last executing test programs: 1m3.7248191s ago: executing program 1 (id=155): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000500)={0x7, 0x9dc5, 0x105, 0x0, 0x6}) 1m3.625452763s ago: executing program 1 (id=159): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 1m3.481953614s ago: executing program 1 (id=165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1m3.395685406s ago: executing program 1 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc4) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) 1m3.337969497s ago: executing program 1 (id=172): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0x2, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff}, {0x0, 0x3}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0xfffffffc, 0x200}, {}, {}, {0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x200007}, {0x0, 0x2}, {}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x9, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800}, {}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {0x5}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 1m3.084105651s ago: executing program 1 (id=175): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000340)=""/193, 0xc1}], 0x1, 0x0, 0x0) 1m3.067946971s ago: executing program 32 (id=175): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000340)=""/193, 0xc1}], 0x1, 0x0, 0x0) 49.927261133s ago: executing program 4 (id=612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000400)=[{r0, 0x40}], 0x1, 0x3) 49.780851176s ago: executing program 4 (id=619): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xffffffffffffffad, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0x6d56, 0x4000}, 0x0, 0x0) 49.730428087s ago: executing program 4 (id=624): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020025797a31000000000900010073797a3000000000080005400000001c"], 0xe8}}, 0x0) 49.657957568s ago: executing program 4 (id=629): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000002c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x1, 0x518, &(0x7f0000000ac0)="$eJzs3c9vI1cdAPCvZ+PEyaZNWnoARNulLSxotU7ibaOqBygnhFAlRI9FSkPiRFHsOIqd0oQ9pGeuSFTiBEf+AM49IXHkguDGpRyQ+BGBGiQORjOeZL1Zu4k2iR3Fn480mvfmeef7fZud99YviV8AI+tORBxExHhEvB8RM/n1Qn7E250jfd1nhw9Xjg4frhSi3X73n4WsPb0WXX8mdTu/ZykifvjdiB8Xnozb3NvfXK7Vqjt5fa5V355r7u3f36gvr1fXq1uVyuLC4vybD96oXFpfX66P56UXP/3DwTd/mqY1nV/p7sdl6nS9eBInNRYR37+KYENwK+/P+LAT4akkEfF8RLySPf8zcSv7agIAN1m7PRPtme46AHDTJdkaWCEp52sB05Ek5XJnDe+FmEpqjWbr3lpjd2u1s1Y2G8VkbaNWnc/XCmejWEjrC1n5Ub1yqv4gIp6LiJ9PTGb18kqjtjrM//gAwAi7fWr+/89EZ/4/04tLA8gOALgypWEnAAAMnPkfAEaP+R8ARo/5HwBGT2f+nxx2GgDAAHn/DwCjx/wPACPlB++8kx7to/zzr1c/2NvdbHxwf7Xa3CzXd1fKK42d7fJ6o7GefWZP/az71RqN7YXXY/fD2W9tN1tzzb39pXpjd6u1lH2u91K1mL3qYAA9AwD6ee7lT/5cSGfktyazI7r2cigONTPgqiXDTgAYmlvDTgAYGrt9wei6wHt8ywNwQ/TYovcxpV6/INRut9tXlxJwxe5+yfo/jKqu9X8/BQwjxvo/jC7r/zC62u3Ceff8j/O+EAC43qzxA32+//98fv5N/s2BH62efsXHV5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG/H+/+W873ApyNJyuWIZyJiNoqFtY1adT4ino2IP00UJ9L6wpBzBgAuKvlbId//6+7Ma9OPNb10+6Q4HhE/+eW7v/hwudXa+WPEeOFfE8fXWx/n1yuDzx4AONvxPJ2du97If3b4cOX4GGQ+f/9ORJQ68Y8Ox+PoJP5YjGXnUhQjYurfhbzeUehau7iIg48i4ou9+l+I6WwNpLPz6en4aexnBho/eSx+krV1zunfxRcuIRcYNZ+k48/bvZ6/JO5k597PfykboS4uH//SW60cZWPgo/jH49+tPuPfnfPGeP133+uUJp9s+yjiy2MRx7GPusaf4/iFPvFfO2f8v3zlpVf6tbV/FXE3esfvjjXXqm/PNff272/Ul9er69WtSmVxYXH+zQdvVObWNn5fnZ/rPxv84617z/ZrS/s/1Sd+6Yz+f+2c/f/1/95/76s9ro/l8b/xaq/4SbzwOfHTOfHr54y/PPXbUr+2NP5qn/6f9fW/d874n/51/4ltwwGA4Wnu7W8u12rVnYsX3stvmV2J5BLv/LSFUgwzusLlF9J/X9cgjZ6Fbw8q1nj0bvrZq50H8FRTu/1UsfqNGJex6gZcBycPfUT8d9jJAAAAAAAAAAAAAAAAPQ3iN5aG3UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABurv8HAAD//5B9y08=") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) 49.382797642s ago: executing program 4 (id=642): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 49.155075346s ago: executing program 4 (id=649): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 49.130421946s ago: executing program 33 (id=649): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) connect$unix(r1, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 39.868413396s ago: executing program 0 (id=927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000001e40)={0x2c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54014840}, 0x20000000) 39.818453447s ago: executing program 0 (id=931): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x2, 0x0, {0xa, 0xfffd, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 39.811383007s ago: executing program 0 (id=934): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 39.759418108s ago: executing program 0 (id=937): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@user_xattr}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 39.59634629s ago: executing program 0 (id=944): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='console\x00', r0, 0x0, 0x3}, 0x18) openat$vcsa(0xffffffffffffff9c, 0x0, 0x204200, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x5408, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000140)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 39.371897054s ago: executing program 0 (id=955): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 39.364421914s ago: executing program 34 (id=955): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) 36.807904515s ago: executing program 3 (id=1007): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x4, 0x4}, 0x400, 0xffffffff, 0x6, 0x5, 0x0, 0x40000001, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = syz_io_uring_setup(0x10f, &(0x7f0000000980)={0x0, 0x5885, 0x80, 0x3}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 35.952683459s ago: executing program 3 (id=1034): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) readahead(0xffffffffffffffff, 0x3, 0x2) 35.89235449s ago: executing program 3 (id=1038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x38, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x9, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 35.745573252s ago: executing program 3 (id=1043): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 35.635898314s ago: executing program 3 (id=1047): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 35.440803007s ago: executing program 3 (id=1054): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 35.400469648s ago: executing program 35 (id=1054): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x178}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 7.062057626s ago: executing program 5 (id=1807): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.027871146s ago: executing program 5 (id=1808): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x2, 0x0) 6.990649017s ago: executing program 5 (id=1809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0xc, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000019100)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x7, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x400, 0x4, 0x9, 0x0, 0xfff}, 0x1, 0x0, 0x8, 0x5, 0xcca7, 0xe, 0xb, 0x0, 0x1, 0x1, {0x7, 0x3, 0x1, 0x101, 0x1, 0xfffffff9}}}}]}, 0x78}}, 0x0) 6.839918009s ago: executing program 5 (id=1810): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 6.312149738s ago: executing program 5 (id=1819): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000cc0)='kfree\x00', r1, 0x0, 0xfff}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x20000000000000, &(0x7f0000000040), 0x111}}, 0x20) close(r2) 5.955979734s ago: executing program 5 (id=1822): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.955731684s ago: executing program 36 (id=1822): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.118149055s ago: executing program 9 (id=1906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.878918359s ago: executing program 9 (id=1914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r2}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) 1.83590467s ago: executing program 6 (id=1915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.83418725s ago: executing program 9 (id=1917): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) shutdown(r0, 0x1) 1.785226261s ago: executing program 9 (id=1918): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.751586712s ago: executing program 6 (id=1920): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r1, 0x0) 1.702525002s ago: executing program 7 (id=1922): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/255, 0xff}, 0x7ff}], 0x1, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.639699483s ago: executing program 2 (id=1924): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffdfefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 1.351624118s ago: executing program 9 (id=1925): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[], 0x48) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 1.279878879s ago: executing program 2 (id=1927): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000006000000000000f183850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) listen(r1, 0x8) accept4$inet(r1, &(0x7f0000000100), 0x0, 0x80800) 1.279188039s ago: executing program 8 (id=1928): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x59a}, 0x18) syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000006c0)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.278785239s ago: executing program 2 (id=1929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 1.23653788s ago: executing program 2 (id=1930): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) socket$packet(0x11, 0x3, 0x300) write$sndseq(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 1.2362739s ago: executing program 6 (id=1931): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.21116284s ago: executing program 6 (id=1932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000002600000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 1.150759911s ago: executing program 2 (id=1933): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000880)=""/97, 0x61}], 0x1) 898.341796ms ago: executing program 6 (id=1934): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000440)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@uid_lt}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@measure}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x4, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, 0x0) 822.869497ms ago: executing program 7 (id=1935): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 797.986917ms ago: executing program 9 (id=1936): creat(&(0x7f00000000c0)='./file0\x00', 0xce) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) 755.819418ms ago: executing program 7 (id=1937): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002600)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0x0, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x519f, 0x0, 0x0, 0x10, 0x5f830015, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127, 0x0, 0x0, 0x0, 0x548, 0x3fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x240000, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x518eaa54, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8001, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x550, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x800000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x8000009, 0x934a, {0x10, 0x2, 0x5, 0x4, 0x3, 0x100}, {0xf9, 0x2, 0x100, 0x81, 0xa}, 0x63febb3a, 0x4, 