last executing test programs: 1m1.467744926s ago: executing program 1 (id=2531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001108000440000000150900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1m1.394857608s ago: executing program 1 (id=2535): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) splice(r3, 0x0, r2, 0x0, 0x89, 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0xa}}, 0x20) write(r0, 0x0, 0x0) 1m1.205848191s ago: executing program 1 (id=2544): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b70300000000b1098500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x59, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 1m1.102210763s ago: executing program 1 (id=2547): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 1m0.819480689s ago: executing program 1 (id=2553): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e00000027f00000101000000020000007f"], 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'lo\x00'}) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 1m0.575046484s ago: executing program 1 (id=2557): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) recvfrom(r3, &(0x7f00000001c0)=""/108, 0x6c, 0x4000, 0x0, 0x0) 1m0.540227185s ago: executing program 32 (id=2557): r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x19, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x200}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) recvfrom(r3, &(0x7f00000001c0)=""/108, 0x6c, 0x4000, 0x0, 0x0) 15.80272877s ago: executing program 4 (id=3945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x14d6, &(0x7f00000000c0)={0x0, 0x5125, 0x0, 0x0, 0x10f}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 15.411147769s ago: executing program 4 (id=3947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 15.159378193s ago: executing program 2 (id=3948): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x49}, 0x1, 0x0, 0x0, 0x4}, 0x0) 15.128603174s ago: executing program 2 (id=3949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000580), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 15.036132795s ago: executing program 2 (id=3950): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd25, 0x21dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0d4}, 0x4000000) 15.035888926s ago: executing program 2 (id=3951): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xee01, 0xffffffffffffffff, 0x1000) 14.701249802s ago: executing program 4 (id=3964): creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 14.651833543s ago: executing program 2 (id=3956): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = epoll_create(0x3ff) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000280)={0x2000000}) 13.852095139s ago: executing program 2 (id=3963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 13.851888209s ago: executing program 33 (id=3963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x4}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 13.441126397s ago: executing program 4 (id=3967): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x80, &(0x7f0000000480), 0x1, 0x3f5, &(0x7f00000004c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) 13.27772245s ago: executing program 4 (id=3969): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x3}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x11) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={r2, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}}, 0x90) 12.657361382s ago: executing program 4 (id=3974): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mlockall(0x7) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.606459353s ago: executing program 34 (id=3974): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mlockall(0x7) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.904403066s ago: executing program 0 (id=4031): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x1714, &(0x7f00000020c0)={0x0, 0x4, 0x10000, 0x1, 0xd5}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x22}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) io_uring_enter(r1, 0x27e2, 0x0, 0x7, 0x0, 0x0) 8.842979807s ago: executing program 0 (id=4037): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1a, 0x0, 0x2, 0x9, 0xfd}, 0x10) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 8.785145698s ago: executing program 0 (id=4041): r0 = socket(0x18, 0x800, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x3, @multicast, 'vcan0\x00'}}, 0x1e) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r0) 8.727973519s ago: executing program 0 (id=4044): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f283e6d60200000000000000000000000100", [0x208]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 8.424108485s ago: executing program 0 (id=4049): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1ab8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 8.16054993s ago: executing program 0 (id=4055): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 8.120688331s ago: executing program 35 (id=4055): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x21408, 0x0, 0x1, 0x0, &(0x7f0000006380)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socket(0x10, 0x3, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 1.762175856s ago: executing program 7 (id=4135): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) link(0x0, &(0x7f00000005c0)='./bus\x00') write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.385370543s ago: executing program 6 (id=4141): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='hrtimer_start\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r2}, 0x18) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.341176354s ago: executing program 6 (id=4142): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000b00)=""/225, 0xe1}], 0x1}, 0xffffffff}], 0x1, 0x40000033, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x40000000000003) 1.188120287s ago: executing program 5 (id=4144): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab00000000000000003200000008001781"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.03155209s ago: executing program 7 (id=4145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0xd}, {0x77d, 0x6, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x6, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x4, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x4, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xfffffffc}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x4}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x3, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x800003, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0xa}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x7, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xb}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x81}, 0x800) 889.932563ms ago: executing program 5 (id=4146): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) 673.997687ms ago: executing program 8 (id=4147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @remote}, 0x1, 0x0, 0x4}}, 0x26) 572.190279ms ago: executing program 7 (id=4148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) 571.945979ms ago: executing program 8 (id=4149): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xfdef, &(0x7f0000000400)={@random="ae63b2a6bea9", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4000, 0x0, 0x2, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x4e24, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x40, 0x0, @val=0x80}}}}}}}, 0x0) 539.200799ms ago: executing program 8 (id=4150): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) 492.79716ms ago: executing program 8 (id=4151): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) close(0x3) 392.166002ms ago: executing program 8 (id=4152): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) 391.957932ms ago: executing program 7 (id=4153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001040)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 391.830902ms ago: executing program 8 (id=4154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x200000000000000) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000100)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 378.976832ms ago: executing program 3 (id=4155): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r3, 0x1, 0x0, 0x2000000, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 366.063893ms ago: executing program 7 (id=4156): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 335.438613ms ago: executing program 6 (id=4157): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) times(0x0) 292.032504ms ago: executing program 7 (id=4158): sched_setattr(0x0, 0x0, 0x0) io_setup(0x403, &(0x7f0000000500)=0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000003580)=ANY=[@ANYRES32=r0, @ANYBLOB="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", @ANYRESOCT=r0, @ANYBLOB="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", @ANYBLOB="2c6652ea09f611cc0fdaa93ec39aa9536b65ea849ad6ce174f86b8ec8e721e94d2de512749736919bd217510f3a1cfe22b47f7f68050f2b9cbfc2ef48df66881942aa0cd28b13285dbb825735719ed87f545d217a761b673785c44db693f0534551f5d7572b3ba791168bf3475a3ae563a6717d05a48b2e07ab983b3b00dfc6f90822bf5d3ba7c395eb681b02b4c0df7995c287bd400890aa633eba75e22082f151c22a2845be9a02f64a97dd9d169bf2a9823e5ee9b7347ea6bf83ee10757c0177c8a473cc53f0400ea81b98bed47171a57293356c4414adea54faf13c65a37e26a67245994f4d875ac661e5562c390e0b1bd31e14a29f46a693773649e0f4cd4ae865deffe3b3c51758f6c0ba1861076a93ea09aa238d960201d78435e2968b4f0eb6c1782d2dc85093c08bbe64551342353d0fded22c42866e122406337f15a77143f847c88ff1ef64226521f40d036b83c1a672d35297003911d72548fb4c79abe056544ee920fb4741d94d4431e4279d4c9d7988343c8d250e417edd774418ac5491a9c1e4f33684eb625939c7d997007e77b8b5f288953b09a042de3c8291ffe2f62ff8296260c38f5bdb6056d9023c3587067863a37c34f56d0d3cb2df150ead1746c6a271143d5aab42e1fbafd8461d953d17b983a4d2acbd7aa95c5cd357963e933a4d468aa52504de893e346fa399fc575b0f69cb76c0ea7b9101bcc150c5244ba607ddfb02e8d70d170564e64af127e8766cdab4b9c1508beb2306d49dd18b63a0e6a91c20aa9b17406c00d47f14e205f53bf20628bd11bcf1eef443d96fa06bb14e6c049238fa2e50099cd9e1d4542c59d2f7cca3c93e7d8ef6d3689a3451078f944031a4254b71ba8fa1ab11f59dc345b3e18c7a00290b26916fc94a01d3c40b240643ee24386e6cf03bc388146990d55e94c615ddcac8d1531a73a3e2f98ad103ae1afc707b3f2b5d80efb36a6901972fbf26be8a234c3eb5a8cee98360b2ae197a2f6f7c4f97f2a06950920451a264de5e195f786b8b19eaf3c287a3493cf0bda4ebbfd5518e5a22e21f6b04d64723e4b085452b1735518a9ff699cbdfaae16df5a463445e011783bb4f0fbfbedb8024be9d8ef1095c79288d2d8acecd7be8b67b82c05270350d5cd88977d34dcf785ed0fe1711d6f0cace82b746b4be21537c96c8781e133df5fffa1016f774430b07e4ff7bc872db231d54753fb0d447e01efa40b3647346ee96616752a3ee749525a65209286b3e0845ceb051d36dcae10e14755d05ce9d5039d3a50659d0a5f05daa6466023a6bdd82a7ad17806c2220d74e08f88affced5d4beae355a55cced6803e72cc395b43a77c73cc019cea7fab81af67887c7678e22ed360b770cf8f6eaa69f3db0fb1d1f36b915b523be13875804d2f4c1c19552e3820440ff5bff3f7952dfe560183fbadcb4e2025134de70964584049106878c3a8ccc3c10c2580e94da2aa9c0518ab3f698b9ec16f6858e0148fbf82a43eb481900c33b1ffbe5256c6b4e2f8dcd29815a30201fb666781cced986232be0603eff3e3641331c1930bd480d995289a44fa2b14ae53b332a5ad8f2f7d852d599d088039f7667a94ab4cac3a40203e05e79e57aff48de079f5b3e31c6fca44fab9a091a3dd543e952f6e3043d326ec2b07c547dbd14a6c581f45c623c9d50308a757a5c89816bbcb6052893e1c227088ec5b94d58d28651d5613da9a81c68355043dc12e9226ded046bdc4494f6a182ee08fdfc2737ef4b181d0d3e84c3661f681d4afa412a1ec493722c2e2aa0bf9aa2e86d6725f73a8a3cf2ed944f4050af338d4bbc785c7b52cc0e2fbd040e27ed353d3509665facd3706188c449a6e968443b1d472abe4db95b53dc1a986453a55dc64beb9876845cec92da582b23810c174c63799b34f60d9a5cdd541ea14a5131eadef5c7f220edfd773661bb51f753a137faf1b0fa9416b35f097671e8e1af4eb25db59e5e43d39201204d93f68248fdbb427ef2d286ad7fee3c3c58d8c3a50a7a2cb060f283753cdf8dbb7c4b45acb8a0666494a498f9c089d94bde05102b5397c9ff9c4a55a39cd4ff694746357de71527109ffcc0faf6fb078fa2d077a64d96029c64cc8028de02804191aac53ee327dc92f27118853b75b7719496fdd1fceac4e801c19630f56ab02526b5a08e7087a70b9c704d077794f6c4b102e614d9ab44888c921b135d842916258bc59f7b681a7b14ed6c95da6b1827f1fa9206778ae422fc4e7c5140b358bf0f5a25f8f83148402c97d2739c65e5aa4d8b3bb0c6f3f1558bec69c47e20a25158bfb7c1ed6c779b31e8c478ec8241610b7bb3821797c0a4ddd7e119a4b497f56e9c2cccf767c320f0ae4a2908fe6c7e7d11c3abca47eb728ea948feca4eb7b26f74b923d409a85301940eaca5ea179b44ded4f9ec6b61b159dfe7b344a97cd12430daaa0beb9b5975f3e3a0585798a37b5b3693e7dc8026697e045056353cce7c5710233046b04061a8a5e32fc106bd73f06d85ab37a599b799469a8987d7f41ee4c7784777375e697d7e4c461dfea1f74dbe2f4429c50fde22d22268a53eaee129484668a5ce3daaea8f1f8f29c8be1cd71eb398795441a2f42874a2d7999ceb6819fa23b285255d1b130fd37cd1836fcef4d8e165987e3767120f7679fa34faae2a7f4e12a079a1f74f25d29deda65f80acfcff1265edfaeecc44ea75469b07f4e3f7bd24eefb632b914c7d80cf2059c2417a8333535ba7750b36bbd3569791fe2deae83dc176a784a6d35b9792d663a9d5fb1eb30f705522720c13dc4bc2ed4c327621e75d22abedf69b025e1ffeba05e0296c59a139b7b9d775a188953ca9fd94244f3a4b72f8e02b843e926195974ffc2aad5d071132f52de2b2bd7c8308c99d263601ac4a3e4093072462d3b5f92f102b101166c398cf211b21358745e82ccba5446b4a650c9f2dd92d6024e17f58cf85dc6b4222fa3b135d120f7b5a58e205f1eb750c46c2cb8953fa6a592e33e93a16d4f8aa86f6f35c087a93a1f839004d6550986134fe846e89a47d4ebb37e0c2f42a929b2d1bbd1a9cb9fbb4133215201855198d8acb5774a6aff29d48859a0b5b729157db49ef7cd1ffd63fde8a8fcb49bbdb838fe379f897aca18d9412ddbee4dee9835d5301592503fde8fb961b7bb367864e4169199b6e8e653d574ea0ce4a1df29c3b0a9d079b5faa438e9ae6d2d7812f8a91d801d2d0741df7024e6da96e7c3aacda2c31eee5c2f644d10a5063c03445a008b54191c3dcda48c161edc3898197b2f62a25f3e7a0a13407f6d3c91c06bb6adcc77c6f8962c9d902912ec0b371c481a3e300ef740e5a3ea1388f7bffdc9cbba3dba01e431e28ccef5ac667a129910ec3e0095602ebd26e6812fb61818e0c471404753f921669359945f73f818f25a84f57d0a6c73ee31c2fd480272ba9e8c036179acc99b672a9c0ea40d8c881a96b307ef3dc277e398f88a0af843f1df7c6b4f65cef505ed159afad7f68bcaf5449bae705897f11a6d688324d5d0cf78f533554a2372bb2f1a4387c33086ac5dd744920356e85d3d4f0354c22987b7efcee0f569bd9751c2ecaad40ec61561ae47b2216e3489eb3daa599007c5881ac4da1445ed3153a7d65cca88ad04b827333c6053b374da5a0189d360d9463e570deca6ee410c10635c09ffe1dd6fd2575b7e522969ef2110207f6830035531fedcd477a840e952e067fffd5e134ba195cd3adfe98f982d0f09abbd5b8f7ec9db2d5db4d0473108a65bf88678723267192e4dfdfd3258060c7adaf2dc6019c73fcd99aa4de75a9d43753c48b7894160386fc1bba713af7eea921dd02a2e032b43d9df02dfbf857d691d767b371eab65927b88ebda8425559e3f0d982afead4b9550099384f458f2dec50521e68f541779f82bc7ee26f3ee1177714d65d9c5b6d8453583fa094dc1e78711d75cf578e1b0cd6d827eed37dd95b5c0d553d1c262d319e645eac1f8af540316ec866cf51376b3f9b0455b7f82938665152c3f693a318c1853f2ed695dc0add6febd6cbde71e80d19c50bebbc10a0894f2ad4e0be8e44f049cd24796f762f091a44e0a993df4a9aa773ac72e458145b40fa2654f4ee6f0cec53303acd5fab496c1db37c716e2575cbf563085ab12b99c77f3b504f3d2d0dc1975c42aee32aa0a0404c86c51e487e7d7db5cdf9a82e65f50d1af493e290429ff76a9f7e0617661127d90a916c454c51d03751fb33a8f03f7abed36c34656ecc9322e7e47bc3199a1f89df7c63eefd4fe108f60cbe01088036ae8020fb605fc8d409bf08f563c137ff172654dd16ef83c7238ccc5a480809be2553869c12d38bce74ce23ccaaa4fbaac495c8d5717b594b54258eac9c26c9a105b3dc58c6ce64ffa69cd3bb1aec9ecd95cc6159708d1aa5648d5c79a0fb12bc1e7f375d7ec60c6050d560d84f7b2690074646c972c02260a06d182340d4921ab1492b301cebef0646b1ad61cde103dbda71d778223502178a8dd06d78487f69a22761f24cffe4b006240e9081bb97d5563885c4e5123058265e53b0eb1123a075af96b2eb9fe9018c5afc00282e3be631d51de0c64e3138e0fd607ea0d33bca1fb59854321099665347dc60f32157c6add5450f29454eafc8a348bc29723750211643693d89a22e66a2ca3411d593f8dab483b7e78c1a4a1ef1adb21730d3eaef59ea927b071d8fcf8b535e21bfcb7ba8ebbcae54a1812410da2807cd8437ab95a95f1dd60aa39880e3537afcfe3522a6573b6beb733d476ee57deb222fb2fc69e139f5bcc8ccbb4a309bc4face70e203ac9a442446fdeb33cebebc244cd053ac3d637857d71ece703b625864af9cf8ea0270967fb7f044be4edad5c81f33c7c26e14f049a76420ee2059eb4ae824563580a949ff66c4e09bc244bf19c0e67cb604c6cac53edf54d195c482b9f556145a097ee14d9303957470b3005b6918623b36c38ceda2a16163be4d0bb80ce0ff469123cdca0e160c6ebe08f80abaa09326fd02721cfaecaae26796635cc9b283e6f6249bd7baf767fc505af8aa16d2befd6ea723fa777374d98d07b5183858acf580b62feedce744d1bacefc5e612a7a5f1520121d2144b41bf555eb2157a3b18b020d3e1b25fbbc8e9da154737d34e3a2c742abcba457470667dad1ac6a2eda22cece40d5309ff038068ae3ccf48ca6358a48ad27b01562b9679b69612ff7a4f97502d4e3a11272f40ed7fe7f2e50a2bcb66b4764d4a796d181f9f5c266ecd99423c7957d645cd8be3aaa0ae65d9442d57cee18000bc725c60c9a943a4060fdb30cce399ae79f8fc1e9b905575c10176d75498bcd3c995a5721d270e16f34f2d412bef5b1efba3bff441bc54437769316a88370cdaebe2c306d4e8ab3929ff6dbacb1f7844d4302f936288184807a28238da9102bc0bc83b2e8607316e5fd14840b5f6d622bb064623a0ba898540278629dd4f84078333a9cae2bb22db627d85fa41449675bc10d6754a17f5d68b7d4d7de7b4ac7bd54526f48d1b32a07760f98367f3a27d5ee6648a419f21280551e240d613947f2b05f7b9b64ac9388702581e2389d5eb8e4264cd16f58ed98cb8d4e4882e8ef9739a3664779d4fcb44106f9e82246baa22c068c4f7d1c25755346bace19846e3a2f970949ff94c9674fa7ef6fc1126efdf6faf474c8cee10aa41d3b16751610b9b61fcb24421db4f4450a29ee1bb943cd7157993207aa8025270760f90308ad2610985c493f56ad788dac23bfe282d7828f5", @ANYRESHEX=r0], 