ 73.773551][ T5446] __x64_sys_sendfile64+0x105/0x150 [ 73.778780][ T5446] x64_sys_call+0x2bb0/0x2ff0 [ 73.783562][ T5446] do_syscall_64+0xd2/0x200 [ 73.788086][ T5446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.794019][ T5446] [ 73.796365][ T5446] value changed: 0xffff88810048a998 -> 0x0000000000000000 [ 73.803603][ T5446] [ 73.805934][ T5446] Reported by Kernel Concurrency Sanitizer on: [ 73.812204][ T5446] CPU: 0 UID: 0 PID: 5446 Comm: syz.3.699 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.821855][ T5446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 73.832105][ T5446] ================================================================== [ 74.225736][ T5451] syz.3.699 (5451) used greatest stack depth: 9656 bytes left [ 74.238722][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.