0x85}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0x488}}, 0x0) 712.419148ms ago: executing program 7 (id=1938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x160) 674.649349ms ago: executing program 8 (id=1939): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_clone(0x80000100, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r2}}, 0x40) 673.743519ms ago: executing program 7 (id=1949): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000']) 650.999869ms ago: executing program 8 (id=1940): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000900)={{0x80}, 'port0\x00', 0xf3, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x2, 0xf8}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x3, 0xe1d6, 0x0, 0xff}) close_range(r0, 0xffffffffffffffff, 0x0) 631.87018ms ago: executing program 8 (id=1941): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0x1, 0x30bd29, 0x40000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 604.04567ms ago: executing program 7 (id=1942): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendfile(r0, r1, 0x0, 0x20000023896) 563.224331ms ago: executing program 8 (id=1943): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 492.934572ms ago: executing program 8 (id=1944): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x7) 301.695115ms ago: executing program 2 (id=1945): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r0}, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2a020400) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) 0s ago: executing program 6 (id=1946): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) kernel console output (not intermixed with test programs): 9.997250][ T6212] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.943'. [ 70.134193][ T6230] loop2: detected capacity change from 0 to 2048 [ 70.182740][ T6230] loop2: p1 < > p4 [ 70.188115][ T6230] loop2: p4 size 8388608 extends beyond EOD, truncated [ 70.230203][ T3889] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.292358][ T3889] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.383698][ T3889] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.423192][ T6252] loop7: detected capacity change from 0 to 16384 [ 70.435386][ T3889] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.484403][ T6245] lo speed is unknown, defaulting to 1000 [ 70.514209][ T3889] bridge_slave_1: left allmulticast mode [ 70.519914][ T3889] bridge_slave_1: left promiscuous mode [ 70.525671][ T3889] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.535119][ T3889] bridge_slave_0: left allmulticast mode [ 70.540870][ T3889] bridge_slave_0: left promiscuous mode [ 70.546687][ T3889] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.598190][ T3889] erspan0 (unregistering): left promiscuous mode [ 70.626230][ T3889] gretap0 (unregistering): left promiscuous mode [ 70.732692][ T3889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.742691][ T3889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.752389][ T3889] bond0 (unregistering): Released all slaves [ 70.793867][ T6264] lo speed is unknown, defaulting to 1000 [ 70.820525][ T6267] serio: Serial port ptm0 [ 70.904543][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 70.904562][ T29] audit: type=1400 audit(1753605390.084:1162): avc: denied { getopt } for pid=6263 comm="syz.3.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.926031][ T6245] chnl_net:caif_netlink_parms(): no params data found [ 70.944634][ T3889] hsr_slave_0: left promiscuous mode [ 70.950371][ T3889] hsr_slave_1: left promiscuous mode [ 70.956417][ T3889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.963950][ T3889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.971810][ T3889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.979419][ T3889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.991500][ T3889] veth1_macvtap: left promiscuous mode [ 70.997077][ T3889] veth0_macvtap: left promiscuous mode [ 71.002647][ T3889] veth1_vlan: left promiscuous mode [ 71.008130][ T3889] veth0_vlan: left promiscuous mode [ 71.074123][ T3889] team0 (unregistering): Port device team_slave_1 removed [ 71.084137][ T3889] team0 (unregistering): Port device team_slave_0 removed [ 71.117376][ T3887] smc: removing ib device sz1 [ 71.133292][ T29] audit: type=1326 audit(1753605390.304:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 71.156786][ T29] audit: type=1326 audit(1753605390.314:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 71.180055][ T29] audit: type=1326 audit(1753605390.314:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 71.203559][ T29] audit: type=1326 audit(1753605390.314:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 71.227080][ T29] audit: type=1326 audit(1753605390.314:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 71.250263][ T29] audit: type=1326 audit(1753605390.314:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 71.273700][ T29] audit: type=1326 audit(1753605390.314:1169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 71.297153][ T29] audit: type=1326 audit(1753605390.314:1170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 71.320640][ T29] audit: type=1326 audit(1753605390.314:1171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6277 comm="syz.2.967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 71.400000][ T4137] lo speed is unknown, defaulting to 1000 [ 71.405850][ T4137] sz1: Port: 1 Link DOWN [ 71.468977][ T6245] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.476304][ T6245] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.493808][ T6245] bridge_slave_0: entered allmulticast mode [ 71.500489][ T6245] bridge_slave_0: entered promiscuous mode [ 71.507571][ T6245] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.515487][ T6245] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.529393][ T6245] bridge_slave_1: entered allmulticast mode [ 71.537296][ T6294] Driver unsupported XDP return value 0 on prog (id 722) dev N/A, expect packet loss! [ 71.547732][ T6245] bridge_slave_1: entered promiscuous mode [ 71.573358][ T6296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 71.604441][ T6245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.614797][ T6298] loop5: detected capacity change from 0 to 512 [ 71.623048][ T6298] EXT4-fs: Ignoring removed oldalloc option [ 71.630807][ T6245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.633876][ T6302] loop3: detected capacity change from 0 to 512 [ 71.648783][ T6302] EXT4-fs mount: 10 callbacks suppressed [ 71.648797][ T6302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 71.670226][ T6302] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.975: Unimplemented hash flags: 0x0001 [ 71.681738][ T6302] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.975: Corrupt directory, running e2fsck is recommended [ 71.682371][ T6245] team0: Port device team_slave_0 added [ 71.697367][ T6298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.703779][ T6245] team0: Port device team_slave_1 added [ 71.714349][ T6298] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 71.730283][ T6302] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.975: path /219/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 71.772786][ T6313] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6313 comm=syz.2.979 [ 71.785218][ T6313] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6313 comm=syz.2.979 [ 71.801565][ T6245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.808545][ T6245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.834658][ T6245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.847836][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.858810][ T6311] smc: net device bond0 applied user defined pnetid SYZ0 [ 71.867306][ T6311] smc: net device bond0 erased user defined pnetid SYZ0 [ 71.876326][ T6245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.883355][ T6245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.909488][ T6245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.946670][ T4093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.984184][ T6245] hsr_slave_0: entered promiscuous mode [ 71.991120][ T6245] hsr_slave_1: entered promiscuous mode [ 72.002704][ T6245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.010672][ T6245] Cannot create hsr debugfs directory [ 72.083626][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.988'. [ 72.163711][ T6340] atomic_op ffff888100877928 conn xmit_atomic 0000000000000000 [ 72.191842][ T6245] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 72.203224][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.209575][ T6245] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 72.219022][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.232477][ T6245] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 72.243039][ T6245] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 72.266877][ T6356] netlink: 264 bytes leftover after parsing attributes in process `syz.3.995'. [ 72.275941][ T6356] netlink: 56 bytes leftover after parsing attributes in process `syz.3.995'. [ 72.338176][ T6245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.353680][ T6245] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.367475][ T3887] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.374636][ T3887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.385426][ T3887] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.392606][ T3887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.540662][ T6245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.668425][ T6245] veth0_vlan: entered promiscuous mode [ 72.676532][ T6245] veth1_vlan: entered promiscuous mode [ 72.693345][ T6245] veth0_macvtap: entered promiscuous mode [ 72.701776][ T6245] veth1_macvtap: entered promiscuous mode [ 72.713946][ T6245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.726240][ T6245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.738105][ T6245] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.746886][ T6245] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.755957][ T6245] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.764787][ T6245] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.810958][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.818466][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.825982][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.837107][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.844776][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.852326][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.859826][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.867356][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.874890][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.882362][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.889830][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.897331][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.904782][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.913244][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.920711][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.928131][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.935699][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.943195][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.950630][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.958064][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.965512][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.972945][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.980512][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.988194][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 