last executing test programs: 6.197716939s ago: executing program 3 (id=282): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001300010300000000000100000a"], 0x14}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) 4.571854203s ago: executing program 3 (id=294): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20044840}, 0x10) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 4.37242617s ago: executing program 1 (id=299): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x7, 0x4ab, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) open_by_handle_at(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000b00000000000000"], 0x0) 4.371767968s ago: executing program 3 (id=300): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.089809647s ago: executing program 1 (id=304): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x302, 0x0) write$cgroup_pid(r5, &(0x7f0000000280), 0x3) 4.039908869s ago: executing program 2 (id=306): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='X\x00\x00\x00', 0x4}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 3.97831368s ago: executing program 3 (id=307): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) syz_clone3(0x0, 0x0) 3.90081418s ago: executing program 0 (id=308): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r0, 0x0, 0x0) unshare(0x2040400) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x6}}]}}}]}, 0x60}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x38, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x38}}, 0x0) 3.835453011s ago: executing program 3 (id=309): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="ea8c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f00000001c0), 0x1, 0x51c, &(0x7f0000000780)="$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") r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) acct(&(0x7f0000000200)='./file1\x00') fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x0, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x80000000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="010000000400fdffc41a00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000002000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = io_uring_setup(0x1691, &(0x7f0000000400)={0x0, 0x631d, 0x1000, 0x5, 0x2d8}) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0x400400}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) r7 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x9a02, 0x0, 0x90, [0x0, 0x20001130], 0x10d, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b64c771a76e9a700"/144]}, 0x108) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r8}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) 3.804769804s ago: executing program 2 (id=311): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') lremovexattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@known='security.apparmor\x00') openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2b010000080000000100014400", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff13, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 2.034667574s ago: executing program 2 (id=312): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20044840}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.895398s ago: executing program 1 (id=314): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18c8c957cbab21dff0c04067400000000001000000e300000000001811000045f637c209f138742dbbd6c00dd393d85d7be6e0833716b9fd1d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) iopl(0x3) add_key$keyring(&(0x7f0000000000), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x10, 0x10ba01) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0}) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c000000010405000000000000000000ffffffea06000640000000000800054000000000050001"], 0x7c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000380)="54dc7429a6b938465caaf84eaa51f94168c90600000000000000c655dec20c030746fe7b602785ff1cf2a92f5d6c6e6a89005e34b7b8c0f6db837922ef21e839524c0514676f0ce7819ba6f1cf26f9dd1494bf9540e2f8e4c732422fe47e59748d49605f866ffdb5ccfe52b1c7aca7e28c46a3584e3666deba464ba99018bb14a6d41d4c2ef97d29abf58fecbb72ba962ddc992e3aeca9798ba7bc7c077584fbfa8acfe67a45db2bc5725b485b2085cbad8ebbfc0017a086b05f26a96dfb8063f901457f8f6910c261b13cfb84bf658cf1fe9c664f731c4ed4c333470987e4ce5a16095d5dbfe21b3d2a30dc51324f281f702fe607f4718795e368ee3dc9d4835dd2aa271fcf5b99b43f1b11391080fcd9b263fd17ca8d84e7b6879692d99f69f3426348c407bb9f84dfe5b23418deff0ec2a97ee770112272c04fbcc67b8ad854730381ac5f6584b81855fd3d34bb728c1003e2c63f171d4335f79ac0c740581983d9db14c258fbaaccfa806668c7d052a5ef454d8ee4687bea83bca11ad4a256ce72eb0e5d3b40809cdffe2196ecd0063a8a0aedcc0dc3f5e922c19bfb983644fa560332c4800832f891977442710643a9322e3a01daf68818432a6a21701ac1c12e6e56f3d5fb14e38085f3bc852a5c46", 0x1d2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) mount$9p_tcp(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c756e616d653d042e2d7d282c6673636f6e746578743d73797361646d5f752c7569643d", @ANYRESDEC=r9, @ANYBLOB]) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000180)={r10}, &(0x7f00000001c0)=0x8) r11 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062000a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, r11) 1.843970667s ago: executing program 0 (id=315): r0 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x7, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) 1.843752143s ago: executing program 4 (id=316): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000001000030428bd7000000000", @ANYBLOB="15020000001004001c00128009000100766c616e000000000c0002800600010000000000240012800b0001006970766c616e00001400028006000200010000000600020003"], 0x68}, 0x1, 0xba01}, 0x0) 1.818844929s ago: executing program 2 (id=317): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x200011, &(0x7f0000000080)={[{@nombcache}, {@debug}, {@dioread_lock}, {@grpid}, {@norecovery}]}, 0x9, 0x633, &(0x7f0000002040)="$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") 1.745518892s ago: executing program 4 (id=318): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7d0, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback, @local, [@srh]}}}}}}}, 0x0) 1.659850862s ago: executing program 0 (id=319): prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r0 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) syz_clone3(0x0, 0x0) 1.619278037s ago: executing program 4 (id=320): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.555930851s ago: executing program 0 (id=321): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x7, 0x4ab, &(0x7f0000000100)="$eJzs3E9sFFUYAPBvtru0gEhFREFMimhsNLZQUDh4wWjiQRMjHvTYtIUghRpaEyFESmLwaEi8G49eOXhVb8aTiVc8eDAxJMRwATyNmd2Zdrt/Wtpuu+D+fsnS92be7Hvfvnmzb+ftEkDPGsr+SSIei4ibEbGzll1aYKj2596dyxP371yeiPk0PflPUi13N8vniuO255nhUkTpy6ThCWtmL146Oz49PXUhz4/Onft0dPbipVfPnBs/PXV66vzY8eNHjxw+9vrYa6sPqkV9WVx3930xs3/vOx9ff2+iXGwfyP/Wx9EpQzFU35Qb9c16sdOVddmOunRS7mJDWJXs/M+6q1Id/zujL3Qe9Io0TdP+9rvn00ZXm7YAj6wkut0CoDuKN/rs82/x2KSpx0Ph9onaB6As7nv5o7anHKW8TKXh820nDUXER/P/fps9Yrn7EH9uUAMAgJ7z04liJtg4/yvFnrpyj+drKIMR8URE7IqIJyNid0Q8FVEt+3REPNNYQRKRLlP/7oZ88/yndGs98a0km/+9ka9tLZ3/FbO/GOzLczsiignz1KH8NRmOSv+pM9NTh5ep4+e3fv+63b76+V/2yOov5oJ5O26VG27QTY7Pja854Aa3r0bsKzfGn5SzjitWApKI2BsR+1bxvIN16TMvf79/IVNZWm7l+KvSFkt60YmlivS7iJdq/T8fS/p/scZk+fXJ0YGYnjo0mp0Fh1rW8etv195vV/+K8f/wV+Mhbx/78eR6w16Q9f+2uvM/ivXbxfgHk4hkYb12dvV1XPvjq+rzDh1s3rfW839L8mE1vSXf9vn43NyFwxFbknebt48tHlvki/JZ/MMHW4//Xfkx2SvxbERkJ/FzdSdw1vYDEfF8RLQIbcEvb77wSbt9D3j+b5gs/skW178rS/t/cb1+DYm+swdu3m9z8Xiw/j9aTQ3nW1pf/5Ill4gHbWBHXkQAAAB4yJWi+t3/0shCulQaGandA9od20rTM7Nzr5ya+ez8ZO03AoNRKRV3umr3gytJcf9zsC4/1pA/kt83/qZvazU/MjEzPdnt4KHHba+O+aRp/Gf+7ut264AN5yc/0LtWGv97rm9SQ4BN5/0felfd+J9vU2TeN2Xg/8n7P/SuVuP/yhqOAR4tqbEMPc34h95Vjg8W0qWutgTYbN7/oSet53f9KyfS/ta7BqK5cAxsTDO2tqirK4lsZtWV2reu5ajif1NoWyZKq3vC/mje1RedDrkSESsWPr2n4yd/mn9XvtM9eGNTxmmrRFcuRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB33XwAAAP//BnreqA==") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) open_by_handle_at(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000b00000000000000"], 