0xfb, 0x1226, &(0x7f0000002340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x32600) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 291.741764ms ago: executing program 5 (id=4159): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 291.571224ms ago: executing program 3 (id=4160): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1100) 291.406774ms ago: executing program 5 (id=4161): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) close(r0) 270.078924ms ago: executing program 3 (id=4162): ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r3, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) 248.500935ms ago: executing program 5 (id=4163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = dup(r3) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000000), 0x0, 0x0, 0x2) 168.099647ms ago: executing program 3 (id=4164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000000)=0xf, 0x4) 167.852907ms ago: executing program 5 (id=4165): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) syz_emit_ethernet(0x0, 0x0, 0x0) 167.635056ms ago: executing program 6 (id=4166): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x20040, 0x0, 0x0) 161.244977ms ago: executing program 3 (id=4167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='task_newtask\x00', r1, 0x0, 0xfffffffffffffffc}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 149.718397ms ago: executing program 6 (id=4168): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 158.88µs ago: executing program 3 (id=4169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 0s ago: executing program 6 (id=4170): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014001700b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r1}, 0x18) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)='[', 0x1}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): s (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.551094][T14494] ext4 filesystem being mounted at /618/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.578917][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.673060][T14536] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=14536 comm=syz.2.3225 [ 123.692331][T14538] loop0: detected capacity change from 0 to 512 [ 123.699230][T14538] EXT4-fs: Ignoring removed orlov option [ 123.707257][T14538] ext3: Unknown parameter 'measure' [ 123.714011][T14538] netlink: 'syz.0.3228': attribute type 10 has an invalid length. [ 123.721899][T14538] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3228'. [ 123.746267][T14538] team0: Port device geneve1 added [ 123.802446][T14554] vhci_hcd: invalid port number 96 [ 123.807609][T14554] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 123.834128][T14562] loop2: detected capacity change from 0 to 512 [ 123.842587][T14562] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 123.869604][T14562] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.894616][T14562] ext4 filesystem being mounted at /671/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.912598][T14574] loop4: detected capacity change from 0 to 512 [ 123.923921][T14574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.930632][T14562] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 123.936565][T14574] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.951603][T14562] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 123.964845][T14574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.973599][T14562] EXT4-fs (loop2): This should not happen!! Data will be lost [ 123.973599][T14562] [ 123.992260][T14562] EXT4-fs (loop2): Total free blocks count 0 [ 123.998249][T14562] EXT4-fs (loop2): Free/Dirty block details [ 124.004254][T14562] EXT4-fs (loop2): free_blocks=39626 [ 124.009626][T14562] EXT4-fs (loop2): dirty_blocks=16 [ 124.014834][T14562] EXT4-fs (loop2): Block reservation details [ 124.020824][T14562] EXT4-fs (loop2): i_reserved_data_blocks=16 [ 124.097181][T14584] loop4: detected capacity change from 0 to 1024 [ 124.123285][T14584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.149275][T14584] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.3237: Allocating blocks 385-513 which overlap fs metadata [ 124.165862][T14584] EXT4-fs (loop4): pa ffff88810720d2a0: logic 16, phys. 129, len 24 [ 124.173999][T14584] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 124.186822][T14584] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 124.198655][T14578] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 2048 with error 28 [ 124.199146][T14584] EXT4-fs (loop4): This should not happen!! Data will be lost [ 124.199146][T14584] [ 124.221858][T14584] EXT4-fs (loop4): Total free blocks count 0 [ 124.227904][T14584] EXT4-fs (loop4): Free/Dirty block details [ 124.233839][T14584] EXT4-fs (loop4): free_blocks=128 [ 124.239006][T14584] EXT4-fs (loop4): dirty_blocks=0 [ 124.244097][T14584] EXT4-fs (loop4): Block reservation details [ 124.250095][T14584] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 124.293860][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3242'. [ 124.303575][T14598] IPVS: Error joining to the multicast group [ 124.364940][T14608] loop2: detected capacity change from 0 to 128 [ 124.529055][T14633] loop2: detected capacity change from 0 to 1024 [ 124.543949][T14633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.576191][T14633] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.3255: Allocating blocks 385-513 which overlap fs metadata [ 124.606253][T14633] EXT4-fs (loop2): pa ffff88810728c8c0: logic 16, phys. 129, len 24 [ 124.614474][T14633] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 124.630267][T14633] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 124.642708][T14633] EXT4-fs (loop2): This should not happen!! Data will be lost [ 124.642708][T14633] [ 124.652430][T14633] EXT4-fs (loop2): Total free blocks count 0 [ 124.658450][T14633] EXT4-fs (loop2): Free/Dirty block details [ 124.664568][T14633] EXT4-fs (loop2): free_blocks=128 [ 124.669720][T14633] EXT4-fs (loop2): dirty_blocks=0 [ 124.674828][T14633] EXT4-fs (loop2): Block reservation details [ 124.680820][T14633] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 124.774905][T14657] loop0: detected capacity change from 0 to 1024 [ 124.782607][T14657] EXT4-fs: Ignoring removed bh option [ 124.789776][T14657] EXT4-fs: inline encryption not supported [ 124.796248][T14661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3261'. [ 124.805902][T14657] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.819243][T14657] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 124.829552][T14657] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.3262: lblock 2 mapped to illegal pblock 2 (length 1) [ 124.856468][T14657] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.3262: lblock 0 mapped to illegal pblock 48 (length 1) [ 124.887241][T14657] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.3262: Failed to acquire dquot type 0 [ 124.899013][T14657] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 124.914505][T14657] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.3262: mark_inode_dirty error [ 124.928513][T14657] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 124.929570][T14670] loop2: detected capacity change from 0 to 512 [ 124.945277][T14657] EXT4-fs (loop0): 1 orphan inode deleted [ 124.951529][T14657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.964745][ T7529] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 124.998359][ T7529] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:37: Failed to release dquot type 0 [ 125.013312][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.025707][ T3308] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 125.044131][T14677] loop5: detected capacity change from 0 to 512 [ 125.065477][T14677] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 125.067470][T14670] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 125.087798][T14684] netlink: 'syz.3.3270': attribute type 3 has an invalid length. [ 125.097725][ T3308] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 125.108763][T14677] EXT4-fs (loop5): 1 truncate cleaned up [ 125.114821][T14670] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.115222][T14677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.136696][ T3308] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 125.171266][T14670] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.3264: corrupted inode contents [ 125.184860][T14670] EXT4-fs (loop2): Remounting filesystem read-only [ 125.191473][T14670] EXT4-fs (loop2): 1 truncate cleaned up [ 125.201608][ T7557] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 125.212294][ T7557] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 125.278309][ T7557] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 125.291782][T14670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 125.362304][T14711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3278'. [ 125.423401][T14715] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3280'. [ 125.432820][T14715] unsupported nlmsg_type 40 [ 125.664983][T14696] Set syz1 is full, maxelem 65536 reached [ 125.747367][T14744] netlink: 62967 bytes leftover after parsing attributes in process `syz.2.3292'. [ 125.863671][T14759] pim6reg: entered allmulticast mode [ 125.874821][T14765] loop3: detected capacity change from 0 to 2048 [ 125.895252][T14759] pim6reg: left allmulticast mode [ 125.896859][T14772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3305'. [ 125.940289][ T3302] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 125.981488][ T3302] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 126.007235][T14783] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.020173][T14783] FAT-fs (loop5): unable to read boot sector [ 126.050933][T14804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3307'. [ 126.062719][T14804] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3307'. [ 126.110722][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 126.110808][ T29] audit: type=1326 audit(1758491174.261:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 126.145422][ T29] audit: type=1326 audit(1758491174.301:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 126.168322][ T29] audit: type=1326 audit(1758491174.301:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 126.191462][ T29] audit: type=1326 audit(1758491174.301:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 126.214583][ T29] audit: type=1326 audit(1758491174.301:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 126.237519][ T29] audit: type=1326 audit(1758491174.301:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 126.260612][ T29] audit: type=1326 audit(1758491174.301:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 126.283807][ T29] audit: type=1326 audit(1758491174.321:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 126.306878][ T29] audit: type=1326 audit(1758491174.321:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14811 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 126.347850][ T29] audit: type=1326 audit(1758491174.491:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14825 comm="syz.5.3320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 126.415717][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3325'. [ 126.438867][T14843] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 126.463908][T14839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.493585][T14878] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3326'. [ 126.556623][T14881] loop5: detected capacity change from 0 to 512 [ 126.596862][T14881] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 126.635650][T14881] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.655687][T14893] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14893 comm=syz.2.3333 [ 126.668358][T14893] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14893 comm=syz.2.3333 [ 126.707414][T14881] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 126.738306][T14881] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 126.750887][T14881] EXT4-fs (loop5): This should not happen!! Data will be lost [ 126.750887][T14881] [ 126.760601][T14881] EXT4-fs (loop5): Total free blocks count 0 [ 126.766863][T14881] EXT4-fs (loop5): Free/Dirty block details [ 126.772857][T14881] EXT4-fs (loop5): free_blocks=39626 [ 126.778176][T14881] EXT4-fs (loop5): dirty_blocks=15 [ 126.783505][T14881] EXT4-fs (loop5): Block reservation details [ 126.789520][T14881] EXT4-fs (loop5): i_reserved_data_blocks=15 [ 127.132980][T14930] loop4: detected capacity change from 0 to 1024 [ 127.168855][T14930] EXT4-fs: Ignoring removed bh option [ 127.188999][T14930] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 127.211236][T14904] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 2048 with error 28 [ 127.224172][T14904] EXT4-fs (loop5): This should not happen!! Data will be lost [ 127.224172][T14904] [ 127.346319][T14953] serio: Serial port ttyS3 [ 127.354502][T14956] SELinux: security policydb version 17 (MLS) not backwards compatible [ 127.368156][T14956] SELinux: failed to load policy [ 127.621476][T14994] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 128.286364][T15033] Set syz1 is full, maxelem 65536 reached [ 128.672263][T15100] : renamed from vlan1 (while UP) [ 128.800738][T15116] loop2: detected capacity change from 0 to 512 [ 128.833881][T15116] ext4 filesystem being mounted at /721/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.844268][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a735400: rx timeout, send abort [ 128.852593][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a735400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.852713][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a735600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.908662][T15116] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.3420: corrupted inode contents [ 128.937458][T15116] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.3420: mark_inode_dirty error [ 128.987762][T15116] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.3420: corrupted inode contents [ 