72.995769][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.003321][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.010862][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.018371][ T5660] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 73.029824][ T5660] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 73.138236][ T6421] syzkaller0: entered promiscuous mode [ 73.143947][ T6421] syzkaller0: entered allmulticast mode [ 73.198133][ T6429] loop7: detected capacity change from 0 to 2048 [ 73.205210][ T6429] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.233573][ T6429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.250220][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1021'. [ 73.265762][ T6437] bridge0: entered promiscuous mode [ 73.273528][ T6437] bridge0: port 3(macvlan2) entered blocking state [ 73.280199][ T6437] bridge0: port 3(macvlan2) entered disabled state [ 73.287099][ T6437] macvlan2: entered allmulticast mode [ 73.292552][ T6437] bridge0: entered allmulticast mode [ 73.293731][ T6245] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.309583][ T6437] macvlan2: left allmulticast mode [ 73.314845][ T6437] bridge0: left allmulticast mode [ 73.328517][ T6437] bridge0: left promiscuous mode [ 73.416738][ T6447] loop6: detected capacity change from 0 to 256 [ 73.428404][ T6447] FAT-fs (loop6): bogus number of FAT sectors [ 73.434896][ T6447] FAT-fs (loop6): Can't find a valid FAT filesystem [ 73.601656][ T6453] macvtap0: entered promiscuous mode [ 73.616257][ T6453] macvtap0: left promiscuous mode [ 73.674070][ T6468] loop7: detected capacity change from 0 to 128 [ 73.681477][ T6468] vfat: Unknown parameter 'ÿÿÿÿ18446744073709551615' [ 73.921327][ T6488] netlink: 'syz.6.1044': attribute type 1 has an invalid length. [ 73.929182][ T6488] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1044'. [ 73.974889][ T6492] loop9: detected capacity change from 0 to 7 [ 73.993712][ T6492] buffer_io_error: 30534 callbacks suppressed [ 73.993731][ T6492] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.009583][ T6492] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.017634][ T6492] loop9: unable to read partition table [ 74.024845][ T6492] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 74.024845][ T6492] ) failed (rc=-5) [ 74.101628][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1051'. [ 74.131305][ T6502] hsr_slave_0 (unregistering): left promiscuous mode [ 74.200301][ T3887] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.317098][ T3887] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.382001][ T6525] can0: slcan on ttyS3. [ 74.404687][ T3887] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.430714][ T6525] can0 (unregistered): slcan off ttyS3. [ 74.465662][ T3887] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.595235][ T3887] bridge_slave_1: left allmulticast mode [ 74.601019][ T3887] bridge_slave_1: left promiscuous mode [ 74.606863][ T3887] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.626832][ T3887] bridge_slave_0: left allmulticast mode [ 74.630352][ T6560] loop7: detected capacity change from 0 to 764 [ 74.632736][ T3887] bridge_slave_0: left promiscuous mode [ 74.644712][ T3887] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.703010][ T6568] sg_write: data in/out 219/120 bytes for SCSI command 0x0-- guessing data in; [ 74.703010][ T6568] program syz.7.1079 not setting count and/or reply_len properly [ 74.745417][ T3887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.755680][ T3887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.766615][ T3887] bond0 (unregistering): Released all slaves [ 74.807140][ T3887] hsr_slave_0: left promiscuous mode [ 74.813007][ T3887] hsr_slave_1: left promiscuous mode [ 74.818888][ T3887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.826458][ T3887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.834333][ T3887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.841990][ T3887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.877410][ T3887] veth1_macvtap: left promiscuous mode [ 74.884779][ T6583] netlink: 'syz.2.1084': attribute type 13 has an invalid length. [ 74.888352][ T3887] veth0_macvtap: left promiscuous mode [ 74.898282][ T3887] veth1_vlan: left promiscuous mode [ 74.905436][ T3887] veth0_vlan: left promiscuous mode [ 74.976273][ T3887] team0 (unregistering): Port device team_slave_1 removed [ 74.986865][ T3887] team0 (unregistering): Port device team_slave_0 removed [ 75.056771][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.063967][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.101988][ T6583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.112186][ T6583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.142792][ T6583] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.151893][ T6583] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.161049][ T6583] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.169996][ T6583] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.184242][ T6583] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.193384][ T6583] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.202404][ T6583] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.211378][ T6583] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 75.307030][ T6521] chnl_net:caif_netlink_parms(): no params data found [ 75.401523][ T6521] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.408877][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.420028][ T6521] bridge_slave_0: entered allmulticast mode [ 75.429478][ T6521] bridge_slave_0: entered promiscuous mode [ 75.452672][ T6521] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.459782][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.508680][ T6521] bridge_slave_1: entered allmulticast mode [ 75.528591][ T6521] bridge_slave_1: entered promiscuous mode [ 75.540763][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1101'. [ 75.560110][ T6626] loop2: detected capacity change from 0 to 128 [ 75.581939][ T6624] bridge0: entered promiscuous mode [ 75.587711][ T6626] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.594474][ T6624] bridge0: port 3(macvlan2) entered blocking state [ 75.601978][ T6626] ext4 filesystem being mounted at /240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.606539][ T6624] bridge0: port 3(macvlan2) entered disabled state [ 75.669802][ T6624] macvlan2: entered allmulticast mode [ 75.675335][ T6624] bridge0: entered allmulticast mode [ 75.682582][ T6624] macvlan2: left allmulticast mode [ 75.687810][ T6624] bridge0: left allmulticast mode [ 75.697954][ T6624] bridge0: left promiscuous mode [ 75.708387][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.731734][ T6521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.744294][ T6521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.776101][ T6521] team0: Port device team_slave_0 added [ 75.785845][ T6521] team0: Port device team_slave_1 added [ 75.896095][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.903150][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.929219][ T6521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.941760][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 75.941776][ T29] audit: type=1326 audit(1753605395.124:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.6.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23de2e9a9 code=0x7ffc0000 [ 75.971567][ T29] audit: type=1326 audit(1753605395.124:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.6.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23de2e9a9 code=0x7ffc0000 [ 75.998555][ T29] audit: type=1326 audit(1753605395.124:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.6.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe23de2e9a9 code=0x7ffc0000 [ 76.022270][ T29] audit: type=1326 audit(1753605395.124:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.6.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23de2e9a9 code=0x7ffc0000 [ 76.045862][ T29] audit: type=1326 audit(1753605395.124:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.6.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23de2e9a9 code=0x7ffc0000 [ 76.069389][ T29] audit: type=1326 audit(1753605395.124:1293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.6.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fe23de2e9a9 code=0x7ffc0000 [ 76.073489][ T6521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.092992][ T29] audit: type=1326 audit(1753605395.124:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.6.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23de2e9a9 code=0x7ffc0000 [ 76.099738][ T6521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.123169][ T29] audit: type=1326 audit(1753605395.124:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6644 comm="syz.6.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23de2e9a9 code=0x7ffc0000 [ 76.149180][ T6521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.278558][ T6521] hsr_slave_0: entered promiscuous mode [ 76.304812][ T6521] hsr_slave_1: entered promiscuous mode [ 76.325706][ T6521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.340548][ T6521] Cannot create hsr debugfs directory [ 76.429670][ T6670] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 76.461223][ T6672] loop2: detected capacity change from 0 to 1024 [ 76.473582][ T6672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.496178][ T6521] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 76.503677][ T29] audit: type=1400 audit(1753605395.684:1296): avc: denied { rename } for pid=6671 comm="syz.2.1119" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 76.530701][ T6521] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 76.539523][ T6672] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 76.539523][ T29] audit: type=1400 audit(1753605395.714:1297): avc: denied { ioctl } for pid=6671 comm="syz.2.1119" path="/248/file1/file0/file1" dev="loop2" ino=13 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.540448][ T6521] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 76.581792][ T6521] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 76.603032][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.638410][ T6682] netlink: 'syz.7.1121': attribute type 1 has an invalid length. [ 76.652244][ T6521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.667405][ T6521] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.678757][ T3848] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.686005][ T3848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.708994][ T3848] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.716190][ T3848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.791034][ T6521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.942054][ T6521] veth0_vlan: entered promiscuous mode [ 76.951688][ T6521] veth1_vlan: entered promiscuous mode [ 76.973814][ T6521] veth0_macvtap: entered promiscuous mode [ 76.983356][ T6521] veth1_macvtap: entered