0x0) 1.431921744s ago: executing program 2 (id=322): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.36103179s ago: executing program 2 (id=323): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000001600)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r4, &(0x7f0000003040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/174, 0xae}, 0x400}], 0x1, 0x2, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000240)=ANY=[@ANYBLOB='check=strict,session=0x0000000000000024,iocharset=ascii,overriderockperm,overriderockperm,gid=', @ANYRESOCT=0x0, @ANYRES16=0x0], 0xfe, 0xa15, &(0x7f00000002c0)="$eJzs3c1vHOd9B/DvrEiJog1VtlVXFWxrJUM2bbMUSdUSBB9qiVxKdPlSkBRgoS0sw5IKQURd2C1gGz3IQNFTjBhBECDJJfAxJwPOIb4EuiXHnHIIkPg/CIxcohwCBju7lJbkvog0RSrK57MYzdvveduZnUe73J0n/CVbWVkppy2uX/rxTlaWh8/5ya8++/yT+vTxrezNnrxa/DQZSFJN+v5Univ9E5ML87M9MrqZXElyOymS7Etj3sH+NWtXUnw7j99bv53ihzncJtnAJhtHTyv8Vdvt8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5KE5Ojo2NFZqbnLr1Z7awcArzL/tXsvixH/S6+7FVskRT1KQMDq0N9Hz50b/fT9X+O55nG2jONkb8H8tFjTx987am+ymr6LhXaEe9/+NHNt5eXr713b1N/28C+Zrvqy/t2rHr3b+/Wkl2ozU0vzk/PnrtQq04vzlfPnj49evLi1GJ1ajq1xcuLS7XZ6sRC7dzS/EJ1aOKl6tjZs6eqtZHL85fmLkyOzNRWN575h/HR0dPVN0b+pXZuYXF+7uQbI4sTF6dnZqbnLpQx9d31mDP1E/Gfp5eqS7Vzs9Xq9RvL1071qmQ9aKztnmJt0HivnMZHx8fHxsbHx06/evbVM6OjfRs2jK6TDRG7f9Kye36yrddu+IYqzf4/M5nOXC7lzVTbPiYymYXMZ7bD/qbV/v/EyVrXclv7/9Ve/vC93UdS9v/PNdae69T/d6hL78fKSiPnraZffbyfD/NRbubtLGc51/LeN85xw+OP25RP9Zu3duPjQmqZy3QWM5/pzOZcuaXa3FLN2ZzO6YzmrVzMVBZTzVSmM5NaFnM5i1lKrTyjJrKQWs5lKfNZSDVDmchLqWYsZ3M2p1JNLSO5nPlcylwuZDLnylyu50b5vJ/qUse7QWP3EzTeJWib+/+Vh/F/gjxo234Nh61aafb/ezsGrKwuDU3sWK0AAACA7fT3v8iBQ0/+/DdJf54tP5efmp6pje52tQAAAIBtVH5d75n6rL++9GwK7/8BAADgUVOUv7ErkgzmaGOp8UuoPfEhAAAAADwiyr//P1efDdaXjqa4eyeUK7tdNwAAAGB79L7Hfs+IYnj19r/Vq4351WZE8z6/g1PTM7WRifmZ18byQnmXgfKXBhty25MU/eXPD17OsUbUscHGfHBtjgP1qLGR18byco43GzL0fH32/FCbyPFG5IuNyBe7RJ6qRwLAo+54l/74fvv/lzPciBg+0rc3Sd+RNj3rqJ4VAB4WvcfY6RlR/OO99//9zWzX9P9P5vofGl8pGMk7eTfLuZrh8tcG5TcO1uT6b582PzO4+zWE0Qz3+DRgNfaXZyoZ7vF5wGDLQC/DPT4RaMTm35NTD/5AAMAOOt6hH95M/z/c8v4/G9//3x1a6JqfFALAQ+HuCPYPcGG32wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgO23rXf7H9hi8t82x/V7sMMQbFjY33wOtp7Pd5LsXJ2LbS6rsg35rCTZqeO1cws5mGz5WW17Gu9Nsvvt6rnQ13xJ3Hx7ebeuSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOykItnTbnsl2ZdkNMnJna/Vg3Nrtyuw8/6pdaW4kzv5IAd2rzoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+m5v3/K2nMH2tsSl8lOZHkSpJ/3e06bqc7u12BbbJ/i+la7v9fP+ZZKdLXOOwp+icmF+Zn64e/HPuh8tVnn39Sn1qS77vfcsrAyrrBJZolrI/90eOrS0+UqQYnr71/87/f/a/q5PlUsjfnl6ZmJmcvLLx+L8nTxRdJNY1p1Wp9//fEzz5t0/Iv6i1tb325U+WTM7mx3L9rl7p7ud3cWL42Xi9pqfbm0v/8540PWnY9mWPJ80PJ0NqS/qM+dSjpWPq7lVZ8Xfx/cSDfy5Xy+NefjWKlqB+ivynbv//6jeVrI++8u3y1Q50O5miSq8lA9zp93LL7aHk9aas86yr99VJHy6D6P4d6tLGrlhzHOrThifKUGWy2YW/HNrSqdm5DqeV5r7Tb36jRqQ41eiovtDnSK/uSzjV6ofuRbq/4uvh1cTG/yv+1jP9RqR//E+n86lybRRnZcqZ0jKw0IsuWj7fueGt95O++f1+1bztMDZv1rTUv3krL9b95rLbperRSdL0etZS4udfFuhLXnRVdXhdlj3RoXYrm1adTmmY9DzWiOtTzb/NK0nek21VxQ2/9So8ryt30r7ffvdXX/w+Kofw+t4z/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPyKZE+77ZXkRJKDq+vVZGUT2e7rtKMyWGy2itvq1t1/HgmVzSYo7uROPsiBB1MdAAAAAAAAAHba+cmvPvv8k/pU7G9uav59v5r0JTlYfHd/JhfmZ3tk1J9cSXK7vjzQZn+XP/fX0+Xxe+u362uHN9sSAOB+/TkAAP//mWBg/A==") execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r8, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x18, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) unshare(0x42000000) 1.327880938s ago: executing program 0 (id=324): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x3e8}}, 0x0) ppoll(&(0x7f0000000000)=[{}], 0x46, 0x0, 0x0, 0x0) 1.294022669s ago: executing program 4 (id=325): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff19) 1.1598025s ago: executing program 4 (id=326): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xc00, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/wakeup_count', 0x302, 0x0) write$cgroup_pid(r5, &(0x7f0000000280), 0x3) 1.159019823s ago: executing program 3 (id=327): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x14, 0x12, 0x0, 0x1, [{0x11, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000080), 0x64, 0x52a, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 943.951232ms ago: executing program 1 (id=328): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00'}, 0x10) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 184.697862ms ago: executing program 0 (id=329): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001100)={0x0, 0x6, 0xc, 0x80000000}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) unshare(0x6a040000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 152.282969ms ago: executing program 4 (id=330): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 130.412429ms ago: executing program 1 (id=331): mkdirat(0xffffffffffffff9c, 0x0, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) gettid() socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x6, &(0x7f00000003c0)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f0000000340)=0x90) 0s ago: executing program 1 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) request_key(&(0x7f0000000400)='dns_resolver\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='kmem_cache_free\x00', 0xfffffffffffffffd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 50.267840][ T5830] cgroup: Unknown subsys name 'net' [ 50.385414][ T5830] cgroup: Unknown subsys name 'cpuset' [ 50.393582][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.634761][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.602044][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.610135][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.642869][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.649977][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.657975][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.666008][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.674236][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.682627][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.689784][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.697723][ T5861] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.698289][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.705659][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.713894][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.719472][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.735145][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.740624][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.743027][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.750414][ T5865] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.756978][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.763724][ T5865] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.771054][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.779331][ T5160] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.791144][ T5865] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.791499][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.798733][ T5865] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.807618][ T5861] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.813285][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.819627][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.826133][ T5160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.891425][ T5160] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.167104][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 56.248483][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 56.310464][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.317875][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.325525][ T5847] bridge_slave_0: entered allmulticast mode [ 56.332522][ T5847] bridge_slave_0: entered promiscuous mode [ 56.346134][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 