129.042908][T15116] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.3420: corrupted inode contents [ 129.065448][T15134] geneve2: entered promiscuous mode [ 129.070767][T15134] geneve2: entered allmulticast mode [ 129.084829][T15116] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.3420: mark_inode_dirty error [ 129.113248][T15116] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.3420: corrupted inode contents [ 129.128703][T15116] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.3420: mark_inode_dirty error [ 129.168185][T15116] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.3420: corrupted inode contents [ 129.181708][T15116] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.3420: mark_inode_dirty error [ 129.314444][T15169] netlink: 'syz.0.3441': attribute type 10 has an invalid length. [ 129.329168][T15175] pim6reg: entered allmulticast mode [ 129.335672][T15167] SELinux: failed to load policy [ 129.350980][T15169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.365755][T15182] netlink: 'syz.0.3441': attribute type 10 has an invalid length. [ 129.367655][T15180] loop5: detected capacity change from 0 to 1764 [ 129.373983][T15169] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 129.388959][T15175] pim6reg: left allmulticast mode [ 129.403222][T15185] loop4: detected capacity change from 0 to 512 [ 129.410658][T15182] batadv0: entered promiscuous mode [ 129.415960][T15182] batadv0: entered allmulticast mode [ 129.423446][T15182] bond0: (slave batadv0): Releasing backup interface [ 129.431407][T15185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 129.447007][T15182] bridge0: port 1(batadv0) entered blocking state [ 129.453620][T15182] bridge0: port 1(batadv0) entered disabled state [ 129.466039][T15185] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.543286][T15185] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 129.559763][T15185] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 129.572129][T15185] EXT4-fs (loop4): This should not happen!! Data will be lost [ 129.572129][T15185] [ 129.581817][T15185] EXT4-fs (loop4): Total free blocks count 0 [ 129.587861][T15185] EXT4-fs (loop4): Free/Dirty block details [ 129.593877][T15185] EXT4-fs (loop4): free_blocks=39626 [ 129.599211][T15185] EXT4-fs (loop4): dirty_blocks=15 [ 129.604388][T15185] EXT4-fs (loop4): Block reservation details [ 129.610436][T15185] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 129.688502][ T7521] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 129.697995][ T7521] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 129.730797][T15218] netlink: 'syz.2.3459': attribute type 9 has an invalid length. [ 129.845230][T15234] program syz.3.3466 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 129.856018][T15234] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 129.886806][T15238] __nla_validate_parse: 9 callbacks suppressed [ 129.886831][T15238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3468'. [ 129.903478][T15210] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 2048 with error 28 [ 129.904613][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3468'. [ 129.916506][T15210] EXT4-fs (loop4): This should not happen!! Data will be lost [ 129.916506][T15210] [ 130.115589][T15254] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3475'. [ 130.305699][ T7517] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x22 [ 130.339011][T15285] batman_adv: batadv0: Adding interface: dummy0 [ 130.345419][T15285] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.384362][T15285] batman_adv: batadv0: Interface activated: dummy0 [ 130.393267][T15289] loop3: detected capacity change from 0 to 512 [ 130.400124][T15285] batadv0: mtu less than device minimum [ 130.406206][T15285] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.417194][T15285] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.427978][T15285] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.438913][T15285] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.449688][T15285] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.460435][T15285] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.471235][T15285] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 130.487270][T15289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 130.685086][T15289] ext4 filesystem being mounted at /687/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.805171][T15315] loop5: detected capacity change from 0 to 512 [ 130.813964][T15315] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.825956][T15289] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 130.826141][T15315] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 130.871740][T15289] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 130.884193][T15289] EXT4-fs (loop3): This should not happen!! Data will be lost [ 130.884193][T15289] [ 130.893882][T15289] EXT4-fs (loop3): Total free blocks count 0 [ 130.899944][T15289] EXT4-fs (loop3): Free/Dirty block details [ 130.905910][T15289] EXT4-fs (loop3): free_blocks=39626 [ 130.911417][T15289] EXT4-fs (loop3): dirty_blocks=15 [ 130.916565][T15289] EXT4-fs (loop3): Block reservation details [ 130.922609][T15289] EXT4-fs (loop3): i_reserved_data_blocks=15 [ 130.983208][T15323] loop0: detected capacity change from 0 to 128 [ 131.071969][T15321] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 131.082009][T15321] SELinux: failed to load policy [ 131.191379][T15315] EXT4-fs (loop5): 1 truncate cleaned up [ 131.200375][T15318] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 2048 with error 28 [ 131.213253][T15318] EXT4-fs (loop3): This should not happen!! Data will be lost [ 131.213253][T15318] [ 131.378353][T15347] loop4: detected capacity change from 0 to 256 [ 131.387856][T15349] SELinux: failed to load policy [ 131.448823][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3506'. [ 131.490369][T15374] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3509'. [ 131.514660][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 131.514678][ T29] audit: type=1326 audit(1758491179.671:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 131.553499][ T29] audit: type=1326 audit(1758491179.701:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 131.577150][ T29] audit: type=1326 audit(1758491179.701:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 131.600815][ T29] audit: type=1326 audit(1758491179.701:6347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 131.624938][ T29] audit: type=1326 audit(1758491179.701:6348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 131.649281][ T29] audit: type=1326 audit(1758491179.701:6349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 131.673067][ T29] audit: type=1326 audit(1758491179.701:6350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 131.696582][ T29] audit: type=1326 audit(1758491179.701:6351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 131.720273][ T29] audit: type=1326 audit(1758491179.711:6352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 131.744052][ T29] audit: type=1326 audit(1758491179.711:6353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15396 comm="syz.0.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 131.807196][T15417] loop4: detected capacity change from 0 to 512 [ 131.814546][T15417] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 131.829112][T15422] vlan2: entered allmulticast mode [ 131.856567][T15417] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.867321][T15417] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 131.909420][T15417] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 131.921803][T15417] EXT4-fs (loop4): This should not happen!! Data will be lost [ 131.921803][T15417] [ 131.931524][T15417] EXT4-fs (loop4): Total free blocks count 0 [ 131.937915][T15417] EXT4-fs (loop4): Free/Dirty block details [ 131.943880][T15417] EXT4-fs (loop4): free_blocks=39626 [ 131.949250][T15417] EXT4-fs (loop4): dirty_blocks=16 [ 131.954424][T15417] EXT4-fs (loop4): Block reservation details [ 131.960510][T15417] EXT4-fs (loop4): i_reserved_data_blocks=16 [ 132.092876][T15468] loop3: detected capacity change from 0 to 1024 [ 132.127119][T15468] EXT4-fs: Ignoring removed orlov option [ 132.144676][T15477] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 132.189440][T15453] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 2048 with error 28 [ 132.202514][T15453] EXT4-fs (loop4): This should not happen!! Data will be lost [ 132.202514][T15453] [ 132.328131][T15493] loop2: detected capacity change from 0 to 256 [ 132.366749][T15496] netlink: 19 bytes leftover after parsing attributes in process `syz.0.3534'. [ 132.421339][T15500] serio: Serial port ptm0 [ 132.512764][T15516] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 132.522027][ T10] hid_parser_main: 48 callbacks suppressed [ 132.522045][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.535751][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.543286][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.552651][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.560095][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.567636][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.575143][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.582636][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.590050][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.597515][ T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 132.619559][ T10] hid-generic 0000:0000:0000.0004: hidraw0: HID v8.00 Device [syz0] on syz1 [ 132.630210][ T3302] EXT4-fs unmount: 19 callbacks suppressed [ 132.630262][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.670906][T15531] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3547'. [ 132.703389][T15537] loop2: detected capacity change from 0 to 512 [ 132.736983][T15537] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.760093][T15537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.776652][T15537] ext4 filesystem being mounted at /746/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.818206][T15537] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 132.860887][T15537] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 132.873296][T15537] EXT4-fs (loop2): This should not happen!! Data will be lost [ 132.873296][T15537] [ 132.882977][T15537] EXT4-fs (loop2): Total free blocks count 0 [ 132.888975][T15537] EXT4-fs (loop2): Free/Dirty block details [ 132.894915][T15537] EXT4-fs (loop2): free_blocks=39626 [ 132.900221][T15537] EXT4-fs (loop2): dirty_blocks=15 [ 132.905469][T15537] EXT4-fs (loop2): Block reservation details [ 132.911597][T15537] EXT4-fs (loop2): i_reserved_data_blocks=15 [ 133.004099][T15561] serio: Serial port ptm0 [ 133.028844][T15563] loop4: detected capacity change from 0 to 1024 [ 133.052012][T15563] EXT4-fs: Ignoring removed orlov option [ 133.060128][T15563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.169123][T15554] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 2048 with error 28 [ 133.361966][T15601] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3569'. [ 133.384188][T15604] loop5: detected capacity change from 0 to 1024 [ 133.408598][T15604] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 133.419644][T15604] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 133.443862][T15604] JBD2: no valid journal superblock found [ 133.449676][T15604] EXT4-fs (loop5): Could not load journal inode [ 133.470364][T13560] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.473688][T15604] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 133.523599][T15634] loop5: detected capacity change from 0 to 512 [ 133.531878][T15634] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 133.555061][T15634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.577368][T15634] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.625071][T15658] netlink: 532 bytes leftover after parsing attributes in process `syz.4.3582'. [ 133.644974][T15659] loop3: detected capacity change from 0 to 512 [ 133.653594][T15634] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 133.672499][T15659] EXT4-fs: Ignoring removed nobh option [ 133.678983][T15634] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 133.691319][T15634] EXT4-fs (loop5): This should not happen!! Data will be lost [ 133.691319][T15634] [ 133.701002][T15634] EXT4-fs (loop5): Total free blocks count 0 [ 133.707016][T15634] EXT4-fs (loop5): Free/Dirty block details [ 133.712991][T15634] EXT4-fs (loop5): free_blocks=39626 [ 133.718299][T15634] EXT4-fs (loop5): dirty_blocks=16 [ 133.723460][T15634] EXT4-fs (loop5): Block reservation details [ 133.729480][T15634] EXT4-fs (loop5): i_reserved_data_blocks=16 [ 133.750319][T15659] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.3581: iget: bad i_size value: 38620345925642 [ 133.786108][T15659] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.3581: couldn't read orphan inode 15 (err -117) [ 133.870131][T15659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.911888][T15663] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 2048 with error 28 [ 133.936174][T15659] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3581: bg 0: block 5: invalid block bitmap [ 133.940107][T15676] loop2: detected capacity change from 0 to 1024 [ 133.956855][T15659] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 28 [ 133.958797][T15676] EXT4-fs: Ignoring removed orlov option [ 133.969223][T15659] EXT4-fs (loop3): This should not happen!! Data will be lost [ 133.969223][T15659] [ 133.984814][T15659] EXT4-fs (loop3): Total free blocks count 0 [ 133.990843][T15659] EXT4-fs (loop3): Free/Dirty block details [ 133.996826][T15659] EXT4-fs (loop3): free_blocks=0 [ 134.001826][T15659] EXT4-fs (loop3): dirty_blocks=16 [ 134.006954][T15659] EXT4-fs (loop3): Block reservation details [ 134.012978][T15659] EXT4-fs (loop3): i_reserved_data_blocks=16 [ 134.030792][T15676] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.090694][T15684] loop0: detected capacity change from 0 to 1024 [ 134.109968][T15684] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 134.120978][T15684] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 134.132086][T15684] JBD2: no valid journal superblock found [ 134.137853][T15684] EXT4-fs (loop0): Could not load journal inode [ 134.148736][T15684] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 134.196891][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.327702][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.376352][T15710] loop0: detected capacity change from 0 to 512 [ 134.393439][T15710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.406917][T15710] ext4 filesystem being mounted at /681/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.422647][T15716] loop2: detected capacity change from 0 to 512 [ 134.429748][T15716] EXT4-fs: Ignoring removed orlov option [ 134.436816][T15716] ext3: Unknown parameter 'measure' [ 134.444966][T15716] netlink: 'syz.2.3598': attribute type 10 has an invalid length. [ 134.452986][T15716] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3598'. [ 134.463672][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.479482][ T7529] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.489533][ T7529] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.499699][ T7529] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.510274][ T7529] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.554722][T15728] loop3: detected capacity change from 0 to 512 [ 134.561910][T15728] EXT4-fs: Ignoring removed orlov option [ 134.567614][T15728] ext3: Unknown parameter 'measure' [ 134.581631][T15728] netlink: 'syz.3.3612': attribute