promiscuous mode [ 76.999309][ T6521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.010876][ T6521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.020620][ T6521] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.029384][ T6521] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.038254][ T6521] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.047044][ T6521] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.095737][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1057'. [ 77.105271][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1057'. [ 77.170102][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1057'. [ 77.194988][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1057'. [ 77.265286][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1057'. [ 77.275674][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1057'. [ 77.290383][ T6749] loop5: detected capacity change from 0 to 256 [ 77.322275][ T6749] FAT-fs (loop5): bogus number of FAT sectors [ 77.328532][ T6749] FAT-fs (loop5): Can't find a valid FAT filesystem [ 77.539483][ T6765] sd 0:0:1:0: device reset [ 77.567320][ T6767] loop2: detected capacity change from 0 to 2048 [ 77.588665][ T6767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.760323][ T6780] xt_bpf: check failed: parse error [ 77.953500][ T6793] loop8: detected capacity change from 0 to 1024 [ 77.983107][ T6793] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.057954][ T6521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.214039][ T6778] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 78.234698][ T6778] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 78.247364][ T6778] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.247364][ T6778] [ 78.257284][ T6778] EXT4-fs (loop2): Total free blocks count 0 [ 78.263374][ T6778] EXT4-fs (loop2): Free/Dirty block details [ 78.269308][ T6778] EXT4-fs (loop2): free_blocks=2415919104 [ 78.275278][ T6778] EXT4-fs (loop2): dirty_blocks=8208 [ 78.280751][ T6778] EXT4-fs (loop2): Block reservation details [ 78.286791][ T6778] EXT4-fs (loop2): i_reserved_data_blocks=513 [ 78.297193][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1164'. [ 78.306150][ T6814] netlink: 'syz.8.1164': attribute type 15 has an invalid length. [ 78.334417][ T6814] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.343283][ T6814] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.352116][ T6814] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.360870][ T6814] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 78.384009][ T6814] vxlan0: entered promiscuous mode [ 78.395503][ T3889] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 78.707218][ T6853] netlink: 'syz.6.1184': attribute type 10 has an invalid length. [ 78.721926][ T6853] team0: Port device dummy0 added [ 78.733750][ T6853] netlink: 'syz.6.1184': attribute type 10 has an invalid length. [ 78.745489][ T6853] team0: Port device dummy0 removed [ 78.753648][ T6853] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 78.812647][ T6865] random: crng reseeded on system resumption [ 78.822833][ T6865] Restarting kernel threads ... [ 78.828043][ T6865] Done restarting kernel threads. [ 79.161190][ T6889] ÿ: renamed from team_slave_1 (while UP) [ 79.257831][ T6902] ip6gre1: entered promiscuous mode [ 79.263288][ T6902] ip6gre1: entered allmulticast mode [ 79.309304][ T6905] loop7: detected capacity change from 0 to 764 [ 79.323446][ T6905] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 79.384733][ T6913] loop8: detected capacity change from 0 to 764 [ 79.392794][ T6913] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 79.411666][ T6916] __nla_validate_parse: 2 callbacks suppressed [ 79.411684][ T6916] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1209'. [ 79.427910][ T6916] netlink: 7 bytes leftover after parsing attributes in process `syz.5.1209'. [ 79.535412][ T6933] bridge0: port 3(batadv1) entered blocking state [ 79.542046][ T6933] bridge0: port 3(batadv1) entered disabled state [ 79.551962][ T6933] batadv1: entered allmulticast mode [ 79.557836][ T6933] batadv1: entered promiscuous mode [ 79.665872][ T6951] loop6: detected capacity change from 0 to 1024 [ 79.701579][ T6951] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.721298][ T6959] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1229'. [ 79.754388][ T6963] serio: Serial port ptm0 [ 79.787332][ T5472] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.902389][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1239'. [ 80.004263][ T6998] SELinux: failed to load policy [ 80.042017][ T3845] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 80.051605][ T3845] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 80.089959][ T7015] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7015 comm=syz.5.1252 [ 80.102611][ T7015] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7015 comm=syz.5.1252 [ 80.193339][ T7017] loop7: detected capacity change from 0 to 2048 [ 80.202021][ T7017] EXT4-fs: Ignoring removed bh option [ 80.221583][ T7017] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.293087][ T6245] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.404740][ T7049] loop7: detected capacity change from 0 to 1024 [ 80.454280][ T7054] loop2: detected capacity change from 0 to 256 [ 80.463498][ T7054] FAT-fs (loop2): bogus number of FAT sectors [ 80.469638][ T7054] FAT-fs (loop2): Can't find a valid FAT filesystem [ 80.486988][ T7049] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.614728][ T7049] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1263: Allocating blocks 449-513 which overlap fs metadata [ 80.632040][ T7069] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 80.642560][ T7069] SELinux: failed to load policy [ 80.647766][ T7048] EXT4-fs (loop7): pa ffff888106e0c230: logic 48, phys. 177, len 21 [ 80.656007][ T7048] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 80.710094][ T6245] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.761434][ T7080] netlink: 'syz.7.1277': attribute type 10 has an invalid length. [ 80.769340][ T7080] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1277'. [ 80.791023][ T7076] tipc: Started in network mode [ 80.795981][ T7076] tipc: Node identity 5aafcbde8b62, cluster identity 4711 [ 80.803299][ T7076] tipc: Enabled bearer , priority 0 [ 80.811419][ T7080] batman_adv: batadv0: Adding interface: macvlan0 [ 80.817878][ T7080] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.822413][ T7082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.863607][ T7080] batman_adv: batadv0: Interface activated: macvlan0 [ 80.872580][ T7088] tipc: Disabling bearer [ 80.878637][ T7090] netlink: 24 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 80.887694][ T7082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.983647][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 80.983662][ T29] audit: type=1326 audit(1753605400.164:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.2.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 81.040461][ T29] audit: type=1326 audit(1753605400.194:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.2.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 81.063990][ T29] audit: type=1326 audit(1753605400.194:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.2.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 81.087504][ T29] audit: type=1326 audit(1753605400.194:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.2.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 81.111116][ T29] audit: type=1326 audit(1753605400.194:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.2.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 81.134590][ T29] audit: type=1326 audit(1753605400.194:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.2.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 81.158142][ T29] audit: type=1326 audit(1753605400.194:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.2.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 81.181766][ T29] audit: type=1326 audit(1753605400.194:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.2.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 81.205316][ T29] audit: type=1326 audit(1753605400.194:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.2.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 81.228842][ T29] audit: type=1326 audit(1753605400.194:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7097 comm="syz.2.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 81.231948][ T7109] loop7: detected capacity change from 0 to 256 [ 81.264490][ T7109] FAT-fs (loop7): bogus number of FAT sectors [ 81.270744][ T7109] FAT-fs (loop7): Can't find a valid FAT filesystem [ 81.482307][ T7137] loop2: detected capacity change from 0 to 512 [ 81.489440][ T7137] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.502260][ T7137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.515376][ T7137] ext4 filesystem being mounted at /278/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.588040][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.673738][ T7162] loop5: detected capacity change from 0 to 512 [ 81.695374][ T7162] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.716560][ T7170] SELinux: policydb version -1040795957 does not match my version range 15-34 [ 81.729258][ T7170] SELinux: failed to load policy [ 81.730851][ T7162] EXT4-fs (loop5): mount failed [ 81.794301][ T7172] loop6: detected capacity change from 0 to 8192 [ 81.892662][ T7188] loop2: detected capacity change from 0 to 1024 [ 81.902705][ T7188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.917036][ T7188] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.952960][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.968571][ T7194] loop6: detected capacity change from 0 to 512 [ 81.975866][ T7194] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.991024][ T7194] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 82.005260][ T7194] EXT4-fs (loop6): 1 truncate cleaned up [ 82.016915][ T7201] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.017159][ T7194] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.027341][ T7201] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.069920][ T5472] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.093456][ T7201] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.103937][ T7201] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.164623][ T7201] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.175233][ T7201] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.223395][ T7201] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.233885][ T7201] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.292306][ T7201] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.300666][ T7201] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.312808][ T7201] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.321091][ T7201] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.332756][ T7201] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.341164][ T7201] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.353138][ T7201] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.361448][ T7201] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.505070][ T7215] loop8: detected capacity change from 0 to 256 [ 82.523611][ T7215] FAT-fs (loop8): bogus number of FAT sectors [ 82.529746][ T7215] FAT-fs (loop8): Can't find a valid FAT filesystem [ 82.669444][ T7227] loop5: detected capacity change from 0 to 1024 [ 82.686449][ T7227] EXT4-fs: Ignoring removed orlov option [ 82.695869][ T7227] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.918261][ T7245] loop8: detected capacity change from 0 to 128 [ 82.926885][ T7245] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 82.939696][ T7245] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.002189][ T6521] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 83.058337][ T7256] netlink: 'syz.7.1351': attribute type 6 has an invalid length. [ 83.184715][ T4093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.243098][ T7271] syzkaller0: entered promiscuous mode [ 83.248649][ T7271] syzkaller0: entered allmulticast mode [ 83.325911][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.333180][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.346121][ T7285] bridge_slave_1: left allmulticast mode [ 83.352191][ T7285] bridge_slave_1: left promiscuous mode [ 83.358328][ T7285] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.368838][ T7285] bridge_slave_0: left allmulticast mode [ 83.374856][ T7285] bridge_slave_0: left promiscuous mode [ 83.380860][ T7285] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.439094][ T7294] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1369'. [ 83.466879][ T7294] hsr_slave_0 (unregistering): left promiscuous mode [ 83.531253][ T7301] loop7: detected capacity change from 0 to 512 [ 83.537977][ T7301] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.544885][ T7301] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 83.556933][ T7301] EXT4-fs (loop7): 1 truncate cleaned up [ 83.563139][ T7301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.596029][ T6245] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.092419][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.099981][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.107687][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x2 [ 84.115439][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.123090][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.130747][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.138251][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.145715][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.153263][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.160824][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.168249][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.175705][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.183254][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.190868][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.198540][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.206011][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.213488][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.220932][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.228469][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.235920][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.243522][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.250934][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x1 [ 84.258379][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.265789][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.273330][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.280785][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.288179][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.295643][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.303175][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.310853][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.318309][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.325741][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.333178][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.340695][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.348274][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.355871][ T2960] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 84.366910][ T2960] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 84.453291][ T7329] loop7: detected capacity change from 0 to 256 [ 84.460216][ T7329] FAT-fs (loop7): bogus number of FAT sectors [ 84.466447][ T7329] FAT-fs (loop7): Can't find a valid FAT filesystem [ 84.768084][ T7357] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.814219][ T7357] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.918802][ T7357] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.994683][ T7357] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.036555][ T7370] chnl_net:caif_netlink_parms(): no params data found [ 85.076543][ T7370] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.083739][ T7370] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.091036][ T7370] bridge_slave_0: entered allmulticast mode [ 85.097505][ T7370] bridge_slave_0: entered promiscuous mode [ 85.104559][ T7370] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.111686][ T7370] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.118940][ T7370] bridge_slave_1: entered allmulticast mode [ 85.125434][ T7370] bridge_slave_1: entered promiscuous mode [ 85.146845][ T7357] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.158911][ T7357] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.168870][ T7370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.179669][ T7370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.193777][ T7357] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.214199][ T3889] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.232230][ T7357] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.249730][ T7370] team0: Port device team_slave_0 added [ 85.256582][ T7370] team0: Port device team_slave_1 added [ 85.271742][ T3889] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.311041][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.318033][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.344308][ T7370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.357508][ T3889] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.368923][ T7370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.375950][ T7370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.401926][ T7370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.435307][ T3889] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.456272][ T7370] hsr_slave_0: entered promiscuous mode [ 85.462405][ T7370] hsr_slave_1: entered promiscuous mode [ 85.468366][ T7370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.476111][ T7370] Cannot create hsr debugfs directory [ 85.552444][ T7370] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.632999][ T3889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.643729][ T3889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.653340][ T3889] bond0 (unregistering): Released all slaves [ 85.663325][ T7370] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.679886][ T7389] chnl_net:caif_netlink_parms(): no params data found [ 85.706070][ T3889] hsr_slave_0: left promiscuous mode [ 85.711844][ T3889] hsr_slave_1: left promiscuous mode [ 85.717521][ T3889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.724972][ T3889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.732603][ T3889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.739999][ T3889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.747679][ T3889] batman_adv: batadv0: Interface deactivated: macvlan0 [ 85.754615][ T3889] batman_adv: batadv0: Removing interface: macvlan0 [ 85.764406][ T3889] veth1_macvtap: left promiscuous mode [ 85.769963][ T3889] veth0_macvtap: left promiscuous mode [ 85.775553][ T3889] veth1_vlan: left promiscuous mode [ 85.780921][ T3889] veth0_vlan: left promiscuous mode [ 85.844270][ T3889] team0 (unregistering): Port device team_slave_1 removed [ 85.854911][ T3889] team0 (unregistering): Port device team_slave_0 removed [ 85.896174][ T7370] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.914505][ T7389] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.921709][ T7389] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.929145][ T7389] bridge_slave_0: entered allmulticast mode [ 85.935979][ T7389] bridge_slave_0: entered promiscuous mode [ 85.942910][ T7389] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.950016][ T7389] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.957335][ T7389] bridge_slave_1: entered allmulticast mode [ 85.964023][ T7389] bridge_slave_1: entered promiscuous mode [ 85.972453][ T7370] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.995131][ T7389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.005722][ T7389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.024592][ T7389] team0: Port device team_slave_0 added [ 86.031546][ T7389] team0: Port device team_slave_1 added [ 86.049600][ T7389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.056689][ T7389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.083057][ T7389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.094419][ T7389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.101434][ T7389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.127514][ T7389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.159512][ T7389] hsr_slave_0: entered promiscuous mode [ 86.165671][ T7389] hsr_slave_1: entered promiscuous mode [ 86.171571][ T7389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.179138][ T7389] Cannot create hsr debugfs directory [ 86.196921][ T7370] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 86.213986][ T7370] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 86.225225][ T7370] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 86.236977][ T7370] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 86.293210][ T7370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.309710][ T7370] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.319184][ T3891] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.326292][ T3891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.337141][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.344257][ T3845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.407011][ T7370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.467280][ T7389] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 86.476599][ T7389] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 86.485810][ T7389] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 86.494666][ T7389] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 86.543338][ T7389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.558213][ T7389] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.569372][ T3877] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.576594][ T3877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.589605][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.596866][ T3845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.621187][ T7370] veth0_vlan: entered promiscuous mode [ 86.634817][ T7370] veth1_vlan: entered promiscuous mode [ 86.657443][ T7370] veth0_macvtap: entered promiscuous mode [ 86.665160][ T7370] veth1_macvtap: entered promiscuous mode [ 