56.376349][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.383953][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.391265][ T5847] bridge_slave_1: entered allmulticast mode [ 56.398560][ T5847] bridge_slave_1: entered promiscuous mode [ 56.471281][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.499341][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 56.510725][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.533745][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.540849][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.548238][ T5849] bridge_slave_0: entered allmulticast mode [ 56.555583][ T5849] bridge_slave_0: entered promiscuous mode [ 56.563065][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.570182][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.577633][ T5849] bridge_slave_1: entered allmulticast mode [ 56.584561][ T5849] bridge_slave_1: entered promiscuous mode [ 56.608869][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 56.657094][ T5847] team0: Port device team_slave_0 added [ 56.666007][ T5847] team0: Port device team_slave_1 added [ 56.695533][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.724019][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.731223][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.738663][ T5851] bridge_slave_0: entered allmulticast mode [ 56.745445][ T5851] bridge_slave_0: entered promiscuous mode [ 56.761055][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.779968][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.787015][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.813207][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.826174][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.833221][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.859168][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.870668][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.878133][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.885491][ T5851] bridge_slave_1: entered allmulticast mode [ 56.892152][ T5851] bridge_slave_1: entered promiscuous mode [ 56.933015][ T5849] team0: Port device team_slave_0 added [ 56.973229][ T5849] team0: Port device team_slave_1 added [ 56.990276][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.999852][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.007379][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.015202][ T5855] bridge_slave_0: entered allmulticast mode [ 57.021774][ T5855] bridge_slave_0: entered promiscuous mode [ 57.069440][ T5847] hsr_slave_0: entered promiscuous mode [ 57.075758][ T5847] hsr_slave_1: entered promiscuous mode [ 57.084064][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.100728][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.108530][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.116549][ T5855] bridge_slave_1: entered allmulticast mode [ 57.123474][ T5855] bridge_slave_1: entered promiscuous mode [ 57.138949][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.146016][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.172518][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.185281][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.192515][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.218555][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.251245][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.259352][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.266936][ T5843] bridge_slave_0: entered allmulticast mode [ 57.274136][ T5843] bridge_slave_0: entered promiscuous mode [ 57.297587][ T5851] team0: Port device team_slave_0 added [ 57.310376][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.317758][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.325673][ T5843] bridge_slave_1: entered allmulticast mode [ 57.333183][ T5843] bridge_slave_1: entered promiscuous mode [ 57.368363][ T5851] team0: Port device team_slave_1 added [ 57.386650][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.407739][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.429362][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.448880][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.469688][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.476691][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.503240][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.548352][ T5849] hsr_slave_0: entered promiscuous mode [ 57.554592][ T5849] hsr_slave_1: entered promiscuous mode [ 57.560717][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.568904][ T5849] Cannot create hsr debugfs directory [ 57.575125][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.582881][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.608974][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.623207][ T5855] team0: Port device team_slave_0 added [ 57.633730][ T5843] team0: Port device team_slave_0 added [ 57.644402][ T5843] team0: Port device team_slave_1 added [ 57.664729][ T5855] team0: Port device team_slave_1 added [ 57.725422][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.732545][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.758767][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.771950][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.779047][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.805435][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.850805][ T5851] hsr_slave_0: entered promiscuous mode [ 57.857335][ T5851] hsr_slave_1: entered promiscuous mode [ 57.863888][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.871454][ T5851] Cannot create hsr debugfs directory [ 57.880853][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.887964][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.914713][ T5859] Bluetooth: hci2: command tx timeout [ 57.914763][ T5865] Bluetooth: hci1: command tx timeout [ 57.920621][ T5859] Bluetooth: hci0: command tx timeout [ 57.926732][ T5160] Bluetooth: hci4: command tx timeout [ 57.931632][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.950357][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.957516][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.972958][ T5859] Bluetooth: hci3: command tx timeout [ 57.983685][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.094575][ T5843] hsr_slave_0: entered promiscuous mode [ 58.100783][ T5843] hsr_slave_1: entered promiscuous mode [ 58.107160][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.115759][ T5843] Cannot create hsr debugfs directory [ 58.124803][ T5855] hsr_slave_0: entered promiscuous mode [ 58.130954][ T5855] hsr_slave_1: entered promiscuous mode [ 58.138666][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.146340][ T5855] Cannot create hsr debugfs directory [ 58.209317][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.253829][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.288994][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.304231][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.389797][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.420864][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.450534][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.464709][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.547116][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.571488][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.599351][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.608406][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.647673][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.658986][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.669025][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.698998][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.719101][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.771467][ T5855] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.780658][ T5855] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.792853][ T5855] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.801600][ T5855] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.834292][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.855890][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.868007][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.875293][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.913328][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.920424][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.939342][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.979037][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.986203][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.013962][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.021046][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.039927][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.094942][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.120254][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.137355][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.144519][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.184836][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.191968][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.225238][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.264766][ T3565] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.271901][ T3565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.296841][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.311584][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.318751][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.349013][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.409656][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.416821][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.451040][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.458224][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.496745][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.604107][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.636088][ T5855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.741537][ T5849] veth0_vlan: entered promiscuous mode [ 59.795281][ T5849] veth1_vlan: entered promiscuous mode [ 59.880873][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.903714][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.932845][ T5849] veth0_macvtap: entered promiscuous mode [ 59.955157][ T5849] veth1_macvtap: entered promiscuous mode [ 59.973744][ T5859] Bluetooth: hci4: command tx timeout [ 59.979189][ T5859] Bluetooth: hci1: command tx timeout [ 59.981924][ T5160] Bluetooth: hci0: command tx timeout [ 59.985117][ T5859] Bluetooth: hci2: command tx timeout [ 60.055027][ T5859] Bluetooth: hci3: command tx timeout [ 60.063100][ T5851] veth0_vlan: entered promiscuous mode [ 60.068948][ T5843] veth0_vlan: entered promiscuous mode [ 60.079776][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.102754][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.115356][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.129205][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.138513][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.151145][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.159887][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.172021][ T5843] veth1_vlan: entered promiscuous mode [ 60.180527][ T5851] veth1_vlan: entered promiscuous mode [ 60.263274][ T5847] veth0_vlan: entered promiscuous mode [ 60.294668][ T5851] veth0_macvtap: entered promiscuous mode [ 60.303615][ T5843] veth0_macvtap: entered promiscuous mode [ 60.311540][ T5847] veth1_vlan: entered promiscuous mode [ 60.327813][ T5851] veth1_macvtap: entered promiscuous mode [ 60.355819][ T5843] veth1_macvtap: entered promiscuous mode [ 60.391570][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.394154][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.409145][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.412361][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.428590][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.441475][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.452884][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.466110][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.477848][ T5855] veth0_vlan: entered promiscuous mode [ 60.487670][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.496523][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.505883][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.515663][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.547815][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.551683][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.567207][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.567431][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.577089][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.577106][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.578233][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.621468][ T5855] veth1_vlan: entered promiscuous mode [ 60.641249][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.651862][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.662546][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.673333][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.685279][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.693926][ T5847] veth0_macvtap: entered promiscuous mode [ 60.703797][ T5843] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.712835][ T5843] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.721544][ T5843] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.730734][ T5843] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.778036][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.823820][ T5847] veth1_macvtap: entered promiscuous mode [ 60.872727][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.880572][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.904084][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.919052][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.930870][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.930890][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.930903][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.930916][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.943085][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.967682][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.967704][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.967715][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.967729][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.967740][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.967754][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.968772][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.970302][ T5855] veth0_macvtap: entered promiscuous mode [ 61.091256][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.091279][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.101376][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.101427][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.101454][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.101480][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.104619][ T5855] veth1_macvtap: entered promiscuous mode [ 61.113545][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.113564][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.113574][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.113586][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.113597][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.113610][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.113621][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.113635][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.116106][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.136912][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.284745][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.284764][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.284781][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.315087][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.315106][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.315118][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.315131][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.316333][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.384435][ T5855] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.384472][ T5855] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.384500][ T5855] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.384534][ T5855] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.433514][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.433537][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.469869][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.492916][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.589217][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.589238][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.602404][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.641148][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.756019][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.764206][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.801759][ T5935] veth1_macvtap: left promiscuous mode [ 61.894784][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.917581][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.057706][ T5859] Bluetooth: hci2: command tx timeout [ 62.069975][ T5859] Bluetooth: hci0: command tx timeout [ 62.077243][ T5859] Bluetooth: hci1: command tx timeout [ 62.083047][ T5859] Bluetooth: hci4: command tx timeout [ 62.159591][ T5859] Bluetooth: hci3: command tx timeout [ 62.350587][ T5949] loop0: detected capacity change from 0 to 128 [ 62.538721][ T29] audit: type=1326 audit(1730559884.245:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 62.658480][ T29] audit: type=1326 audit(1730559884.245:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 62.719114][ T29] audit: type=1326 audit(1730559884.245:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 62.904885][ T29] audit: type=1326 audit(1730559884.245:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 62.934967][ T5965] syz.4.17[5965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 62.935064][ T5965] syz.4.17[5965] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.019525][ T5967] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 63.065611][ T29] audit: type=1326 audit(1730559884.245:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 63.858181][ T29] audit: type=1326 audit(1730559884.275:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 63.979089][ T29] audit: type=1326 audit(1730559884.275:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 64.126063][ T5974] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 64.136503][ T5859] Bluetooth: hci1: command tx timeout [ 64.142952][ T5160] Bluetooth: hci0: command tx timeout [ 64.148724][ T5160] Bluetooth: hci2: command tx timeout [ 64.155098][ T5160] Bluetooth: hci4: command tx timeout [ 64.172287][ T29] audit: type=1326 audit(1730559884.275:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.2.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 64.222254][ T5854] Bluetooth: hci3: command tx timeout [ 64.239912][ T29] audit: type=1326 audit(1730559884.325:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e20d7e719 code=0x7ffc0000 [ 64.262400][ T29] audit: type=1326 audit(1730559884.325:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5957 comm="syz.0.13" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e20d7e719 code=0x7ffc0000 [ 64.338793][ T5982] loop2: detected capacity change from 0 to 128 [ 64.745089][ T5992] 9pnet: Could not find request transport: 18446744073709551615 [ 66.711320][ T6037] loop0: detected capacity change from 0 to 512 [ 66.734272][ T6034] veth1_macvtap: left promiscuous mode [ 66.787797][ T6037] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.47: invalid indirect mapped block 256 (level 2) [ 66.811453][ T6037] EXT4-fs (loop0): 2 truncates cleaned up [ 66.818524][ T6037] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.672952][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.002231][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 68.002248][ T29] audit: type=1326 audit(1730559889.685:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e20d7e719 code=0x7ffc0000 [ 68.057092][ T6066] netlink: 132 bytes leftover after parsing attributes in process `syz.4.58'. [ 68.061177][ T29] audit: type=1326 audit(1730559889.685:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e20d7e719 code=0x7ffc0000 [ 68.112923][ T29] audit: type=1326 audit(1730559889.685:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0e20d7e719 code=0x7ffc0000 [ 68.146079][ T29] audit: type=1326 audit(1730559889.705:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e20d7e719 code=0x7ffc0000 [ 68.252252][ T29] audit: type=1326 audit(1730559889.705:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e20d7e719 code=0x7ffc0000 [ 68.335576][ T29] audit: type=1326 audit(1730559889.715:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f0e20d7e719 code=0x7ffc0000 [ 68.356666][ T6074] syz.2.61[6074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.359260][ T6074] syz.2.61[6074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 68.373334][ T6075] macsec0: entered promiscuous mode [ 68.400866][ T29] audit: type=1326 audit(1730559889.715:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.0.51" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e20d7e719 code=0x7ffc0000 [ 68.425171][ T6070] macsec0: left promiscuous mode [ 68.539801][ T29] audit: type=1326 audit(1730559890.245:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 68.578893][ T29] audit: type=1326 audit(1730559890.245:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 68.613687][ T29] audit: type=1326 audit(1730559890.245:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6072 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 68.667608][ T6074] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 68.760369][ T6084] loop3: detected capacity change from 0 to 512 [ 68.955401][ T6084] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.65: invalid indirect mapped block 256 (level 2) [ 69.047990][ T6084] EXT4-fs (loop3): 2 truncates cleaned up [ 69.099852][ T6084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.365533][ T6096] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.410384][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.311493][ T6117] netlink: 'syz.3.80': attribute type 4 has an invalid length. [ 70.456498][ T6122] netlink: 'syz.3.80': attribute type 4 has an invalid length. [ 70.549729][ T6126] loop2: detected capacity change from 0 to 128 [ 71.496026][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.504752][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.115441][ T6163] syz.2.95[6163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.115533][ T6163] syz.2.95[6163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.209302][ T6163] syz.2.95[6163] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.245064][ T6168] netlink: 'syz.0.98': attribute type 4 has an invalid length. [ 73.284010][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 73.284026][ T29] audit: type=1326 audit(1730559894.985:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 73.329947][ T29] audit: type=1326 audit(1730559894.985:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 73.370287][ T6168] netlink: 'syz.0.98': attribute type 4 has an invalid length. [ 73.449621][ T29] audit: type=1326 audit(1730559894.995:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 73.489045][ T29] audit: type=1326 audit(1730559894.995:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 73.529186][ T29] audit: type=1326 audit(1730559894.995:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6162 comm="syz.2.