type 10 has an invalid length. [ 134.595124][T15728] geneve1: entered promiscuous mode [ 134.602231][T15728] team0: Port device geneve1 added [ 135.536174][T15821] __nla_validate_parse: 1 callbacks suppressed [ 135.536219][T15821] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3630'. [ 135.607207][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3631'. [ 135.636696][T15826] loop5: detected capacity change from 0 to 1024 [ 135.649853][T15824] IPVS: Error joining to the multicast group [ 135.672382][T15826] EXT4-fs: Ignoring removed orlov option [ 135.702212][T15826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.096806][T11754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.136696][T15851] loop5: detected capacity change from 0 to 512 [ 136.155324][T15851] EXT4-fs: Ignoring removed orlov option [ 136.166683][T15851] ext3: Unknown parameter 'measure' [ 136.188168][T15851] netlink: 'syz.5.3639': attribute type 10 has an invalid length. [ 136.196089][T15851] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3639'. [ 136.365290][T15876] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3651'. [ 136.444352][T15889] random: crng reseeded on system resumption [ 136.464272][T15889] Restarting kernel threads ... [ 136.488979][T15889] Done restarting kernel threads. [ 136.495637][T15895] loop4: detected capacity change from 0 to 512 [ 136.512403][T15895] EXT4-fs: Ignoring removed orlov option [ 136.518155][T15895] ext3: Unknown parameter 'measure' [ 136.563637][T15895] netlink: 'syz.4.3659': attribute type 10 has an invalid length. [ 136.571631][T15895] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3659'. [ 136.634987][T15911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3665'. [ 136.704096][T15917] loop5: detected capacity change from 0 to 512 [ 136.720520][T15917] EXT4-fs: Ignoring removed orlov option [ 136.726576][T15917] ext3: Unknown parameter 'measure' [ 136.736630][T15917] netlink: 'syz.5.3678': attribute type 10 has an invalid length. [ 136.744749][T15917] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3678'. [ 136.764490][T15926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3670'. [ 136.821950][T15926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.921020][T15975] loop5: detected capacity change from 0 to 2048 [ 136.964667][T15975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.016498][T11754] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 137.042444][T11754] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 137.055474][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 137.055497][ T29] audit: type=1326 audit(1758491185.202:6458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 137.098426][T11754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.114525][ T29] audit: type=1326 audit(1758491185.202:6459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 137.138014][ T29] audit: type=1326 audit(1758491185.202:6460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 137.161672][ T29] audit: type=1326 audit(1758491185.202:6461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 137.185357][ T29] audit: type=1326 audit(1758491185.202:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 137.209167][ T29] audit: type=1326 audit(1758491185.222:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16005 comm="syz.0.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6b4a0ec29 code=0x7ffc0000 [ 137.239237][T16011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3680'. [ 137.290301][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3682'. [ 137.677081][T16094] loop0: detected capacity change from 0 to 1024 [ 137.695454][T16094] EXT4-fs: Ignoring removed orlov option [ 137.705618][T16094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.883487][T16102] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16102 comm=syz.3.3708 [ 137.896169][T16102] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16102 comm=syz.3.3708 [ 138.036115][T16108] random: crng reseeded on system resumption [ 138.065786][T16108] Restarting kernel threads ... [ 138.100519][T16108] Done restarting kernel threads. [ 138.234060][T16120] loop3: detected capacity change from 0 to 512 [ 138.254390][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.282686][T16120] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 138.318073][T16120] EXT4-fs (loop3): orphan cleanup on readonly fs [ 138.383026][T16137] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16137 comm=syz.4.3719 [ 138.395646][T16137] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=16137 comm=syz.4.3719 [ 138.427297][ T29] audit: type=1326 audit(1758491186.572:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16144 comm="syz.0.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb6b4a05be7 code=0x7ffc0000 [ 138.450903][ T29] audit: type=1326 audit(1758491186.572:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16144 comm="syz.0.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb6b49aae09 code=0x7ffc0000 [ 138.474426][ T29] audit: type=1326 audit(1758491186.572:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16144 comm="syz.0.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb6b4a05be7 code=0x7ffc0000 [ 138.482275][T16120] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.3712: corrupted inode contents [ 138.498020][ T29] audit: type=1326 audit(1758491186.572:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16144 comm="syz.0.3723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb6b49aae09 code=0x7ffc0000 [ 138.594821][T16120] EXT4-fs (loop3): Remounting filesystem read-only [ 138.613976][T16156] serio: Serial port ttyS3 [ 138.630190][T16120] EXT4-fs (loop3): 1 truncate cleaned up [ 138.636077][ T7512] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 138.646873][ T7512] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 138.659501][ T7512] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 138.693477][T16120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.830508][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.034214][T16182] loop5: detected capacity change from 0 to 1024 [ 139.050593][T16182] EXT4-fs: Ignoring removed bh option [ 139.061215][T16182] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 139.092931][T16182] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.125066][T11754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.304689][T16220] loop2: detected capacity change from 0 to 128 [ 139.314798][T16220] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 139.328246][T16220] ext4 filesystem being mounted at /786/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.355584][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.469348][T16224] loop5: detected capacity change from 0 to 8192 [ 139.619066][T16238] usb usb1: usbfs: process 16238 (syz.3.3754) did not claim interface 0 before use [ 139.882194][T16255] loop3: detected capacity change from 0 to 1024 [ 139.889128][T16258] loop0: detected capacity change from 0 to 128 [ 139.906068][T16255] EXT4-fs: Ignoring removed orlov option [ 139.933020][T16255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.253916][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.548796][T16352] __nla_validate_parse: 7 callbacks suppressed [ 140.548835][T16352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3797'. [ 140.653504][T16362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3801'. [ 140.740646][T16376] loop4: detected capacity change from 0 to 512 [ 140.758338][T16376] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.787343][T16376] ext4 filesystem being mounted at /137/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.801968][T16376] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.3806: corrupted inode contents [ 140.815326][T16376] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.3806: mark_inode_dirty error [ 140.827395][T16376] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.3806: corrupted inode contents [ 140.855641][T16376] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents [ 140.902257][T16376] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error [ 140.931010][T16376] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents [ 140.960107][T16376] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm wg1: mark_inode_dirty error [ 140.986207][T16376] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm wg1: corrupted inode contents [ 141.011909][T16376] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm wg1: mark_inode_dirty error [ 141.059441][T13560] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.177210][T16424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3813'. [ 141.199488][T16423] usb usb1: usbfs: process 16423 (syz.4.3814) did not claim interface 0 before use [ 141.317264][T16430] SELinux: failed to load policy [ 141.421154][T16439] netlink: 'syz.2.3819': attribute type 10 has an invalid length. [ 141.471580][T16439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.487439][T16446] netlink: 'syz.2.3819': attribute type 10 has an invalid length. [ 141.495359][T16446] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3819'. [ 141.535862][T16439] batadv0: entered promiscuous mode [ 141.553288][T16439] $H: (slave batadv0): Enslaving as an active interface with an up link [ 141.570620][T16446] batadv0: entered allmulticast mode [ 141.582296][T16446] $H: (slave batadv0): Releasing backup interface [ 141.597839][T16446] net_ratelimit: 12 callbacks suppressed [ 141.597857][T16446] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 142.066297][T16483] geneve2: entered promiscuous mode [ 142.071633][T16483] geneve2: entered allmulticast mode [ 142.114057][T16489] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3828'. [ 142.173247][T16493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3831'. [ 142.188285][T16434] syz.3.3817 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 142.202515][T16434] CPU: 1 UID: 0 PID: 16434 Comm: syz.3.3817 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 142.202556][T16434] Tainted: [W]=WARN [ 142.202565][T16434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.202580][T16434] Call Trace: [ 142.202588][T16434] [ 142.202610][T16434] __dump_stack+0x1d/0x30 [ 142.202641][T16434] dump_stack_lvl+0xe8/0x140 [ 142.202674][T16434] dump_stack+0x15/0x1b [ 142.202694][T16434] dump_header+0x81/0x220 [ 142.202734][T16434] oom_kill_process+0x342/0x400 [ 142.202776][T16434] out_of_memory+0x979/0xb80 [ 142.202860][T16434] try_charge_memcg+0x5e6/0x9e0 [ 142.202895][T16434] obj_cgroup_charge_pages+0xa6/0x150 [ 142.202972][T16434] __memcg_kmem_charge_page+0x9f/0x170 [ 142.203054][T16434] __alloc_frozen_pages_noprof+0x188/0x360 [ 142.203151][T16434] alloc_pages_mpol+0xb3/0x250 [ 142.203187][T16434] alloc_pages_noprof+0x90/0x130 [ 142.203225][T16434] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 142.203313][T16434] __kvmalloc_node_noprof+0x30f/0x4e0 [ 142.203358][T16434] ? ip_set_alloc+0x1f/0x30 [ 142.203380][T16434] ? ip_set_alloc+0x1f/0x30 [ 142.203401][T16434] ? __kmalloc_cache_noprof+0x189/0x320 [ 142.203437][T16434] ip_set_alloc+0x1f/0x30 [ 142.203457][T16434] hash_netiface_create+0x282/0x740 [ 142.203483][T16434] ? __pfx_hash_netiface_create+0x10/0x10 [ 142.203581][T16434] ip_set_create+0x3c9/0x960 [ 142.203618][T16434] ? __nla_parse+0x40/0x60 [ 142.203663][T16434] nfnetlink_rcv_msg+0x4c3/0x590 [ 142.203705][T16434] netlink_rcv_skb+0x123/0x220 [ 142.203731][T16434] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 142.203828][T16434] nfnetlink_rcv+0x16b/0x1690 [ 142.203849][T16434] ? nlmon_xmit+0x4f/0x60 [ 142.203956][T16434] ? consume_skb+0x49/0x150 [ 142.203980][T16434] ? nlmon_xmit+0x4f/0x60 [ 142.204011][T16434] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 142.204042][T16434] ? __dev_queue_xmit+0x1200/0x2000 [ 142.204119][T16434] ? __dev_queue_xmit+0x182/0x2000 [ 142.204156][T16434] ? __rcu_read_unlock+0x4f/0x70 [ 142.204181][T16434] ? ref_tracker_free+0x37d/0x3e0 [ 142.204235][T16434] ? __netlink_deliver_tap+0x4dc/0x500 [ 142.204267][T16434] netlink_unicast+0x5bd/0x690 [ 142.204306][T16434] netlink_sendmsg+0x58b/0x6b0 [ 142.204335][T16434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.204363][T16434] __sock_sendmsg+0x142/0x180 [ 142.204398][T16434] ____sys_sendmsg+0x31e/0x4e0 [ 142.204432][T16434] ___sys_sendmsg+0x17b/0x1d0 [ 142.204475][T16434] __x64_sys_sendmsg+0xd4/0x160 [ 142.204508][T16434] x64_sys_call+0x191e/0x2ff0 [ 142.204530][T16434] do_syscall_64+0xd2/0x200 [ 142.204670][T16434] ? switch_fpu_return+0xe/0x20 [ 142.204700][T16434] ? ret_from_fork+0x19a/0x1b0 [ 142.204722][T16434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.204744][T16434] RIP: 0033:0x7fef5aa0ec29 [ 142.204767][T16434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.204823][T16434] RSP: 002b:00007fef59477038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.204844][T16434] RAX: ffffffffffffffda RBX: 00007fef5ac55fa0 RCX: 00007fef5aa0ec29 [ 142.204857][T16434] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 142.204870][T16434] RBP: 00007fef5aa91e41 R08: 0000000000000000 R09: 0000000000000000 [ 142.204884][T16434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.204957][T16434] R13: 00007fef5ac56038 R14: 00007fef5ac55fa0 R15: 00007fffee827f08 [ 142.204977][T16434] [ 142.205105][T16434] memory: usage 307200kB, limit 307200kB, failcnt 288 [ 142.230055][T16495] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3831'. [ 142.230960][T16434] memory+swap: usage 307608kB, limit 9007199254740988kB, failcnt 0 [ 142.570298][T16434] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 142.577654][T16434] Memory cgroup stats for /syz3: [ 142.578219][T16434] cache 0 [ 142.584336][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 142.584354][ T29] audit: type=1326 audit(1758491190.733:6557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz.4.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 142.586146][T16434] rss 0 [ 142.586156][T16434] shmem 0 [ 142.586166][T16434] mapped_file 0 [ 142.592395][ T29] audit: type=1326 audit(1758491190.733:6558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz.4.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 142.615814][T16434] dirty 0 [ 142.615846][T16434] writeback 0 [ 142.615856][T16434] workingset_refault_anon 120 [ 142.651857][ T29] audit: type=1326 audit(1758491190.773:6559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz.4.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 142.654900][T16434] workingset_refault_file 1147 [ 142.659650][ T29] audit: type=1326 audit(1758491190.773:6560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz.4.