86.677549][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.690341][ T7370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.702503][ T7370] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.711389][ T7370] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.720101][ T7370] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.728828][ T7370] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.749360][ T7389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.832467][ T7442] loop6: detected capacity change from 0 to 256 [ 86.839290][ T7442] FAT-fs (loop6): bogus number of FAT sectors [ 86.845563][ T7442] FAT-fs (loop6): Can't find a valid FAT filesystem [ 86.891559][ T7455] rdma_op ffff88811825e580 conn xmit_rdma 0000000000000000 [ 86.904395][ T7457] loop9: detected capacity change from 0 to 7 [ 86.922033][ T7457] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.941297][ T7457] Buffer I/O error on dev loop9, logical block 0, async page read [ 86.949297][ T7457] loop9: unable to read partition table [ 86.957347][ T7463] loop5: detected capacity change from 0 to 128 [ 86.964243][ T7457] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 86.964243][ T7457] ) failed (rc=-5) [ 86.981388][ T7389] veth0_vlan: entered promiscuous mode [ 86.982865][ T7463] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.989550][ T7389] veth1_vlan: entered promiscuous mode [ 87.017075][ T7389] veth0_macvtap: entered promiscuous mode [ 87.029218][ T7463] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.040587][ T7389] veth1_macvtap: entered promiscuous mode [ 87.079471][ T7471] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7471 comm=syz.2.1412 [ 87.099970][ T7389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.111554][ T7389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.154299][ T7389] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.163255][ T7389] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.172102][ T7389] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.180867][ T7389] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.238240][ T4093] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.495086][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 87.495104][ T29] audit: type=1400 audit(1753605406.674:1499): avc: denied { read write } for pid=7495 comm="syz.6.1427" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 87.525978][ T29] audit: type=1400 audit(1753605406.674:1500): avc: denied { open } for pid=7495 comm="syz.6.1427" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 87.622052][ T3404] kernel read not supported for file /vga_arbiter (pid: 3404 comm: kworker/0:6) [ 87.653961][ T7505] loop6: detected capacity change from 0 to 128 [ 87.675149][ T7505] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.687980][ T7505] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.811144][ T7370] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 87.834135][ T7512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1432'. [ 87.843354][ T7512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1432'. [ 87.894068][ T29] audit: type=1326 audit(1753605407.074:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c013e9a9 code=0x7ffc0000 [ 87.917617][ T29] audit: type=1326 audit(1753605407.074:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fd2c013e9a9 code=0x7ffc0000 [ 87.973894][ T29] audit: type=1326 audit(1753605407.074:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c013e9a9 code=0x7ffc0000 [ 87.997474][ T29] audit: type=1326 audit(1753605407.074:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c013e9a9 code=0x7ffc0000 [ 88.021214][ T29] audit: type=1326 audit(1753605407.074:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c013e9a9 code=0x7ffc0000 [ 88.044733][ T29] audit: type=1326 audit(1753605407.074:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c013e9a9 code=0x7ffc0000 [ 88.068245][ T29] audit: type=1326 audit(1753605407.074:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2c013e9a9 code=0x7ffc0000 [ 88.091974][ T29] audit: type=1326 audit(1753605407.074:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7518 comm="syz.8.1435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c013e9a9 code=0x7ffc0000 [ 88.098345][ T7530] netlink: 'syz.6.1440': attribute type 4 has an invalid length. [ 88.148733][ T7532] hub 9-0:1.0: USB hub found [ 88.174398][ T7532] hub 9-0:1.0: 8 ports detected [ 88.205186][ T7530] netlink: 'syz.6.1440': attribute type 4 has an invalid length. [ 88.298059][ T7549] loop7: detected capacity change from 0 to 1024 [ 88.312322][ T7549] ext3: Bad value for 'errors' [ 88.395764][ T7565] netlink: 'syz.7.1456': attribute type 10 has an invalid length. [ 88.422592][ T7565] team0: Port device dummy0 added [ 88.441930][ T7565] netlink: 'syz.7.1456': attribute type 10 has an invalid length. [ 88.473037][ T7565] team0: Port device dummy0 removed [ 88.498897][ T7565] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 89.198022][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1464'. [ 89.235455][ T7586] loop7: detected capacity change from 0 to 1024 [ 89.258230][ T7586] EXT4-fs: Ignoring removed nobh option [ 89.264038][ T7586] EXT4-fs: inline encryption not supported [ 89.313910][ T7586] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.351543][ T7586] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.1465: Allocating blocks 385-513 which overlap fs metadata [ 89.393589][ T7586] EXT4-fs (loop7): pa ffff888109005690: logic 16, phys. 129, len 24 [ 89.401830][ T7586] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 89.433044][ T7586] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 89.445395][ T7586] EXT4-fs (loop7): This should not happen!! Data will be lost [ 89.445395][ T7586] [ 89.455080][ T7586] EXT4-fs (loop7): Total free blocks count 0 [ 89.461166][ T7586] EXT4-fs (loop7): Free/Dirty block details [ 89.467160][ T7586] EXT4-fs (loop7): free_blocks=128 [ 89.472429][ T7586] EXT4-fs (loop7): dirty_blocks=0 [ 89.477478][ T7586] EXT4-fs (loop7): Block reservation details [ 89.483550][ T7586] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 89.589091][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1477'. [ 89.598374][ T7613] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1477'. [ 89.749738][ T7628] loop5: detected capacity change from 0 to 8192 [ 89.843634][ T7644] loop8: detected capacity change from 0 to 512 [ 89.875349][ T7644] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.913981][ T7644] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.950691][ T7644] EXT4-fs: Ignoring removed orlov option [ 89.974972][ T7644] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.983931][ T7644] EXT4-fs (loop8): can't enable nombcache during remount [ 90.022744][ T6521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.074890][ T7676] netlink: 'syz.5.1490': attribute type 10 has an invalid length. [ 90.103411][ T7676] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.126356][ T7676] bond0: (slave team0): Enslaving as an active interface with an up link [ 90.173612][ T7691] loop8: detected capacity change from 0 to 512 [ 90.204808][ T7691] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.224241][ T7691] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.336493][ T3891] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 90.372822][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1508'. [ 90.383913][ T3891] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1025 with error 28 [ 90.396766][ T3891] EXT4-fs (loop8): This should not happen!! Data will be lost [ 90.396766][ T3891] [ 90.406490][ T3891] EXT4-fs (loop8): Total free blocks count 0 [ 90.412522][ T3891] EXT4-fs (loop8): Free/Dirty block details [ 90.418446][ T3891] EXT4-fs (loop8): free_blocks=65280 [ 90.423799][ T3891] EXT4-fs (loop8): dirty_blocks=1025 [ 90.429137][ T3891] EXT4-fs (loop8): Block reservation details [ 90.435175][ T3891] EXT4-fs (loop8): i_reserved_data_blocks=1025 [ 90.456619][ T6521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.155483][ T7790] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.162888][ T7790] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.215797][ T7797] geneve2: entered promiscuous mode [ 91.233064][ T7803] bridge_slave_1: left allmulticast mode [ 91.238794][ T7803] bridge_slave_1: left promiscuous mode [ 91.244921][ T7803] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.281105][ T7803] bridge_slave_0: left allmulticast mode [ 91.286903][ T7803] bridge_slave_0: left promiscuous mode [ 91.292818][ T7803] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.542720][ T7844] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1535'. [ 91.565526][ T7838] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1535'. [ 91.636321][ T7859] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1539'. [ 91.645478][ T7859] netlink: 212 bytes leftover after parsing attributes in process `syz.5.1539'. [ 91.682846][ T7863] SELinux: policydb version 0 does not match my version range 15-34 [ 91.700471][ T7863] SELinux: failed to load policy [ 91.788034][ T7871] loop8: detected capacity change from 0 to 1024 [ 91.849494][ T7871] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.863743][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.871015][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.883262][ T7871] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.1542: Allocating blocks 449-513 which overlap fs metadata [ 91.899342][ T7885] bridge_slave_1: left allmulticast mode [ 91.905208][ T7885] bridge_slave_1: left promiscuous mode [ 91.911264][ T7885] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.921773][ T7885] bridge_slave_0: left allmulticast mode [ 91.927517][ T7885] bridge_slave_0: left promiscuous mode [ 91.933579][ T7885] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.944262][ T7870] EXT4-fs (loop8): pa ffff888109005770: logic 48, phys. 177, len 21 [ 91.952371][ T7870] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 91.977007][ T6521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.007449][ T7896] SELinux: security_context_str_to_sid ( ) failed with errno=-22 [ 92.583094][ T7925] hsr_slave_0 (unregistering): left promiscuous mode [ 92.700548][ T7938] batadv1: left allmulticast mode [ 92.705697][ T7938] batadv1: left promiscuous mode [ 92.711183][ T7938] bridge0: port 3(batadv1) entered disabled state [ 92.728518][ T7938] bridge_slave_1: left allmulticast mode [ 92.734278][ T7938] bridge_slave_1: left promiscuous mode [ 92.740025][ T7938] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.756911][ T7938] bridge_slave_0: left allmulticast mode [ 92.762661][ T7938] bridge_slave_0: left promiscuous mode [ 92.768385][ T7938] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.953055][ T7964] loop7: detected capacity change from 0 to 512 [ 92.984041][ T7964] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.003594][ T7969] loop6: detected capacity change from 0 to 1024 [ 93.013165][ T7973] __nla_validate_parse: 3 callbacks suppressed [ 93.013183][ T7973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1572'. [ 93.029408][ T7964] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.045592][ T7969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.092725][ T7969] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4113: comm syz.6.1571: Allocating