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 73.621998][ T29] audit: type=1326 audit(1730559895.065:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04f57e719 code=0x7ffc0000 [ 73.655939][ T6183] loop4: detected capacity change from 0 to 1764 [ 73.701258][ T6183] process 'syz.4.106' launched './file0' with NULL argv: empty string added [ 73.777129][ T29] audit: type=1326 audit(1730559895.075:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe04f57e719 code=0x7ffc0000 [ 73.858947][ T29] audit: type=1326 audit(1730559895.075:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04f57e719 code=0x7ffc0000 [ 73.901499][ T29] audit: type=1326 audit(1730559895.075:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04f57e719 code=0x7ffc0000 [ 73.996438][ T6198] Zero length message leads to an empty skb [ 74.584220][ T29] audit: type=1326 audit(1730559895.095:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6175 comm="syz.3.104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fe04f57e719 code=0x7ffc0000 [ 74.827822][ T6208] netlink: 'syz.3.117': attribute type 4 has an invalid length. [ 74.876573][ T6208] netlink: 'syz.3.117': attribute type 4 has an invalid length. [ 75.019260][ T6218] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 75.352269][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.124'. [ 76.283600][ T6250] loop4: detected capacity change from 0 to 128 [ 76.358374][ T6253] loop3: detected capacity change from 0 to 1764 [ 76.392375][ T6252] netlink: 'syz.0.130': attribute type 4 has an invalid length. [ 76.663459][ T51] cfg80211: failed to load regulatory.db [ 76.740646][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.139'. [ 78.144541][ T6295] netlink: 'syz.1.149': attribute type 4 has an invalid length. [ 78.165135][ T6298] loop2: detected capacity change from 0 to 128 [ 81.049216][ T6311] loop0: detected capacity change from 0 to 128 [ 81.223608][ T6312] loop2: detected capacity change from 0 to 1024 [ 81.249345][ T6312] EXT4-fs (loop2): bad geometry: block count 33554432 exceeds size of device (512 blocks) [ 81.559056][ T6324] loop1: detected capacity change from 0 to 128 [ 81.679903][ T6329] netlink: 'syz.0.164': attribute type 4 has an invalid length. [ 81.707937][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 81.707952][ T29] audit: type=1326 audit(1730559903.415:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 81.768485][ T29] audit: type=1326 audit(1730559903.415:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 81.825662][ T29] audit: type=1326 audit(1730559903.535:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 81.865614][ T29] audit: type=1326 audit(1730559903.535:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 81.972296][ T29] audit: type=1326 audit(1730559903.535:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6330 comm="syz.2.166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 81.988835][ T6344] loop3: detected capacity change from 0 to 512 [ 82.025717][ T6341] 9pnet: p9_errstr2errno: server reported unknown error [ 82.080738][ T6344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.110682][ T6344] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.118135][ T6346] loop2: detected capacity change from 0 to 1764 [ 82.757451][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.798451][ T6365] loop1: detected capacity change from 0 to 1024 [ 82.818224][ T6365] EXT4-fs (loop1): bad geometry: block count 33554432 exceeds size of device (512 blocks) [ 83.893190][ T6373] netlink: 'syz.3.178': attribute type 4 has an invalid length. [ 83.978424][ T6377] loop2: detected capacity change from 0 to 128 [ 84.122386][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 84.198767][ T6381] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.208459][ T6381] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 84.586040][ T6395] loop3: detected capacity change from 0 to 512 [ 84.619406][ T6395] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.188: invalid indirect mapped block 256 (level 2) [ 84.681360][ T6395] EXT4-fs (loop3): 2 truncates cleaned up [ 84.711569][ T6395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.918361][ T6403] loop2: detected capacity change from 0 to 1024 [ 85.017892][ T6403] EXT4-fs (loop2): bad geometry: block count 33554432 exceeds size of device (512 blocks) [ 85.319985][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.788713][ T6410] netlink: 'syz.1.193': attribute type 4 has an invalid length. [ 85.985281][ T6415] loop0: detected capacity change from 0 to 128 [ 86.374231][ T6430] veth1: entered promiscuous mode [ 86.389776][ T6430] macsec0: entered promiscuous mode [ 86.402416][ T6430] macsec0: entered allmulticast mode [ 86.413733][ T6430] veth1: entered allmulticast mode [ 86.447088][ T6430] veth1: left allmulticast mode [ 86.458534][ T6430] veth1: left promiscuous mode [ 86.468214][ T6432] mmap: syz.0.203 (6432) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 86.653568][ T6436] syz.3.204[6436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.653657][ T6436] syz.3.204[6436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.665127][ T6436] syz.3.204[6436] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 87.591567][ T6444] bridge0: port 3(ipvlan2) entered blocking state [ 87.660288][ T6448] loop2: detected capacity change from 0 to 1024 [ 87.708021][ T6444] bridge0: port 3(ipvlan2) entered disabled state [ 87.774012][ T6448] EXT4-fs (loop2): bad geometry: block count 33554432 exceeds size of device (512 blocks) [ 87.813066][ T6444] ipvlan2: entered allmulticast mode [ 87.818752][ T6453] loop4: detected capacity change from 0 to 128 [ 87.960387][ T6444] bridge0: entered allmulticast mode [ 87.997405][ T6444] ipvlan2: left allmulticast mode [ 88.308958][ T6444] bridge0: left allmulticast mode [ 88.797053][ T6452] netlink: 'syz.0.207': attribute type 4 has an invalid length. [ 88.851456][ T6466] loop4: detected capacity change from 0 to 1024 [ 88.912013][ T6466] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.962373][ T6466] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.310220][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.558261][ T29] audit: type=1326 audit(1730559911.265:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9717f7e719 code=0x7ffc0000 [ 89.674668][ T29] audit: type=1326 audit(1730559911.265:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9717f7e719 code=0x7ffc0000 [ 89.680150][ T6484] loop0: detected capacity change from 0 to 512 [ 89.722228][ T29] audit: type=1326 audit(1730559911.315:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9717f7e719 code=0x7ffc0000 [ 89.770348][ T29] audit: type=1326 audit(1730559911.315:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9717f7e719 code=0x7ffc0000 [ 89.956159][ T6484] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.220: invalid indirect mapped block 256 (level 2) [ 90.234503][ T6489] loop3: detected capacity change from 0 to 128 [ 90.273059][ T6484] EXT4-fs (loop0): 2 truncates cleaned up [ 90.288214][ T29] audit: type=1326 audit(1730559911.315:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9717f7e719 code=0x7ffc0000 [ 90.344404][ T6484] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.373217][ T29] audit: type=1326 audit(1730559911.325:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9717f7e719 code=0x7ffc0000 [ 90.454726][ T29] audit: type=1326 audit(1730559911.325:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9717f7e719 code=0x7ffc0000 [ 90.498699][ T29] audit: type=1326 audit(1730559911.335:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9717f7e719 code=0x7ffc0000 [ 90.546864][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.592185][ T29] audit: type=1326 audit(1730559911.335:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9717f7e719 code=0x7ffc0000 [ 90.708433][ T29] audit: type=1326 audit(1730559911.335:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6481 comm="syz.4.