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 142.683169][T16434] swap 409600 [ 142.683180][T16434] swapcached 28672 [ 142.683189][T16434] pgpgin 112747 [ 142.683198][T16434] pgpgout 112738 [ 142.687965][ T29] audit: type=1326 audit(1758491190.773:6561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16498 comm="syz.4.3832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 142.711561][T16434] pgfault 140004 [ 142.752886][T16434] pgmajfault 64 [ 142.756450][T16434] inactive_anon 16384 [ 142.760549][T16434] active_anon 12288 [ 142.764365][T16434] inactive_file 0 [ 142.767992][T16434] active_file 8192 [ 142.771727][T16434] unevictable 0 [ 142.775250][T16434] hierarchical_memory_limit 314572800 [ 142.780634][T16434] hierarchical_memsw_limit 9223372036854771712 [ 142.786786][T16434] total_cache 0 [ 142.790376][T16434] total_rss 0 [ 142.793671][T16434] total_shmem 0 [ 142.797336][T16434] total_mapped_file 0 [ 142.801598][T16434] total_dirty 0 [ 142.805097][T16434] total_writeback 0 [ 142.808906][T16434] total_workingset_refault_anon 121 [ 142.814237][T16434] total_workingset_refault_file 1147 [ 142.819744][T16434] total_swap 417792 [ 142.823566][T16434] total_swapcached 28672 [ 142.827809][T16434] total_pgpgin 112750 [ 142.831892][T16434] total_pgpgout 112741 [ 142.835961][T16434] total_pgfault 140017 [ 142.840109][T16434] total_pgmajfault 64 [ 142.844300][T16434] total_inactive_anon 16384 [ 142.848829][T16434] total_active_anon 12288 [ 142.853187][T16434] total_inactive_file 0 [ 142.857334][T16434] total_active_file 8192 [ 142.861600][T16434] total_unevictable 0 [ 142.865591][T16434] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3/syz1,task=syz.3.3817,pid=16432,uid=0 [ 142.880839][T16434] Memory cgroup out of memory: Killed process 16432 (syz.3.3817) total-vm:95940kB, anon-rss:1200kB, file-rss:22196kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 142.943138][T16510] netlink: 'syz.4.3835': attribute type 10 has an invalid length. [ 142.957287][T16510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.977615][T16510] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 142.991084][T16510] netlink: 'syz.4.3835': attribute type 10 has an invalid length. [ 142.998944][T16510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3835'. [ 143.008018][T16510] batadv0: entered promiscuous mode [ 143.013290][T16510] batadv0: entered allmulticast mode [ 143.020920][T16510] bond0: (slave batadv0): Releasing backup interface [ 143.029687][T16510] bridge0: port 3(batadv0) entered blocking state [ 143.036476][T16510] bridge0: port 3(batadv0) entered disabled state [ 143.081566][T16521] usb usb1: usbfs: process 16521 (syz.5.3848) did not claim interface 0 before use [ 143.251070][ T7506] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 143.260378][ T7506] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 143.279155][ T29] audit: type=1326 audit(1758491191.423:6562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef5aa05be7 code=0x7ffc0000 [ 143.302957][ T29] audit: type=1326 audit(1758491191.423:6563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef5a9aae09 code=0x7ffc0000 [ 143.326804][T16536] loop4: detected capacity change from 0 to 1024 [ 143.327695][ T29] audit: type=1326 audit(1758491191.423:6564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef5aa05be7 code=0x7ffc0000 [ 143.356830][ T29] audit: type=1326 audit(1758491191.423:6565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef5a9aae09 code=0x7ffc0000 [ 143.380733][ T29] audit: type=1326 audit(1758491191.423:6566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16534 comm="syz.3.3843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef5aa0ec29 code=0x7ffc0000 [ 143.401977][T16536] EXT4-fs: Ignoring removed orlov option [ 143.522464][T16545] netlink: 'syz.5.3849': attribute type 10 has an invalid length. [ 143.553663][T16536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.587571][T16551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.607633][T16545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.615156][T16551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.625132][T16545] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 143.634344][T16553] netlink: 'syz.5.3849': attribute type 10 has an invalid length. [ 143.642442][T16553] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3849'. [ 143.652134][T16553] batadv0: entered promiscuous mode [ 143.657373][T16553] batadv0: entered allmulticast mode [ 143.669101][T16553] bond0: (slave batadv0): Releasing backup interface [ 143.678875][T16553] bridge0: port 3(batadv0) entered blocking state [ 143.685429][T16553] bridge0: port 3(batadv0) entered disabled state [ 143.733188][T13560] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.770506][ T7503] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 143.779825][ T7503] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 143.836279][T16560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3854'. [ 144.252589][T16619] netlink: 'syz.0.3862': attribute type 1 has an invalid length. [ 144.324415][T16626] netlink: 'syz.3.3866': attribute type 10 has an invalid length. [ 144.361733][T16626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.377349][T16626] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 144.394346][T16626] netlink: 'syz.3.3866': attribute type 10 has an invalid length. [ 144.403603][T16626] batadv0: entered promiscuous mode [ 144.409007][T16626] batadv0: entered allmulticast mode [ 144.415522][T16626] bond0: (slave batadv0): Releasing backup interface [ 144.425356][T16626] bridge0: port 3(batadv0) entered blocking state [ 144.431945][T16626] bridge0: port 3(batadv0) entered disabled state [ 144.769658][T16672] netlink: 'syz.5.3880': attribute type 1 has an invalid length. [ 144.793633][T16677] loop2: detected capacity change from 0 to 512 [ 144.803162][T16678] batadv0: left allmulticast mode [ 144.808444][T16678] batadv0: left promiscuous mode [ 144.813582][T16678] bridge0: port 1(batadv0) entered disabled state [ 144.829289][ T7542] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 144.838604][ T7542] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 144.839543][T16677] EXT4-fs: Ignoring removed i_version option [ 144.853919][T16677] EXT4-fs: Ignoring removed bh option [ 144.879714][T16678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.888634][T16678] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 144.920024][T16677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.939731][T16687] batadv0: entered promiscuous mode [ 144.944971][T16687] batadv0: entered allmulticast mode [ 144.957239][T16677] ext4 filesystem being mounted at /818/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.980274][T16687] bond0: (slave batadv0): Releasing backup interface [ 145.009578][T16687] bridge0: port 1(batadv0) entered blocking state [ 145.016159][T16687] bridge0: port 1(batadv0) entered disabled state [ 145.044209][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.071411][T16687] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 145.245843][T16709] loop0: detected capacity change from 0 to 8192 [ 145.632306][T16754] __nla_validate_parse: 6 callbacks suppressed [ 145.632327][T16754] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3911'. [ 146.672122][T16780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3919'. [ 146.778255][T16802] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 147.006640][T16822] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 147.059891][T16761] syz.5.3902 (16761) used greatest stack depth: 6200 bytes left [ 147.741352][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 147.741368][ T29] audit: type=1326 audit(1758491195.893:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 147.803507][ T29] audit: type=1326 audit(1758491195.923:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 147.827692][ T29] audit: type=1326 audit(1758491195.923:6626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 147.851288][ T29] audit: type=1326 audit(1758491195.923:6627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 147.874942][ T29] audit: type=1326 audit(1758491195.923:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 147.898528][ T29] audit: type=1326 audit(1758491195.923:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 147.920918][T16866] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 147.922190][ T29] audit: type=1326 audit(1758491195.923:6630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 147.954494][ T29] audit: type=1326 audit(1758491195.923:6631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 147.978068][ T29] audit: type=1326 audit(1758491195.923:6632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 148.001653][ T29] audit: type=1326 audit(1758491195.923:6633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16856 comm="syz.4.3930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f590131ec29 code=0x7ffc0000 [ 148.910155][T16927] netlink: 19 bytes leftover after parsing attributes in process `syz.2.3949'. [ 149.001248][T16931] loop2: detected capacity change from 0 to 1024 [ 149.040542][T16931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.098660][T16931] loop2: detected capacity change from 1024 to 0 [ 149.106421][ C0] I/O error, dev loop2, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 149.116062][ C0] I/O error, dev loop2, sector 18 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.125663][ C0] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 149.139721][T16931] EXT4-fs error (device loop2): ext4_get_inode_loc:4999: inode #15: block 8: comm syz.2.3951: unable to read itable block [ 149.190508][ C0] I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 149.200052][ C0] I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 149.209566][ C0] buffer_io_error: 18 callbacks suppressed [ 149.209586][ C0] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 149.223826][T16931] EXT4-fs (loop2): I/O error while writing superblock [ 149.232583][ C0] I/O error, dev loop2, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 2 [ 149.242239][ C0] I/O error, dev loop2, sector 18 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 149.251841][ C0] I/O error, dev loop2, sector 16 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 149.261435][T16931] EXT4-fs error (device loop2): ext4_get_inode_loc:4999: inode #15: block 8: comm syz.2.3951: unable to read itable block [ 149.276470][ C0] I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 149.286041][ C0] I/O error, dev loop2, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 149.295592][ C0] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 149.305467][T16931] EXT4-fs (loop2): I/O error while writing superblock [ 149.344332][ T3307] EXT4-fs error (device loop2): ext4_get_inode_loc:4999: inode #2: block 5: comm syz-executor: unable to read itable block [ 149.372554][ C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 149.381212][ T3307] EXT4-fs (loop2): I/O error while writing superblock [ 149.388098][ T3307] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: IO failure [ 149.433676][ C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 149.442425][ T3307] EXT4-fs (loop2): I/O error while writing superblock [ 149.449255][ T3307] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 149.468853][ C0] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 149.477257][ T3307] EXT4-fs (loop2): I/O error while writing superblock [ 149.945248][ T7512] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4984: inode #2: block 5: comm kworker/u8:20: unable to read itable block [ 149.978250][ C1] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 149.986661][ T7512] EXT4-fs (loop2): I/O error while writing superblock [ 150.003664][ T4664] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.024649][ C0] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 150.033302][ T4664] EXT4-fs (loop2): I/O error while writing superblock [ 150.399289][ T7519] team0: Port device geneve1 removed [ 150.451129][ T7519] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.469108][ T7519] bond_slave_0: left promiscuous mode [ 150.479480][ T7519] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.499774][ T7519] bond_slave_1: left promiscuous mode [ 150.505486][ T7519] $H (unregistering): Released all slaves [ 150.524453][ T7519] bond1 (unregistering): Released all slaves [ 150.565428][ T7519] hsr_slave_0: left promiscuous mode [ 150.581856][ T7519] hsr_slave_1: left promiscuous mode [ 150.587708][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.595290][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.625021][T17013] loop4: detected capacity change from 0 to 512 [ 150.647828][T17013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.660324][ T7519] team0 (unregistering): Port device team_slave_1 removed [ 150.696047][ T7519] team0 (unregistering): Port device team_slave_0 removed [ 150.706675][T13560] EXT4-fs error (device loop4): __ext4_iget:5464: inode #13: block 33024: comm syz-executor: invalid block [ 150.732161][T13560] EXT4-fs error (device loop4): __ext4_iget:5464: inode #13: block 33024: comm syz-executor: invalid block [ 150.772067][T17020] vhci_hcd: invalid port number 96 [ 150.777361][T17020] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 150.930724][T16990] chnl_net:caif_netlink_parms(): no params data found [ 151.018132][T16990] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.025271][T16990] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.044394][T16990] bridge_slave_0: entered allmulticast mode [ 151.083897][T16990] bridge_slave_0: entered promiscuous mode [ 151.090880][T16990] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.097963][T16990] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.105317][T16990] bridge_slave_1: entered allmulticast mode [ 151.111985][T16990] bridge_slave_1: entered promiscuous mode [ 151.146495][T16990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.170370][T16990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.229807][T16990] team0: Port device team_slave_0 added [ 151.244556][T16990] team0: Port device team_slave_1 added [ 151.274496][T16990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.281520][T16990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.307531][T16990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.319858][T16990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.326822][T16990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.352975][T16990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.385064][ T7519] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.468026][ T7519] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.485421][T16990] hsr_slave_0: entered promiscuous mode [ 151.491630][T16990] hsr_slave_1: entered promiscuous mode [ 151.497579][T16990] debugfs: 'hsr0' already exists in 'hsr' [ 151.503426][T16990] Cannot create hsr debugfs directory [ 151.531678][ T7519] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.585478][ T7519] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.658759][T16990] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 151.674026][T16990] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 151.689140][T16990] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 151.698235][T16990] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 151.715230][ T7519] bridge0: port 3(batadv0) entered disabled state [ 151.722436][ T7519] bridge_slave_1: left allmulticast mode [ 151.728099][ T7519] bridge_slave_1: left promiscuous mode [ 151.733842][ T7519] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.741960][ T7519] bridge_slave_0: left allmulticast mode [ 151.747611][ T7519] bridge_slave_0: left promiscuous mode [ 151.753330][ T7519] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.814579][ T7519] team0: Port device geneve1 removed [ 151.920551][ T7519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.930377][ T7519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.941066][ T7519] bond0 (unregistering): Released all slaves [ 151.949555][ T7519] bond1 (unregistering): Released all slaves [ 151.989806][T17285] chnl_net:caif_netlink_parms(): no params data found [ 152.004131][ T7519] hsr_slave_0: left promiscuous mode [ 152.010680][ T7519] hsr_slave_1: left promiscuous mode [ 152.016242][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.023654][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.031113][ T7519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.038524][ T7519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.049994][ T7519] veth1_macvtap: left promiscuous mode [ 152.055474][ T7519] veth0_macvtap: left promiscuous mode [ 152.061255][ T7519] veth1_vlan: left promiscuous mode [ 152.066616][ T7519] veth0_vlan: left promiscuous mode [ 152.127668][ T7519] team0 (unregistering): Port device team_slave_1 removed [ 152.137362][ T7519] team0 (unregistering): Port device team_slave_0 removed [ 152.202780][T17285] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.210074][T17285] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.217234][T17285] bridge_slave_0: entered allmulticast mode [ 152.223828][T17285] bridge_slave_0: entered promiscuous mode [ 152.231926][T17285] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.239078][T17285] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.246244][T17285] bridge_slave_1: entered allmulticast mode [ 152.252888][T17285] bridge_slave_1: entered promiscuous mode [ 152.274316][T17285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.284807][T17285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.308081][T17285] team0: Port device team_slave_0 added [ 152.314838][T17285] team0: Port device team_slave_1 added [ 152.325417][T16990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.344272][T17285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.351294][T17285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.377411][T17285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.389041][T17285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.396083][T17285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.422161][T17285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.457209][T17285] hsr_slave_0: entered promiscuous mode [ 152.463328][T17285] hsr_slave_1: entered promiscuous mode [ 152.477251][T16990] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.487466][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.494632][ T7525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.516930][ T7525] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.524098][ T7525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.589076][T17285] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 152.599240][T17285] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 152.609039][T17285] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 152.620160][T17285] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 152.654569][T16990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.672410][T17285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.686812][T17285] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.697657][ T7512] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.704800][ T7512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.717593][ T7512] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.724742][ T7512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.751333][T17285] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 152.761823][T17285] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 152.825089][T17285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.852099][T16990] veth0_vlan: entered promiscuous mode [ 152.861198][T16990] veth1_vlan: entered promiscuous mode [ 152.880001][T16990] veth0_macvtap: entered promiscuous mode [ 152.887677][T16990] veth1_macvtap: entered promiscuous mode [ 152.900151][T16990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.912802][T16990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.925719][ T7556] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.940122][ T7542] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.952567][ T7542] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.965436][ T7542] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.990012][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 152.990030][ T29] audit: type=1400 audit(1758491201.144:6699): avc: denied { add_name } for pid=16990 comm="syz-executor" name="syz6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 153.022051][ T29] audit: type=1400 audit(1758491201.144:6700): avc: denied { create } for pid=16990 comm="syz-executor" name="syz6" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 153.042711][ T29] audit: type=1400 audit(1758491201.144:6701): avc: denied { associate } for pid=16990 comm="syz-executor" name="syz6" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 153.057379][T17740] loop6: detected capacity change from 0 to 1024 [ 153.086872][T17740] EXT4-fs: Ignoring removed orlov option [ 153.090519][T17285] veth0_vlan: entered promiscuous mode [ 153.099426][T17746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3989'. [ 153.111981][T17740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.118626][ T29] audit: type=1326 audit(1758491201.264:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.5.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 153.132066][T17746] IPVS: Error connecting to the multicast addr [ 153.148218][ T29] audit: type=1326 audit(1758491201.264:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.5.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 153.160478][T17285] veth1_vlan: entered promiscuous mode [ 153.177678][ T29] audit: type=1326 audit(1758491201.264:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.5.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 153.192594][T17285] veth0_macvtap: entered promiscuous mode [ 153.206589][ T29] audit: type=1326 audit(1758491201.264:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.5.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 153.214240][T17285] veth1_macvtap: entered promiscuous mode [ 153.235852][ T29] audit: type=1326 audit(1758491201.264:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17744 comm="syz.5.3988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff45bbbec29 code=0x7ffc0000 [ 153.267421][T17285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.279964][T17285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.287942][ T29] audit: type=1400 audit(1758491201.414:6707): avc: denied { map } for pid=17739 comm="syz.6.3965" path="/0/bus/memory.events" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 153.302498][ T7542] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.319927][ T29] audit: type=1400 audit(1758491201.474:6708): avc: denied { cpu } for pid=17739 comm="syz.6.3965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 153.342876][ T7542] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.351749][ T7542] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.360879][ T7542] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.467283][T17758] loop5: detected capacity change from 0 to 8192 [ 153.547591][T16990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.659645][T17781] loop5: detected capacity change from 0 to 256 [ 153.697395][T17781] FAT-fs (loop5): codepage cp932 not found [ 153.997522][T17840] loop0: detected capacity change from 0 to 1024 [ 154.005513][T17840] EXT4-fs (loop0): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 154.023769][T17840] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 154.065444][T17840] EXT4-fs (loop0): orphan cleanup on readonly fs [ 154.086624][T17840] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 154.101301][T17840] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 154.140268][T17840] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096 [ 154.198233][T17840] EXT4-fs (loop0): Remounting filesystem read-only [ 154.203153][T17285] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 154.215735][T17285] CPU: 1 UID: 0 PID: 17285 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 154.215778][T17285] Tainted: [W]=WARN [ 154.215786][T17285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 154.215802][T17285] Call Trace: [ 154.215884][T17285] [ 154.215894][T17285] __dump_stack+0x1d/0x30 [ 154.215921][T17285] dump_stack_lvl+0xe8/0x140 [ 154.215946][T17285] dump_stack+0x15/0x1b [ 154.215971][T17285] dump_header+0x81/0x220 [ 154.216009][T17285] oom_kill_process+0x342/0x400 [ 154.216102][T17285] out_of_memory+0x979/0xb80 [ 154.216217][T17285] try_charge_memcg+0x5e6/0x9e0 [ 154.216257][T17285] charge_memcg+0x51/0xc0 [ 154.216277][T17285] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 154.216411][T17285] __read_swap_cache_async+0x1df/0x350 [ 154.216453][T17285] swap_cluster_readahead+0x376/0x3e0 [ 154.216492][T17285] swapin_readahead+0xde/0x6f0 [ 154.216585][T17285] ? __filemap_get_folio+0x4f7/0x6b0 [ 154.216609][T17285] ? __rcu_read_unlock+0x34/0x70 [ 154.216636][T17285] ? swap_cache_get_folio+0x77/0x200 [ 154.216705][T17285] do_swap_page+0x301/0x2430 [ 154.216735][T17285] ? finish_task_switch+0xad/0x2b0 [ 154.216760][T17285] ? __pfx_default_wake_function+0x10/0x10 [ 154.216861][T17285] handle_mm_fault+0x9a5/0x2c20 [ 154.216941][T17285] do_user_addr_fault+0x636/0x1090 [ 154.216982][T17285] ? fpregs_restore_userregs+0xe2/0x1d0 [ 154.217019][T17285] ? switch_fpu_return+0xe/0x20 [ 154.217046][T17285] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 154.217127][T17285] exc_page_fault+0x62/0xa0 [ 154.217218][T17285] asm_exc_page_fault+0x26/0x30 [ 154.217243][T17285] RIP: 0033:0x7f15011014a5 [ 154.217263][T17285] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d be 70 1e 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 154.217286][T17285] RSP: 002b:00007ffd47e28f28 EFLAGS: 00010246 [ 154.217306][T17285] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 00007f15011014a3 [ 154.217339][T17840] EXT4-fs (loop0): 1 orphan inode deleted [ 154.217382][T17285] RDX: 00007ffd47e28f40 RSI: 0000000000000000 RDI: 0000000000000000 [ 154.217395][T17285] RBP: 00007ffd47e28fac R08: 0000000008ea4337 R09: 0000000000000000 [ 154.217410][T17285] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 154.217428][T17285] R13: 00000000000927c0 R14: 000000000002576e R15: 00007ffd47e29000 [ 154.217521][T17285] [ 154.217553][T17285] memory: usage 307200kB, limit 307200kB, failcnt 213 [ 154.240257][T17840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 154.242862][T17285] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 154.481267][T17285] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 154.488595][T17285] Memory cgroup stats for /syz7: [ 154.489690][T17285] cache 0 [ 154.497648][T17285] rss 0 [ 154.500500][T17285] shmem 0 [ 154.503441][T17285] mapped_file 0 [ 154.506920][T17285] dirty 0 [ 154.509904][T17285] writeback 0 [ 154.513200][T17285] workingset_refault_anon 27 [ 154.517870][T17285] workingset_refault_file 0 [ 154.522397][T17285] swap 163840 [ 154.525839][T17285] swapcached 0 [ 154.529270][T17285] pgpgin 67 [ 154.532457][T17285] pgpgout 67 [ 154.537258][T17285] pgfault 98 [ 154.540538][T17285] pgmajfault 4 [ 154.543998][T17285] inactive_anon 0 [ 154.547673][T17285] active_anon 0 [ 154.551161][T17285] inactive_file 0 [ 154.554879][T17285] active_file 0 [ 154.558384][T17285] unevictable 0 [ 154.561852][T17285] hierarchical_memory_limit 314572800 [ 154.567216][T17285] hierarchical_memsw_limit 9223372036854771712 [ 154.573469][T17285] total_cache 0 [ 154.574461][T17865] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4011'. [ 154.577100][T17285] total_rss 0 [ 154.589501][T17285] total_shmem 0 [ 154.593032][T17285] total_mapped_file 0 [ 154.597061][T17285] total_dirty 0 [ 154.600592][T17285] total_writeback 0 [ 154.604401][T17285] total_workingset_refault_anon 28 [ 154.609556][T17285] total_workingset_refault_file 0 [ 154.614645][T17285] total_swap 172032 [ 154.618474][T17285] total_swapcached 0 [ 154.622387][T17285] total_pgpgin 70 [ 154.626021][T17285] total_pgpgout 70 [ 154.629763][T17285] total_pgfault 118 [ 154.633664][T17285] total_pgmajfault 12 [ 154.637694][T17285] total_inactive_anon 0 [ 154.641893][T17285] total_active_anon 0 [ 154.645873][T17285] total_inactive_file 0 [ 154.650034][T17285] total_active_file 0 [ 154.654011][T17285] total_unevictable 0 [ 154.658073][T17285] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7/syz1,task=syz.7.3978,pid=17752,uid=0 [ 154.673321][T17285] Memory cgroup out of memory: Killed process 17752 (syz.7.3978) total-vm:95868kB, anon-rss:1128kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 154.727242][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.895827][T17886] loop5: detected capacity change from 0 to 512 [ 154.903309][T17886] EXT4-fs: Ignoring removed bh option [ 154.909346][T17886] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 154.929785][T17886] EXT4-fs (loop5): 1 truncate cleaned up [ 154.946851][T17886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.959839][T17892] sd 0:0:1:0: device reset [ 155.005425][T17902] validate_nla: 3 callbacks suppressed [ 155.005442][T17902] netlink: 'syz.7.4026': attribute type 10 has an invalid length. [ 155.019434][T17902] ipvlan0: entered allmulticast mode [ 155.024935][T17902] veth0_vlan: entered allmulticast mode [ 155.032690][T17902] team0: Device ipvlan0 failed to register rx_handler [ 155.037445][T11754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.062104][T17906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4027'. [ 155.186733][T17929] loop7: detected capacity change from 0 to 512 [ 155.197249][T17939] openvswitch: netlink: Message has 6 unknown bytes. [ 155.227425][T17929] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 155.236511][T17929] EXT4-fs (loop7): orphan cleanup on readonly fs [ 155.244062][T17929] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 155.262669][T17929] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 155.267178][T17949] loop9: detected capacity change from 0 to 7 [ 155.278573][T17929] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4035: bg 0: block 40: padding at end of block bitmap is not set [ 155.305207][T17949] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.314273][T17929] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 155.322696][T17954] loop0: detected capacity change from 0 to 512 [ 155.339425][T17949] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.339639][T17929] EXT4-fs (loop7): 1 truncate cleaned up [ 155.347363][T17949] loop9: unable to read partition table [ 155.363510][T17929] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.384275][T17954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.411342][T17954] ext4 filesystem being mounted at /792/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.421417][T17959] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.432079][T17285] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.451790][T17949] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 155.451790][T17949] ) failed (rc=-5) [ 155.465150][T17954] loop0: detected capacity change from 512 to 64 [ 155.474216][T17954] EXT4-fs warning (device loop0): ext4_read_inode_bitmap:148: Cannot read inode bitmap - block_group = 0, inode_bitmap = 18 [ 155.534630][T17959] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.553840][ T3308] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /792/bus: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=2048 fake=0 [ 155.563674][T17959] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.617328][T17959] Buffer I/O error on dev loop9, logical block 0, async page read [ 155.662518][ T3883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.863385][ T7556] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.873291][ T7556] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.920958][ T7556] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.930876][ T7556] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.021048][ T7556] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.021522][T17921] syz.6.4033 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 156.030926][ T7556] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.041929][T17921] CPU: 