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9717f7e719 code=0x7ffc0000 [ 90.829583][ T6499] loop4: detected capacity change from 0 to 1024 [ 90.920321][ T6499] EXT4-fs (loop4): bad geometry: block count 33554432 exceeds size of device (512 blocks) [ 91.480735][ T6535] loop2: detected capacity change from 0 to 512 [ 91.482867][ T6533] loop3: detected capacity change from 0 to 128 [ 91.939313][ T6535] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.239: invalid indirect mapped block 256 (level 2) [ 92.123402][ T6535] EXT4-fs (loop2): 2 truncates cleaned up [ 92.130152][ T6535] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.258992][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.569365][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 92.605500][ T6557] loop2: detected capacity change from 0 to 1024 [ 92.656573][ T6557] EXT4-fs (loop2): bad geometry: block count 33554432 exceeds size of device (512 blocks) [ 92.837996][ T6565] loop0: detected capacity change from 0 to 128 [ 92.853521][ T6562] loop1: detected capacity change from 0 to 1024 [ 92.924670][ T6562] EXT4-fs: Ignoring removed nobh option [ 92.965794][ T6562] EXT4-fs: Ignoring removed orlov option [ 93.061651][ T6562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.114770][ T6562] ext4: Unknown parameter 'ÿÿÿÿÿÿÿÿÿ0xffffffffffffffff18446744073709551615ÿÿÿÿ1844674407370955161518446744073709551615' [ 93.799385][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.011794][ T6590] netlink: 'syz.0.262': attribute type 4 has an invalid length. [ 94.039420][ T6592] loop1: detected capacity change from 0 to 512 [ 94.069848][ T6595] loop4: detected capacity change from 0 to 128 [ 94.075831][ T6590] netlink: 'syz.0.262': attribute type 4 has an invalid length. [ 94.104758][ T6592] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.257: invalid indirect mapped block 256 (level 2) [ 94.200457][ T6592] EXT4-fs (loop1): 2 truncates cleaned up [ 94.207589][ T6592] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.241806][ T6601] loop3: detected capacity change from 0 to 1024 [ 94.254242][ T6601] EXT4-fs (loop3): bad geometry: block count 33554432 exceeds size of device (512 blocks) [ 94.279612][ T6597] loop2: detected capacity change from 0 to 2048 [ 94.290097][ T6597] EXT4-fs: Ignoring removed orlov option [ 94.328500][ T6597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.363374][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.419901][ T6611] netlink: 72 bytes leftover after parsing attributes in process `syz.4.270'. [ 95.050036][ T6630] sctp: [Deprecated]: syz.1.269 (pid 6630) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.050036][ T6630] Use struct sctp_sack_info instead [ 95.403380][ T6618] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 95.425962][ T6618] EXT4-fs (loop2): Remounting filesystem read-only [ 95.531115][ T6637] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 95.566308][ T5843] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.579573][ T6641] loop4: detected capacity change from 0 to 128 [ 95.589812][ T6637] netlink: 'syz.1.277': attribute type 4 has an invalid length. [ 95.606080][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 95.606095][ T29] audit: type=1326 audit(1730559917.315:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04f57e719 code=0x7ffc0000 [ 95.666930][ T29] audit: type=1326 audit(1730559917.315:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04f57e719 code=0x7ffc0000 [ 95.719543][ T29] audit: type=1326 audit(1730559917.365:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fe04f57e719 code=0x7ffc0000 [ 95.789713][ T6650] loop0: detected capacity change from 0 to 512 [ 95.792860][ T6649] loop2: detected capacity change from 0 to 1024 [ 95.798384][ T29] audit: type=1326 audit(1730559917.365:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04f57e719 code=0x7ffc0000 [ 95.825573][ T6649] EXT4-fs (loop2): bad geometry: block count 33554432 exceeds size of device (512 blocks) [ 95.851981][ T6650] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.281: invalid indirect mapped block 256 (level 2) [ 95.899711][ T29] audit: type=1326 audit(1730559917.365:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04f57e719 code=0x7ffc0000 [ 95.904292][ T6650] EXT4-fs (loop0): 2 truncates cleaned up [ 95.955280][ T6650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.993445][ T6652] bond1: entered promiscuous mode [ 96.002185][ T29] audit: type=1326 audit(1730559917.365:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fe04f57e719 code=0x7ffc0000 [ 96.009068][ T6652] bond1: entered allmulticast mode [ 96.024714][ T29] audit: type=1326 audit(1730559917.365:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04f57e719 code=0x7ffc0000 [ 96.029999][ T6652] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.051970][ T29] audit: type=1326 audit(1730559917.365:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6643 comm="syz.3.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04f57e719 code=0x7ffc0000 [ 96.159506][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.261256][ T6666] loop4: detected capacity change from 0 to 512 [ 96.329823][ T29] audit: type=1326 audit(1730559918.015:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 96.399854][ T29] audit: type=1326 audit(1730559918.015:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.2.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a3c57e719 code=0x7ffc0000 [ 96.458276][ T6652] bond1 (unregistering): Released all slaves [ 96.501938][ T6666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.514697][ T6660] netlink: 72 bytes leftover after parsing attributes in process `syz.1.284'. [ 96.522297][ T6666] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.335002][ T6683] loop0: detected capacity change from 0 to 128 [ 97.349803][ T6685] netlink: 'syz.3.294': attribute type 4 has an invalid length. [ 97.414513][ T6687] ALSA: seq fatal error: cannot create timer (-22) [ 97.434108][ T6690] netlink: 'syz.3.294': attribute type 4 has an invalid length. [ 97.458689][ T5847] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.605521][ T6697] loop1: detected capacity change from 0 to 512 [ 97.617532][ T6697] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.299: invalid indirect mapped block 256 (level 2) [ 97.627625][ T6693] loop2: detected capacity change from 0 to 1024 [ 97.685086][ T6693] EXT4-fs (loop2): bad geometry: block count 33554432 exceeds size of device (512 blocks) [ 97.696076][ T6697] EXT4-fs (loop1): 2 truncates cleaned up [ 97.705944][ T6697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.762615][ T6706] netlink: 72 bytes leftover after parsing attributes in process `syz.4.302'. [ 97.883997][ T5855] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.935383][ T6712] program syz.2.306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.193553][ T6720] tipc: Started in network mode [ 98.199153][ T6720] tipc: Node identity 1, cluster identity 4711 [ 98.552936][ T6720] tipc: Node number set to 1 [ 99.230727][ T6720] tipc: Cannot configure node identity twice [ 99.237739][ T6726] loop3: detected capacity change from 0 to 512 [ 99.958940][ T6726] ======================================================= [ 99.958940][ T6726] WARNING: The mand mount option has been deprecated and [ 99.958940][ T6726] and is ignored by this kernel. Remove the mand [ 99.958940][ T6726] option from the mount to silence this warning. [ 99.958940][ T6726] ======================================================= [ 100.005068][ T6734] netlink: 'syz.2.312': attribute type 4 has an invalid length. [ 100.080212][ T6734] netlink: 'syz.2.312': attribute type 4 has an invalid length. [ 100.127508][ T6737] netlink: 80 bytes leftover after parsing