1 UID: 0 PID: 17921 Comm: syz.6.4033 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.042041][T17921] Tainted: [W]=WARN [ 156.042051][T17921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 156.042068][T17921] Call Trace: [ 156.042078][T17921] [ 156.042088][T17921] __dump_stack+0x1d/0x30 [ 156.042119][T17921] dump_stack_lvl+0xe8/0x140 [ 156.042147][T17921] dump_stack+0x15/0x1b [ 156.042240][T17921] dump_header+0x81/0x220 [ 156.042315][T17921] oom_kill_process+0x342/0x400 [ 156.042362][T17921] out_of_memory+0x979/0xb80 [ 156.042409][T17921] try_charge_memcg+0x5e6/0x9e0 [ 156.042453][T17921] charge_memcg+0x51/0xc0 [ 156.042480][T17921] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 156.042605][T17921] __read_swap_cache_async+0x1df/0x350 [ 156.042655][T17921] swap_cluster_readahead+0x376/0x3e0 [ 156.042758][T17921] swapin_readahead+0xde/0x6f0 [ 156.042839][T17921] ? __filemap_get_folio+0x4f7/0x6b0 [ 156.042865][T17921] ? __rcu_read_unlock+0x34/0x70 [ 156.042925][T17921] ? swap_cache_get_folio+0x77/0x200 [ 156.042979][T17921] do_swap_page+0x301/0x2430 [ 156.043079][T17921] ? css_rstat_updated+0xb7/0x240 [ 156.043121][T17921] ? __pfx_default_wake_function+0x10/0x10 [ 156.043156][T17921] handle_mm_fault+0x9a5/0x2c20 [ 156.043204][T17921] do_user_addr_fault+0x636/0x1090 [ 156.043278][T17921] exc_page_fault+0x62/0xa0 [ 156.043319][T17921] asm_exc_page_fault+0x26/0x30 [ 156.043359][T17921] RIP: 0033:0x7f974cc0ec3b [ 156.043381][T17921] Code: 74 28 25 ff 0f 00 00 83 f0 3d 8d 04 c0 89 c5 c1 ed 04 31 c5 69 ed 2d eb d4 27 89 e8 c1 e8 0f 31 c5 81 e5 ff 0f 00 00 48 31 d5 <80> 3d 06 34 36 00 00 0f 84 a8 00 00 00 4c 89 f6 48 8b 0d e6 33 36 [ 156.043405][T17921] RSP: 002b:00007ffc32e2b6a0 EFLAGS: 00010286 [ 156.043428][T17921] RAX: 0000000000018f3f RBX: 00007f974daa5720 RCX: 00000000000468e5 [ 156.043445][T17921] RDX: ffffffff818a06eb RSI: ffffffff818a01f5 RDI: 0000000000000005 [ 156.043463][T17921] RBP: ffffffff818a0cfa R08: 00007f974cf76038 R09: 00007f974cf62000 [ 156.043480][T17921] R10: 00007f974c797008 R11: 0000000000000005 R12: 0000000000000005 [ 156.043565][T17921] R13: 0000000000000a10 R14: ffffffff818a06eb R15: 00000000000468e5 [ 156.043583][T17921] ? swap_writeout+0x41b/0x6c0 [ 156.043680][T17921] ? __swap_writepage+0x35a/0xd20 [ 156.043721][T17921] ? swap_writeout+0x41b/0x6c0 [ 156.043806][T17921] ? generic_swapfile_activate+0x375/0x440 [ 156.043885][T17921] [ 156.043895][T17921] memory: usage 307200kB, limit 307200kB, failcnt 265 [ 156.291448][T17921] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 156.299355][T17921] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 156.306653][T17921] Memory cgroup stats for /syz6: [ 156.306981][T17921] cache 0 [ 156.314990][T17921] rss 0 [ 156.317802][T17921] shmem 0 [ 156.320799][T17921] mapped_file 0 [ 156.324269][T17921] dirty 0 [ 156.327214][T17921] writeback 0 [ 156.330552][T17921] workingset_refault_anon 83 [ 156.335157][T17921] workingset_refault_file 0 [ 156.339788][T17921] swap 188416 [ 156.343172][T17921] swapcached 0 [ 156.346598][T17921] pgpgin 430 [ 156.349829][T17921] pgpgout 430 [ 156.353123][T17921] pgfault 655 [ 156.356418][T17921] pgmajfault 4 [ 156.359877][T17921] inactive_anon 0 [ 156.363571][T17921] active_anon 0 [ 156.367041][T17921] inactive_file 0 [ 156.370770][T17921] active_file 0 [ 156.374287][T17921] unevictable 0 [ 156.377834][T17921] hierarchical_memory_limit 314572800 [ 156.383320][T17921] hierarchical_memsw_limit 9223372036854771712 [ 156.389592][T17921] total_cache 0 [ 156.393070][T17921] total_rss 0 [ 156.396383][T17921] total_shmem 0 [ 156.399931][T17921] total_mapped_file 0 [ 156.404017][T17921] total_dirty 0 [ 156.407481][T17921] total_writeback 0 [ 156.411395][T17921] total_workingset_refault_anon 87 [ 156.416537][T17921] total_workingset_refault_file 0 [ 156.421816][T17921] total_swap 196608 [ 156.425636][T17921] total_swapcached 0 [ 156.429730][T17921] total_pgpgin 436 [ 156.433459][T17921] total_pgpgout 436 [ 156.437291][T17921] total_pgfault 746 [ 156.441247][T17921] total_pgmajfault 55 [ 156.445236][T17921] total_inactive_anon 0 [ 156.449471][T17921] total_active_anon 0 [ 156.453464][T17921] total_inactive_file 0 [ 156.457674][T17921] total_active_file 0 [ 156.461753][T17921] total_unevictable 0 [ 156.465857][T17921] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6/syz1,task=syz.6.4033,pid=17921,uid=0 [ 156.481164][T17921] Memory cgroup out of memory: Killed process 17921 (syz.6.4033) total-vm:95940kB, anon-rss:1072kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 156.485686][T17990] chnl_net:caif_netlink_parms(): no params data found [ 156.567387][ T7556] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.577297][ T7556] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.619013][T18122] loop3: detected capacity change from 0 to 512 [ 156.638378][T18122] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 156.667711][T17990] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.674878][T17990] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.690919][T17990] bridge_slave_0: entered allmulticast mode [ 156.697171][T18122] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 156.716367][T18122] System zones: 0-2, 18-18, 34-34 [ 156.721701][T17990] bridge_slave_0: entered promiscuous mode [ 156.733538][T18122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.738130][T17990] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.753262][T17990] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.761332][T17990] bridge_slave_1: entered allmulticast mode [ 156.768083][T17990] bridge_slave_1: entered promiscuous mode [ 156.794731][T18122] ext4 filesystem being mounted at /793/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.814782][ T7556] bridge0: port 1(batadv0) entered disabled state [ 156.906704][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4065'. [ 156.915958][T18211] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4065'. [ 156.930505][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.950905][ T7556] team0: Port device geneve1 removed [ 156.966595][T18218] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 157.029029][ T7525] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 157.090559][ T7556] bond0 (unregistering): Released all slaves [ 157.099457][ T7556] bond1 (unregistering): Released all slaves [ 157.108376][ T7556] bond2 (unregistering): Released all slaves [ 157.117925][T17990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.132636][T17990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.162208][ T7556] tipc: Disabling bearer [ 157.167258][ T7556] tipc: Left network mode [ 157.175678][T17990] team0: Port device team_slave_0 added [ 157.182546][T17990] team0: Port device team_slave_1 added [ 157.201927][ T7556] batman_adv: batadv0: Interface deactivated: dummy0 [ 157.208711][ T7556] batman_adv: batadv0: Removing interface: dummy0 [ 157.217546][ T7556] veth1_macvtap: left promiscuous mode [ 157.223738][ T7556] veth0_macvtap: left promiscuous mode [ 157.229511][ T7556] veth1_vlan: left promiscuous mode [ 157.234773][ T7556] veth0_vlan: left promiscuous mode [ 157.318057][T17990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.325019][T17990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.350957][T17990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.362254][T17990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.369282][T17990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.395281][T17990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.426926][T17990] hsr_slave_0: entered promiscuous mode [ 157.432949][T17990] hsr_slave_1: entered promiscuous mode [ 157.438849][T17990] debugfs: 'hsr0' already exists in 'hsr' [ 157.444574][T17990] Cannot create hsr debugfs directory [ 157.513294][T17990] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 157.522328][T17990] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 157.531796][T17990] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 157.541131][T17990] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 157.575920][T17990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.589389][T17990] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.599520][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.606616][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.619491][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.626582][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.636794][ T7556] IPVS: stop unused estimator thread 0... [ 157.694333][T17990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.798218][T17990] veth0_vlan: entered promiscuous mode [ 157.805913][T17990] veth1_vlan: entered promiscuous mode [ 157.819217][T17990] veth0_macvtap: entered promiscuous mode [ 157.829015][T17990] veth1_macvtap: entered promiscuous mode [ 157.839364][T17990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.849071][T17990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.859770][ T7556] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.872879][ T7556] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.882150][ T7556] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.891255][ T7556] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.942630][T18398] loop6: detected capacity change from 0 to 1024 [ 157.968076][T18398] EXT4-fs: Ignoring removed orlov option [ 157.990931][T18398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.008009][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 158.008029][ T29] audit: type=1400 audit(1758491206.165:6886): avc: denied { read } for pid=18405 comm="syz.5.4072" path="socket:[38354]" dev="sockfs" ino=38354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.039524][T18397] loop3: detected capacity change from 0 to 8192 [ 158.066585][ T29] audit: type=1400 audit(1758491206.205:6887): avc: denied { mount } for pid=18395 comm="syz.3.4081" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 158.108497][ T29] audit: type=1400 audit(1758491206.255:6888): avc: denied { mounton } for pid=18405 comm="syz.5.4072" path="/256/file0" dev="tmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 158.218347][T18420] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4074'. [ 158.269083][T18422] 9pnet: p9_errstr2errno: server reported unknown error [ 158.447057][T18428] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4078'. [ 158.519957][T18430] loop5: detected capacity change from 0 to 512 [ 158.555236][T18430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.570120][T16990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.592705][T18430] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.619123][ T29] audit: type=1400 audit(1758491206.775:6889): avc: denied { execute } for pid=18429 comm="syz.5.4083" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.641725][ T29] audit: type=1400 audit(1758491206.775:6890): avc: denied { read open } for pid=18429 comm="syz.5.4083" path="/262/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.665590][ T29] audit: type=1400 audit(1758491206.775:6891): avc: denied { execute_no_trans } for pid=18429 comm="syz.5.4083" path="/262/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 158.775106][T11754] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.959861][ T29] audit: type=1400 audit(1758491207.115:6892): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 159.008716][T18446] netlink: 'syz.8.4086': attribute type 10 has an invalid length. [ 159.020356][T18446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.031858][T18452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.032093][ T29] audit: type=1400 audit(1758491207.185:6893): avc: denied { ioctl } for pid=18451 comm="syz.7.4088" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 159.042152][T18446] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 159.074275][T18452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.083048][T18455] netlink: 'syz.8.4086': attribute type 10 has an invalid length. [ 159.091038][T18455] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4086'. [ 159.100222][T18455] batadv0: entered promiscuous mode [ 159.105458][T18455] batadv0: entered allmulticast mode [ 159.111668][T18455] bond0: (slave batadv0): Releasing backup interface [ 159.120579][T18455] bridge0: port 3(batadv0) entered blocking state [ 159.127131][T18455] bridge0: port 3(batadv0) entered disabled state [ 159.173211][ T29] audit: type=1400 audit(1758491207.325:6894): avc: denied { create } for pid=18458 comm="syz.8.4089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 159.198999][ T29] audit: type=1400 audit(1758491207.325:6895): avc: denied { write } for pid=18458 comm="syz.8.4089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 159.587960][ T51] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 159.597267][ T51] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 159.634815][T18479] loop7: detected capacity change from 0 to 1024 [ 159.642831][T18479] EXT4-fs: Ignoring removed orlov option [ 159.663372][T18479] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.689834][T18477] loop6: detected capacity change from 0 to 8192 [ 160.205107][T17285] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.233074][T18496] netlink: 'syz.7.4102': attribute type 10 has an invalid length. [ 160.244082][T18496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.252889][T18496] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 160.272238][T18496] netlink: 'syz.7.4102': attribute type 10 has an invalid length. [ 160.280177][T18496] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4102'. [ 160.289447][T18496] batadv0: entered promiscuous mode [ 160.294693][T18496] batadv0: entered allmulticast mode [ 160.301708][T18496] bond0: (slave batadv0): Releasing backup interface [ 160.323975][T18496] bridge0: port 3(batadv0) entered blocking state [ 160.330516][T18496] bridge0: port 3(batadv0) entered disabled state [ 160.436780][T18505] netlink: 'syz.8.4106': attribute type 4 has an invalid length. [ 160.471853][T18505] netlink: 'syz.8.4106': attribute type 4 has an invalid length. [ 160.520512][T18474] syz.3.4098 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 160.531556][T18474] CPU: 0 UID: 0 PID: 18474 Comm: syz.3.4098 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.531591][T18474] Tainted: [W]=WARN [ 160.531597][T18474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 160.531610][T18474] Call Trace: [ 160.531630][T18474] [ 160.531639][T18474] __dump_stack+0x1d/0x30 [ 160.531661][T18474] dump_stack_lvl+0xe8/0x140 [ 160.531748][T18474] dump_stack+0x15/0x1b [ 160.531763][T18474] dump_header+0x81/0x220 [ 160.531803][T18474] oom_kill_process+0x342/0x400 [ 160.531852][T18474] out_of_memory+0x979/0xb80 [ 160.531897][T18474] try_charge_memcg+0x5e6/0x9e0 [ 160.531936][T18474] charge_memcg+0x51/0xc0 [ 160.531958][T18474] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 160.531981][T18474] __read_swap_cache_async+0x1df/0x350 [ 160.532149][T18474] swap_cluster_readahead+0x376/0x3e0 [ 160.532188][T18474] swapin_readahead+0xde/0x6f0 [ 160.532227][T18474] ? __filemap_get_folio+0x4f7/0x6b0 [ 160.532249][T18474] ? __rcu_read_unlock+0x34/0x70 [ 160.532343][T18474] ? swap_cache_get_folio+0x77/0x200 [ 160.532382][T18474] do_swap_page+0x301/0x2430 [ 160.532410][T18474] ? css_rstat_updated+0xb7/0x240 [ 160.532497][T18474] ? __pfx_default_wake_function+0x10/0x10 [ 160.532529][T18474] handle_mm_fault+0x9a5/0x2c20 [ 160.532634][T18474] do_user_addr_fault+0x636/0x1090 [ 160.532736][T18474] exc_page_fault+0x62/0xa0 [ 160.532769][T18474] asm_exc_page_fault+0x26/0x30 [ 160.532793][T18474] RIP: 0033:0x7fef5a8cda2c [ 