attributes in process `syz.1.314'. [ 100.145462][ T6741] netlink: 72 bytes leftover after parsing attributes in process `syz.4.316'. [ 100.184520][ T6726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.198500][ T6747] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.227683][ T6726] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.325387][ T6748] loop2: detected capacity change from 0 to 1024 [ 100.332755][ T6726] Process accounting resumed [ 100.371210][ T6748] EXT4-fs (loop2): bad geometry: block count 33554432 exceeds size of device (512 blocks) [ 100.441384][ T6758] loop0: detected capacity change from 0 to 512 [ 100.477528][ T6758] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.321: invalid indirect mapped block 256 (level 2) [ 100.512851][ T6758] EXT4-fs (loop0): 2 truncates cleaned up [ 100.534796][ T6758] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.547766][ T6726] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 100.627330][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.641337][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 100.641352][ T29] audit: type=1326 audit(1730559922.335:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6723 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe04f57e719 code=0x7ffc0000 [ 100.716170][ T6766] loop2: detected capacity change from 0 to 1764 [ 100.759074][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.565682][ T6780] loop3: detected capacity change from 0 to 512 [ 101.769578][ T6780] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.327: bg 0: block 248: padding at end of block bitmap is not set [ 101.817586][ T6780] Quota error (device loop3): write_blk: dquota write failed [ 101.868441][ T6780] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 101.888392][ T6780] EXT4-fs error (device loop3): ext4_acquire_dquot:6887: comm syz.3.327: Failed to acquire dquot type 1 [ 101.906503][ T6780] EXT4-fs (loop3): 1 truncate cleaned up [ 101.911567][ T6793] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI [ 101.914263][ T6780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.924733][ T6793] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 101.924768][ T6793] CPU: 0 UID: 0 PID: 6793 Comm: syz.0.329 Not tainted 6.12.0-rc5-next-20241101-syzkaller #0 [ 101.924789][ T6793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.924801][ T6793] RIP: 0010:io_sqe_buffer_register+0xaa8/0x2cf0 [ 101.938707][ T6780] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 101.945590][ T6793] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 d0 70 55 fd 48 8b 1b 48 83 c3 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 aa 70 55 fd 48 8b 03 48 89 44 24 60 [ 101.945606][ T6793] RSP: 0018:ffffc90004537640 EFLAGS: 00010206 [ 101.945623][ T6793] RAX: 0000000000000003 RBX: 0000000000000018 RCX: dffffc0000000000 [ 101.945635][ T6793] RDX: ffff88805db5e128 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.945647][ T6793] RBP: ffffc900045377f0 R08: ffffffff84aa9107 R09: 1ffffd40005a2000 [ 101.945660][ T6793] R10: dffffc0000000000 R11: fffff940005a2001 R12: ffffea0002d10000 [ 101.945673][ T6793] R13: 0000000000000006 R14: 1ffff11004de5a80 R15: ffff888026f2d400 [ 102.047506][ T6793] FS: 00007f0e21bbe6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 102.056434][ T6793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.063012][ T6793] CR2: 00007f886ac656c0 CR3: 000000005fb0c000 CR4: 00000000003526f0 [ 102.070979][ T6793] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.078943][ T6793] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.086908][ T6793] Call Trace: [ 102.090184][ T6793] [ 102.093110][ T6793] ? __die_body+0x5f/0xb0 [ 102.097438][ T6793] ? die_addr+0xb0/0xe0 [ 102.101592][ T6793] ? exc_general_protection+0x3dd/0x5d0 [ 102.107142][ T6793] ? asm_exc_general_protection+0x26/0x30 [ 102.112864][ T6793] ? io_sqe_buffer_register+0xa27/0x2cf0 [ 102.118492][ T6793] ? io_sqe_buffer_register+0xaa8/0x2cf0 [ 102.124124][ T6793] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 102.130009][ T6793] ? __might_fault+0xc6/0x120 [ 102.134684][ T6793] __io_register_rsrc_update+0x5c8/0x1320 [ 102.140403][ T6793] ? __pfx___might_resched+0x10/0x10 [ 102.145686][ T6793] ? __pfx___io_register_rsrc_update+0x10/0x10 [ 102.151848][ T6793] ? rcu_is_watching+0x15/0xb0 [ 102.156619][ T6793] ? __pfx_lock_release+0x10/0x10 [ 102.161639][ T6793] ? trace_contention_end+0x3c/0x120 [ 102.166926][ T6793] ? __mutex_lock+0x37f/0xee0 [ 102.171601][ T6793] ? __might_fault+0xc6/0x120 [ 102.176279][ T6793] io_register_rsrc_update+0x1d1/0x230 [ 102.181738][ T6793] ? __pfx_io_register_rsrc_update+0x10/0x10 [ 102.187712][ T6793] ? __fget_files+0x395/0x410 [ 102.192388][ T6793] ? __fget_files+0x2a/0x410 [ 102.196972][ T6793] __se_sys_io_uring_register+0x8ee/0x40d0 [ 102.202777][ T6793] ? plist_del+0x3f1/0x410 [ 102.207191][ T6793] ? do_raw_spin_unlock+0x13c/0x8b0 [ 102.212388][ T6793] ? wake_up_q+0xdc/0x120 [ 102.216717][ T6793] ? futex_wake+0x523/0x5c0 [ 102.221221][ T6793] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 102.227451][ T6793] ? userfaultfd_unmap_complete+0x30c/0x360 [ 102.233342][ T6793] ? __pfx_futex_wake+0x10/0x10 [ 102.238187][ T6793] ? __mm_populate+0x39a/0x460 [ 102.242948][ T6793] ? do_futex+0x392/0x560 [ 102.247276][ T6793] ? __pfx_do_futex+0x10/0x10 [ 102.251949][ T6793] ? vm_mmap_pgoff+0x303/0x430 [ 102.256712][ T6793] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 102.262690][ T6793] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.269021][ T6793] ? do_syscall_64+0x100/0x230 [ 102.273780][ T6793] ? do_syscall_64+0xb6/0x230 [ 102.278468][ T6793] do_syscall_64+0xf3/0x230 [ 102.282962][ T6793] ? clear_bhb_loop+0x35/0x90 [ 102.287636][ T6793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.293530][ T6793] RIP: 0033:0x7f0e20d7e719 [ 102.297952][ T6793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.317556][ T6793] RSP: 002b:00007f0e21bbe038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 102.325967][ T6793] RAX: ffffffffffffffda RBX: 00007f0e20f36058 RCX: 00007f0e20d7e719 [ 102.333928][ T6793] RDX: 0000000020000600 RSI: 0000000000000010 RDI: 0000000000000007 [ 102.341911][ T6793] RBP: 00007f0e20df132e R08: 0000000000000000 R09: 0000000000000000 [ 102.349888][ T6793] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 102.357858][ T6793] R13: 0000000000000000 R14: 00007f0e20f36058 R15: 00007ffde7926cb8 [ 102.365839][ T6793] [ 102.368851][ T6793] Modules linked in: [ 102.373354][ T6793] ---[ end trace 0000000000000000 ]--- [ 102.392668][ T6793] RIP: 0010:io_sqe_buffer_register+0xaa8/0x2cf0 [ 102.399061][ T6793] Code: 00 fc ff df 80 3c 08 00 74 08 48 89 df e8 d0 70 55 fd 48 8b 1b 48 83 c3 18 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 48 89 df e8 aa 70 55 fd 48 8b 03 48 89 44 24 60 [ 102.419509][ T6793] RSP: 0018:ffffc90004537640 EFLAGS: 00010206 [ 102.426230][ T6793] RAX: 0000000000000003 RBX: 0000000000000018 RCX: dffffc0000000000 [ 102.434478][ T6793] RDX: ffff88805db5e128 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.442828][ T6793] RBP: ffffc900045377f0 R08: ffffffff84aa9107 R09: 1ffffd40005a2000 [ 102.442980][ T6780] syz.3.327 (6780) used greatest stack depth: 18576 bytes left [ 102.450855][ T6793] R10: dffffc0000000000 R11: fffff940005a2001 R12: ffffea0002d10000 [ 102.466422][ T6793] R13: 0000000000000006 R14: 1ffff11004de5a80 R15: ffff888026f2d400 [ 102.474471][ T6793] FS: 00007f0e21bbe6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 102.483577][ T6793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.490189][ T6793] CR2: 00007f0e21b6ad58 CR3: 000000005fb0c000 CR4: 00000000003526f0 [ 102.498225][ T6793] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 102.506674][ T6793] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 102.514740][ T6793] Kernel panic - not syncing: Fatal exception [ 102.521063][ T6793] Kernel Offset: disabled [ 102.525379][ T6793] Rebooting in 86400 seconds..