160.532813][T18474] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 160.532836][T18474] RSP: 002b:00007fffee827f88 EFLAGS: 00010246 [ 160.532855][T18474] RAX: 0000000000000000 RBX: 00007fef5b785720 RCX: 0000000000000000 [ 160.532927][T18474] RDX: 00000000000002c4 RSI: ffffffff844aa2c4 RDI: 0000000000000005 [ 160.532941][T18474] RBP: ffffffff844aa2c4 R08: 00007fef5ac40000 R09: 00007fef5ac42000 [ 160.532953][T18474] R10: 00000000844aa2c8 R11: 0000000000000005 R12: 0000000000000005 [ 160.532964][T18474] R13: 0000000000000015 R14: ffffffff844aa021 R15: 0000000000000015 [ 160.532978][T18474] ? ____sys_sendmsg+0x31/0x4e0 [ 160.533024][T18474] ? ____sys_sendmsg+0x2d4/0x4e0 [ 160.533065][T18474] ? ____sys_sendmsg+0x2d4/0x4e0 [ 160.533144][T18474] [ 160.533152][T18474] memory: usage 307200kB, limit 307200kB, failcnt 626 [ 160.738949][ T51] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 160.743407][T18474] memory+swap: usage 307636kB, limit 9007199254740988kB, failcnt 0 [ 160.748282][ T51] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 160.753184][T18474] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 160.801434][T18474] Memory cgroup stats for /syz3: [ 160.801781][T18474] cache 0 [ 160.809754][T18474] rss 0 [ 160.812577][T18474] shmem 0 [ 160.815521][T18474] mapped_file 0 [ 160.819034][T18474] dirty 0 [ 160.821977][T18474] writeback 0 [ 160.825276][T18474] workingset_refault_anon 184 [ 160.830000][T18474] workingset_refault_file 1557 [ 160.834802][T18474] swap 438272 [ 160.838099][T18474] swapcached 0 [ 160.841464][T18474] pgpgin 124664 [ 160.844987][T18474] pgpgout 124662 [ 160.848600][T18474] pgfault 155034 [ 160.852209][T18474] pgmajfault 84 [ 160.855738][T18474] inactive_anon 0 [ 160.859458][T18474] active_anon 0 [ 160.862991][T18474] inactive_file 0 [ 160.866620][T18474] active_file 8192 [ 160.870376][T18474] unevictable 0 [ 160.873841][T18474] hierarchical_memory_limit 314572800 [ 160.879373][T18474] hierarchical_memsw_limit 9223372036854771712 [ 160.885537][T18474] total_cache 0 [ 160.889037][T18474] total_rss 0 [ 160.892354][T18474] total_shmem 0 [ 160.895810][T18474] total_mapped_file 0 [ 160.899829][T18474] total_dirty 0 [ 160.903292][T18474] total_writeback 0 [ 160.907107][T18474] total_workingset_refault_anon 186 [ 160.912491][T18474] total_workingset_refault_file 1557 [ 160.917798][T18474] total_swap 446464 [ 160.921630][T18474] total_swapcached 0 [ 160.925532][T18474] total_pgpgin 124670 [ 160.929595][T18474] total_pgpgout 124668 [ 160.933703][T18474] total_pgfault 155102 [ 160.937798][T18474] total_pgmajfault 114 [ 160.941962][T18474] total_inactive_anon 0 [ 160.946108][T18474] total_active_anon 0 [ 160.950106][T18474] total_inactive_file 0 [ 160.954280][T18474] total_active_file 8192 [ 160.958643][T18474] total_unevictable 0 [ 160.962645][T18474] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3/syz1,task=syz.3.4098,pid=18474,uid=0 [ 160.977949][T18474] Memory cgroup out of memory: Killed process 18474 (syz.3.4098) total-vm:95940kB, anon-rss:1072kB, file-rss:22192kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 161.070190][T18510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.079547][T18510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.170293][T18520] netlink: zone id is out of range [ 161.175693][T18520] netlink: zone id is out of range [ 161.184864][T18520] netlink: zone id is out of range [ 161.269870][T18527] netlink: 360 bytes leftover after parsing attributes in process `syz.8.4121'. [ 161.304208][T18533] loop8: detected capacity change from 0 to 1024 [ 161.315520][T18536] netlink: 'syz.5.4114': attribute type 12 has an invalid length. [ 161.324730][T18533] EXT4-fs: Ignoring removed orlov option [ 161.349148][T18541] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4116'. [ 161.362080][T18533] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.626218][T18552] netlink: 'syz.6.4118': attribute type 10 has an invalid length. [ 161.639454][T18551] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=100 sclass=netlink_audit_socket pid=18551 comm=syz.3.4131 [ 161.663355][T18552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.677183][T18553] netlink: 'syz.6.4118': attribute type 10 has an invalid length. [ 161.677989][T18552] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 161.685381][T18553] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4118'. [ 161.707546][T18553] batadv0: entered promiscuous mode [ 161.712804][T18553] batadv0: entered allmulticast mode [ 161.724181][T18553] bond0: (slave batadv0): Releasing backup interface [ 161.740190][T18553] bridge0: port 3(batadv0) entered blocking state [ 161.746710][T18553] bridge0: port 3(batadv0) entered disabled state [ 161.758649][ T7525] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 161.767953][ T7525] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 161.790951][T17990] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.814050][T18557] openvswitch: netlink: Message has 6 unknown bytes. [ 161.898033][T18561] loop8: detected capacity change from 0 to 8192 [ 161.908905][T18566] loop6: detected capacity change from 0 to 512 [ 161.921069][T18566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.960762][T18566] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.996931][T16990] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.164258][T18584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.183205][T18582] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4132'. [ 162.196738][T18584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.304902][T18592] loop7: detected capacity change from 0 to 1024 [ 162.311978][T18592] EXT4-fs: Ignoring removed orlov option [ 162.327053][T18592] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.553785][T18613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4140'. [ 162.820228][T18626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4144'. [ 162.832955][T18554] syz.3.4120 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 162.844190][T18554] CPU: 1 UID: 0 PID: 18554 Comm: syz.3.4120 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 162.844270][T18554] Tainted: [W]=WARN [ 162.844276][T18554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 162.844289][T18554] Call Trace: [ 162.844297][T18554] [ 162.844305][T18554] __dump_stack+0x1d/0x30 [ 162.844326][T18554] dump_stack_lvl+0xe8/0x140 [ 162.844351][T18554] dump_stack+0x15/0x1b [ 162.844452][T18554] dump_header+0x81/0x220 [ 162.844546][T18554] oom_kill_process+0x342/0x400 [ 162.844588][T18554] out_of_memory+0x979/0xb80 [ 162.844621][T18554] try_charge_memcg+0x5e6/0x9e0 [ 162.844717][T18554] charge_memcg+0x51/0xc0 [ 162.844741][T18554] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 162.844771][T18554] __read_swap_cache_async+0x1df/0x350 [ 162.844808][T18554] swap_cluster_readahead+0x277/0x3e0 [ 162.844927][T18554] swapin_readahead+0xde/0x6f0 [ 162.845038][T18554] ? __filemap_get_folio+0x4f7/0x6b0 [ 162.845057][T18554] ? __rcu_read_unlock+0x34/0x70 [ 162.845079][T18554] ? swap_cache_get_folio+0x77/0x200 [ 162.845172][T18554] do_swap_page+0x301/0x2430 [ 162.845212][T18554] ? css_rstat_updated+0xb7/0x240 [ 162.845288][T18554] ? __pfx_default_wake_function+0x10/0x10 [ 162.845315][T18554] handle_mm_fault+0x9a5/0x2c20 [ 162.845430][T18554] do_user_addr_fault+0x636/0x1090 [ 162.845479][T18554] exc_page_fault+0x62/0xa0 [ 162.845516][T18554] asm_exc_page_fault+0x26/0x30 [ 162.845537][T18554] RIP: 0033:0x7fef5a8eec04 [ 162.845556][T18554] Code: 82 b5 03 00 00 c6 44 24 1e 01 45 31 ff 45 31 f6 44 0f b6 e6 85 c0 0f 84 9e 00 00 00 44 89 f9 49 8b 50 40 4c 89 f0 49 03 14 ca <80> 3d 9d 91 36 00 00 49 89 d6 48 89 d5 74 28 25 ff 0f 00 00 83 f0 [ 162.845676][T18554] RSP: 002b:00007fffee827f90 EFLAGS: 00010282 [ 162.845694][T18554] RAX: ffffffff81515978 RBX: 00007fef5b785720 RCX: 00000000000557e1 [ 162.845706][T18554] RDX: ffffffff81515edf RSI: ffffffff81515cb8 RDI: 0000000000000005 [ 162.845718][T18554] RBP: ffffffff81515cb8 R08: 00007fef5ac56038 R09: 00007fef5ac42000 [ 162.845730][T18554] R10: 00007fef5a47f008 R11: 0000000000000005 R12: 0000000000000005 [ 162.845741][T18554] R13: 00000000000009da R14: ffffffff81515978 R15: 00000000000557e1 [ 162.845756][T18554] ? smp_call_function_many_cond+0x7f8/0xc60 [ 162.845784][T18554] ? smp_call_function_many_cond+0xb38/0xc60 [ 162.845809][T18554] ? smp_call_function_many_cond+0x7f8/0xc60 [ 162.845836][T18554] ? on_each_cpu_cond_mask+0x5f/0x80 [ 162.845861][T18554] ? smp_call_function_many_cond+0xb38/0xc60 [ 162.845898][T18554] [ 162.845905][T18554] memory: usage 307200kB, limit 307200kB, failcnt 1049 [ 163.096578][T18554] memory+swap: usage 307632kB, limit 9007199254740988kB, failcnt 0 [ 163.104564][T18554] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 163.112015][T18554] Memory cgroup stats for /syz3: [ 163.113448][T17285] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.134306][T18554] cache 0 [ 163.137443][T18554] rss 0 [ 163.140334][T18554] shmem 0 [ 163.143311][T18554] mapped_file 0 [ 163.146843][T18554] dirty 0 [ 163.149843][T18554] writeback 0 [ 163.153450][T18554] workingset_refault_anon 237 [ 163.158214][T18554] workingset_refault_file 2108 [ 163.162986][T18554] swap 434176 [ 163.166286][T18554] swapcached 4096 [ 163.169985][T18554] pgpgin 125448 [ 163.173460][T18554] pgpgout 125445 [ 163.177092][T18554] pgfault 155508 [ 163.180680][T18554] pgmajfault 103 [ 163.184255][T18554] inactive_anon 0 [ 163.187926][T18554] active_anon 4096 [ 163.191716][T18554] inactive_file 0 [ 163.195361][T18554] active_file 8192 [ 163.199110][T18554] unevictable 0 [ 163.202598][T18554] hierarchical_memory_limit 314572800 [ 163.208014][T18554] hierarchical_memsw_limit 9223372036854771712 [ 163.214182][T18554] total_cache 0 [ 163.217897][T18554] total_rss 0 [ 163.221187][T18554] total_shmem 0 [ 163.224659][T18554] total_mapped_file 0 [ 163.228816][T18554] total_dirty 0 [ 163.232341][T18554] total_writeback 0 [ 163.236253][T18554] total_workingset_refault_anon 240 [ 163.241598][T18554] total_workingset_refault_file 2108 [ 163.246976][T18554] total_swap 442368 [ 163.250833][T18554] total_swapcached 4096 [ 163.255031][T18554] total_pgpgin 125457 [ 163.259053][T18554] total_pgpgout 125454 [ 163.263133][T18554] total_pgfault 155634 [ 163.267257][T18554] total_pgmajfault 161 [ 163.271330][T18554] total_inactive_anon 0 [ 163.275497][T18554] total_active_anon 4096 [ 163.279860][T18554] total_inactive_file 0 [ 163.284053][T18554] total_active_file 8192 [ 163.288472][T18554] total_unevictable 0 [ 163.292541][T18554] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3/syz1,task=syz.3.4120,pid=18554,uid=0 [ 163.307751][T18554] Memory cgroup out of memory: Killed process 18554 (syz.3.4120) total-vm:95940kB, anon-rss:1068kB, file-rss:22020kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 163.428092][T18644] syzkaller1: entered promiscuous mode [ 163.433681][T18644] syzkaller1: entered allmulticast mode [ 163.471505][T18644] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 163.492236][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 163.492255][ T29] audit: type=1400 audit(1758491211.645:6943): avc: denied { connect } for pid=18650 comm="syz.8.4150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 163.565378][T18655] syz_tun: entered allmulticast mode [ 163.571724][T18655] syz_tun: left allmulticast mode [ 163.623158][T18666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.632442][T18666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.770038][T18674] loop7: detected capacity change from 0 to 8192 [ 163.785569][ T29] audit: type=1326 audit(1758491211.935:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18684 comm="syz.6.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974cd2ec29 code=0x7ffc0000 [ 163.809303][ T29] audit: type=1326 audit(1758491211.935:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18684 comm="syz.6.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974cd2ec29 code=0x7ffc0000 [ 163.884277][ T29] audit: type=1326 audit(1758491211.995:6946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18684 comm="syz.6.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f974cd2ec29 code=0x7ffc0000 [ 163.908079][ T29] audit: type=1326 audit(1758491211.995:6947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18684 comm="syz.6.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974cd2ec29 code=0x7ffc0000 [ 163.931878][ T29] audit: type=1326 audit(1758491211.995:6948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18684 comm="syz.6.4157" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f974cd2ec29 code=0x7ffc0000 [ 164.002066][T18703] random: crng reseeded on system resumption [ 164.030312][ T7512] ================================================================== [ 164.035898][ T29] audit: type=1400 audit(1758491212.155:6949): avc: denied { write } for pid=18702 comm="syz.6.4170" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 164.038448][ T7512] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 164.038489][ T7512] [ 164.038494][ T7512] write to 0xffff888154b1f3ce of 2 bytes by task 18674 on cpu 1: [ 164.038510][ T7512] fat16_ent_put+0x28/0x60 [ 164.038530][ T7512] fat_alloc_clusters+0x4d1/0xa80 [ 164.061707][ T29] audit: type=1400 audit(1758491212.155:6950): avc: denied { open } for pid=18702 comm="syz.6.4170" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 164.069844][ T7512] fat_get_block+0x258/0x5e0 [ 164.069871][ T7512] __block_write_begin_int+0x3fd/0xf90 [ 164.072265][ T29] audit: type=1400 audit(1758491212.175:6951): avc: denied { firmware_load } for pid=51 comm="kworker/u8:3" path="/lib/firmware/regulatory.db.p7s" dev="sda1" ino=449 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 164.080170][ T7512] cont_write_begin+0x5fc/0x970 [ 164.080200][ T7512] fat_write_begin+0x4f/0xe0 [ 164.080227][ T7512] generic_perform_write+0x184/0x490 [ 164.084629][ T29] audit: type=1400 audit(1758491212.175:6952): avc: denied { firmware_load } for pid=7556 comm="kworker/u8:56" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 164.089639][ T7512] __generic_file_write_iter+0xec/0x120 [ 164.089670][ T7512] generic_file_write_iter+0x8d/0x2f0 [ 164.198944][ T7512] vfs_write+0x527/0x960 [ 164.203219][ T7512] ksys_write+0xda/0x1a0 [ 164.207485][ T7512] __x64_sys_write+0x40/0x50 [ 164.212096][ T7512] x64_sys_call+0x27fe/0x2ff0 [ 164.216806][ T7512] do_syscall_64+0xd2/0x200 [ 164.221347][ T7512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.227267][ T7512] [ 164.229605][ T7512] read to 0xffff888154b1f200 of 512 bytes by task 7512 on cpu 0: [ 164.237333][ T7512] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 164.243257][ T7512] generic_perform_write+0x2c2/0x490 [ 164.248581][ T7512] shmem_file_write_iter+0xc5/0xf0 [ 164.253718][ T7512] lo_rw_aio+0x69d/0x760 [ 164.257976][ T7512] loop_process_work+0x52d/0xa60 [ 164.262926][ T7512] loop_workfn+0x31/0x40 [ 164.267178][ T7512] process_scheduled_works+0x4cb/0x9d0 [ 164.272658][ T7512] worker_thread+0x582/0x770 [ 164.277267][ T7512] kthread+0x489/0x510 [ 164.281349][ T7512] ret_from_fork+0x11f/0x1b0 [ 164.285950][ T7512] ret_from_fork_asm+0x1a/0x30 [ 164.290724][ T7512] [ 164.293058][ T7512] Reported by Kernel Concurrency Sanitizer on: [ 164.299321][ T7512] CPU: 0 UID: 0 PID: 7512 Comm: kworker/u8:20 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 164.310944][ T7512] Tainted: [W]=WARN [ 164.314746][ T7512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 164.324811][ T7512] Workqueue: loop7 loop_workfn [ 164.329587][ T7512] ================================================================== [ 164.763413][T18693] syz.5.4165 (18693) used greatest stack depth: 6136 bytes left