blocks 449-513 which overlap fs metadata [ 93.118337][ T7967] EXT4-fs (loop6): pa ffff888109005770: logic 48, phys. 177, len 21 [ 93.126482][ T7967] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 93.162922][ T12] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 93.164289][ T7370] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.181675][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1025 with error 28 [ 93.198990][ T12] EXT4-fs (loop7): This should not happen!! Data will be lost [ 93.198990][ T12] [ 93.208690][ T12] EXT4-fs (loop7): Total free blocks count 0 [ 93.214870][ T12] EXT4-fs (loop7): Free/Dirty block details [ 93.220894][ T12] EXT4-fs (loop7): free_blocks=65280 [ 93.226303][ T12] EXT4-fs (loop7): dirty_blocks=1025 [ 93.231753][ T12] EXT4-fs (loop7): Block reservation details [ 93.232778][ T7986] loop5: detected capacity change from 0 to 1024 [ 93.237759][ T12] EXT4-fs (loop7): i_reserved_data_blocks=1025 [ 93.282945][ T7986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.296141][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1573'. [ 93.302487][ T7389] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.326612][ T7993] hsr_slave_0 (unregistering): left promiscuous mode [ 93.354151][ T7986] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.1587: Allocating blocks 449-513 which overlap fs metadata [ 93.383826][ T7985] EXT4-fs (loop5): pa ffff8881090057e0: logic 48, phys. 177, len 21 [ 93.392179][ T7985] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 93.429664][ T4093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.668857][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 94.668952][ T29] audit: type=1400 audit(1753605413.844:1582): avc: denied { name_bind } for pid=8129 comm="syz.2.1589" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 94.759652][ T8138] pimreg: entered allmulticast mode [ 94.773828][ T29] audit: type=1400 audit(1753605413.884:1583): avc: denied { create } for pid=8133 comm="syz.6.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.793398][ T29] audit: type=1400 audit(1753605413.894:1584): avc: denied { getopt } for pid=8133 comm="syz.6.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 94.817726][ T8147] pimreg: left allmulticast mode [ 94.840063][ T8144] SELinux: Context system_u:object_r:usr_t:s0 is not valid (left unmapped). [ 94.840854][ T29] audit: type=1400 audit(1753605414.014:1585): avc: denied { relabelfrom } for pid=8143 comm="syz.7.1597" name="UNIX" dev="sockfs" ino=21738 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 94.880822][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1598'. [ 94.889921][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1598'. [ 94.890394][ T29] audit: type=1400 audit(1753605414.024:1586): avc: denied { relabelto } for pid=8143 comm="syz.7.1597" name="UNIX" dev="sockfs" ino=21738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:usr_t:s0" [ 94.898906][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1598'. [ 94.971644][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1598'. [ 94.980929][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1598'. [ 94.990074][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1598'. [ 95.052337][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1598'. [ 95.061538][ T8146] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1598'. [ 95.124163][ T8171] batadv1: entered promiscuous mode [ 95.129456][ T8171] batadv1: entered allmulticast mode [ 95.147962][ T8177] netlink: 'syz.8.1610': attribute type 1 has an invalid length. [ 95.186207][ T8177] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.236924][ T8192] loop5: detected capacity change from 0 to 1024 [ 95.261123][ T8192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.267140][ T8194] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 95.282094][ T8192] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 1 with error 28 [ 95.294636][ T8192] EXT4-fs (loop5): This should not happen!! Data will be lost [ 95.294636][ T8192] [ 95.304359][ T8192] EXT4-fs (loop5): Total free blocks count 0 [ 95.310397][ T8192] EXT4-fs (loop5): Free/Dirty block details [ 95.316411][ T8192] EXT4-fs (loop5): free_blocks=0 [ 95.321487][ T8192] EXT4-fs (loop5): dirty_blocks=0 [ 95.326608][ T8192] EXT4-fs (loop5): Block reservation details [ 95.332670][ T8192] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 95.360188][ T4093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.369280][ T29] audit: type=1400 audit(1753605414.534:1587): avc: denied { bind } for pid=8202 comm="syz.8.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.401132][ T29] audit: type=1400 audit(1753605414.574:1588): avc: denied { mount } for pid=8198 comm="syz.7.1616" name="/" dev="autofs" ino=21821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 95.898763][ T8249] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 96.025289][ T29] audit: type=1400 audit(1753605415.194:1589): avc: denied { write } for pid=8254 comm="syz.7.1641" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 96.171431][ T8266] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.274311][ T8266] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.329614][ T8282] loop5: detected capacity change from 0 to 2048 [ 96.340285][ T8282] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.364735][ T8266] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.423587][ T8266] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.430803][ T8287] infiniband syz!: set active [ 96.438751][ T8287] infiniband syz!: added team_slave_0 [ 96.450276][ T8287] RDS/IB: syz!: added [ 96.454613][ T8287] smc: adding ib device syz! with port count 1 [ 96.460969][ T8287] smc: ib device syz! port 1 has pnetid [ 96.498442][ T8266] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.515285][ T8266] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.554151][ T8266] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.571460][ T8285] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 96.589429][ T8266] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.656261][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x1 [ 96.664028][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.671817][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.679258][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.681110][ T8302] batadv2: entered promiscuous mode [ 96.686739][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.691990][ T8302] batadv2: entered allmulticast mode [ 96.704793][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.712383][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 96.719852][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.727309][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.734761][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.742208][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2 [ 96.749787][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.757396][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.764980][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x4 [ 96.772462][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.779917][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.787363][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x2 [ 96.794808][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.802332][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.805818][ T8292] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 96.809741][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.822230][ T8292] EXT4-fs (loop5): This should not happen!! Data will be lost [ 96.822230][ T8292] [ 96.829551][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.839192][ T8292] EXT4-fs (loop5): Total free blocks count 0 [ 96.839217][ T8292] EXT4-fs (loop5): Free/Dirty block details [ 96.846739][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.852740][ T8292] EXT4-fs (loop5): free_blocks=2415919104 [ 96.858645][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.866026][ T8292] EXT4-fs (loop5): dirty_blocks=8208 [ 96.871802][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.871826][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.879214][ T8292] EXT4-fs (loop5): Block reservation details [ 96.879227][ T8292] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 96.911661][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.919218][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.926698][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.934243][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.941753][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.949201][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.956751][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.964216][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.971663][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.979094][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.986545][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 96.994069][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 97.001732][ T3397] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 97.009988][ T3397] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 97.092822][ T8315] loop8: detected capacity change from 0 to 164 [ 97.099998][ T8315] rock: directory entry would overflow storage [ 97.106355][ T8315] rock: sig=0x66, size=4, remaining=3 [ 97.139632][ T3893] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 97.142802][ T8315] rock: directory entry would overflow storage [ 97.158613][ T8315] rock: sig=0x66, size=4, remaining=3 [ 97.183405][ T8315] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 97.314339][ T8334] loop7: detected capacity change from 0 to 512 [ 97.347130][ T8334] EXT4-fs (loop7): 1 orphan inode deleted [ 97.355069][ T8334] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.368176][ T8334] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 97.369512][ T3885] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 97.388374][ T3885] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:58: Failed to release dquot type 1 [ 97.411176][ T8340] smc: net device bond0 applied user defined pnetid SYZ2 [ 97.418661][ T8340] smc: net device bond0 erased user defined pnetid SYZ2 [ 97.457665][ T7389] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.468714][ T29] audit: type=1400 audit(1753605416.634:1590): avc: denied { mount } for pid=8347 comm="syz.5.1679" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 97.494423][ T8346] batadv1: entered promiscuous mode [ 97.499706][ T8346] batadv1: entered allmulticast mode [ 97.531461][ T8354] loop7: detected capacity change from 0 to 2048 [ 97.543152][ T8354] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.562796][ T8361] netlink: 'syz.6.1680': attribute type 15 has an invalid length. [ 97.575897][ T8361] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.584228][ T8361] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.592547][ T8361] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.600805][ T8361] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.611190][ T8361] vxlan0: entered promiscuous mode [ 97.665465][ T8369] netlink: 'syz.2.1687': attribute type 3 has an invalid length. [ 97.883491][ T8365] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 97.913792][ T8365] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 97.926309][ T8365] EXT4-fs (loop7): This should not happen!! Data will be lost [ 97.926309][ T8365] [ 97.936029][ T8365] EXT4-fs (loop7): Total free blocks count 0 [ 97.942062][ T8365] EXT4-fs (loop7): Free/Dirty block details [ 97.948017][ T8365] EXT4-fs (loop7): free_blocks=2415919104 [ 97.953817][ T8365] EXT4-fs (loop7): dirty_blocks=8208 [ 97.959186][ T8365] EXT4-fs (loop7): Block reservation details [ 97.965223][ T8365] EXT4-fs (loop7): i_reserved_data_blocks=513 [ 98.015410][ T3884] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 98.175460][ T8387] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.202325][ T8389] __nla_validate_parse: 10 callbacks suppressed [ 98.202340][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1689'. [ 98.244137][ T8387] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.312301][ T8387] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.402678][ T8387] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.476038][ T8387] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.503793][ T8387] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.532792][ T8387] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.582156][ T8387] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.694387][ T8412] loop5: detected capacity change from 0 to 512 [ 98.733810][ T8412] EXT4-fs (loop5): 1 orphan inode deleted [ 98.743964][ T8412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.762405][ T1690] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 98.777867][ T8412] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.852958][ T4093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.970529][ T8435] smc: net device bond0 applied user defined pnetid SYZ2 [ 99.000803][ T8435] smc: net device bond0 erased user defined pnetid SYZ2 [ 99.020715][ T8440] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.117627][ T8440] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.189895][ T8440] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.261953][ T8450] infiniband syz2: set down [ 99.266553][ T8450] infiniband syz2: added syzkaller0 [ 99.272926][ T8440] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.308982][ T8450] RDS/IB: syz2: added [ 99.321121][ T8450] smc: adding ib device syz2 with port count 1 [ 99.335220][ T8450] smc: ib device syz2 port 1 has pnetid [ 99.376730][ T8440] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.422686][ T8440] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.437823][ T8440] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.458682][ T8440] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.470743][ T8465] loop6: detected capacity change from 0 to 2048 [ 99.515159][ T8465] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.815536][ T1690] smc: removing ib device syz2 [ 99.887401][ T8483] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 99.922487][ T8483] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 100.047917][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 100.048001][ T29] audit: type=1400 audit(1753605419.224:1665): avc: denied { accept } for pid=8487 comm="syz.5.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 100.102714][ T8486] loop7: detected capacity change from 0 to 8192 [ 100.127785][ T8468] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 100.170793][ T8468] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 100.183461][ T8468] EXT4-fs (loop6): This should not happen!! Data will be lost [ 100.183461][ T8468] [ 100.193264][ T8468] EXT4-fs (loop6): Total free blocks count 0 [ 100.199321][ T8468] EXT4-fs (loop6): Free/Dirty block details [ 100.205855][ T8468] EXT4-fs (loop6): free_blocks=2415919104 [ 100.211715][ T8468] EXT4-fs (loop6): dirty_blocks=8208 [ 100.217098][ T8468] EXT4-fs (loop6): Block reservation details [ 100.223163][ T8468] EXT4-fs (loop6): i_reserved_data_blocks=513 [ 100.287550][ T1690] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 100.351998][ T36] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 100.375072][ T36] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 100.522111][ T29] audit: type=1326 audit(1753605419.704:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.6.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc213fbe9a9 code=0x7ffc0000 [ 100.545678][ T29] audit: type=1326 audit(1753605419.704:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.6.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc213fbe9a9 code=0x7ffc0000 [ 100.569442][ T29] audit: type=1326 audit(1753605419.704:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.6.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fc213fbe9a9 code=0x7ffc0000 [ 100.592956][ T29] audit: type=1326 audit(1753605419.704:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8504 comm="syz.6.1741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc213fbe9a9 code=0x7ffc0000 [ 100.673299][ T8514] SELinux: failed to load policy [ 100.733338][ T8516] futex_wake_op: syz.2.1748 tries to shift op by -1; fix this program [ 100.861098][ T29] audit: type=1326 audit(1753605420.034:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.2.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 100.884608][ T29] audit: type=1326 audit(1753605420.034:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.2.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 100.945940][ T29] audit: type=1326 audit(1753605420.084:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.2.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 100.969965][ T29] audit: type=1326 audit(1753605420.084:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.2.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 100.994135][ T29] audit: type=1326 audit(1753605420.084:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8523 comm="syz.2.1752" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 101.112797][ T8536] loop5: detected capacity change from 0 to 8192 [ 101.141168][ T8548] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1760'. [ 101.234231][ T8556] tipc: Started in network mode [ 101.239210][ T8556] tipc: Node identity e29ba6d0d0da, cluster identity 4711 [ 101.246636][ T8556] tipc: Enabled bearer , priority 0 [ 101.275341][ T8556] tipc: Disabling bearer [ 101.303614][ T8560] loop8: detected capacity change from 0 to 512 [ 101.310453][ T8560] journal_path: Lookup failure for './file0/../file0' [ 101.317340][ T8560] EXT4-fs: error: could not find journal device path [ 101.419064][ T8572] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1774'. [ 101.449777][ T8569] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿÿòÿÿ [ 101.507617][ T8573] loop8: detected capacity change from 0 to 8192 [ 101.837120][ T8594] tipc: Failed to remove unknown binding: 66,1,1/0:1556201844/1556201846 [ 101.915994][ T8601] xt_NFQUEUE: number of total queues is 0 [ 101.975351][ T8609] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 102.069505][ T8623] loop8: detected capacity change from 0 to 512 [ 102.081227][ T8625] loop7: detected capacity change from 0 to 1024 [ 102.088222][ T8623] EXT4-fs: Ignoring removed oldalloc option [ 102.103360][ T8625] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 102.127837][ T8623] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.1795: Parent and EA inode have the same ino 15 [ 102.177328][ T8625] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.201476][ T8632] loop5: detected capacity change from 0 to 512 [ 102.205933][ T8623] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.1795: Parent and EA inode have the same ino 15 [ 102.228024][ T8632] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.254020][ T8623] EXT4-fs (loop8): 1 orphan inode deleted [ 102.268485][ T7389] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.269250][ T8623] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.319534][ T4093] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.377945][ T6521] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.462964][ T8644] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 102.758533][ T8662] loop5: detected capacity change from 0 to 512 [ 102.775807][ T8661] tipc: Started in network mode [ 102.780779][ T8661] tipc: Node identity 0a8497461d2e, cluster identity 4711 [ 102.787958][ T8661] tipc: Enabled bearer , priority 0 [ 102.788250][ T8662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.814044][ T8662] ext4 filesystem being mounted at /297/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.829112][ T8661] tipc: Disabling bearer [ 102.894766][ T8662] loop5: detected capacity change from 512 to 0 [ 102.895872][ T8665] bio_check_eod: 30536 callbacks suppressed [ 102.895889][ T8665] syz.5.1810: attempt to access beyond end of device [ 102.895889][ T8665] loop5: rw=12288, sector=84, nr_sectors = 4 limit=0 [ 102.929342][ T8665] syz.5.1810: attempt to access beyond end of device [ 102.929342][ T8665] loop5: rw=12288, sector=80, nr_sectors = 4 limit=0 [ 102.946608][ T8665] EXT4-fs error (device loop5): ext4_write_dquot:6913: comm syz.5.1810: Failed to commit dquot type 1 [ 102.957949][ T8665] syz.5.1810: attempt to access beyond end of device [ 102.957949][ T8665] loop5: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 102.971183][ T8665] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 102.979540][ T8665] EXT4-fs (loop5): I/O error while writing superblock [ 102.986576][ T8665] syz.5.1810: attempt to access beyond end of device [ 102.986576][ T8665] loop5: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 103.009523][ T8665] syz.5.1810: attempt to access beyond end of device [ 103.009523][ T8665] loop5: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 103.024611][ T8665] syz.5.1810: attempt to access beyond end of device [ 103.024611][ T8665] loop5: rw=12288, sector=140, nr_sectors = 4 limit=0 [ 103.038908][ T8665] EXT4-fs error (device loop5): ext4_get_inode_loc:4930: inode #18: block 35: comm syz.5.1810: unable to read itable block [ 103.053442][ T8665] syz.5.1810: attempt to access beyond end of device [ 103.053442][ T8665] loop5: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 103.066741][ T8665] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 103.075371][ T8665] EXT4-fs (loop5): I/O error while writing superblock [ 103.082216][ T8665] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: IO failure [ 103.091016][ T8665] syz.5.1810: attempt to access beyond end of device [ 103.091016][ T8665] loop5: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 103.104287][ T8665] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 103.112776][ T8665] EXT4-fs (loop5): I/O error while writing superblock [ 103.119583][ T8665] EXT4-fs error (device loop5): ext4_ext_truncate:4475: inode #18: comm syz.5.1810: mark_inode_dirty error [ 103.131422][ T8665] syz.5.1810: attempt to access beyond end of device [ 103.131422][ T8665] loop5: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 103.144697][ T8665] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 103.153401][ T8665] EXT4-fs (loop5): I/O error while writing superblock [ 103.160251][ T8665] syz.5.1810: attempt to access beyond end of device [ 103.160251][ T8665] loop5: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 103.173817][ T8665] EXT4-fs error (device loop5): ext4_get_inode_loc:4930: inode #18: block 35: comm syz.5.1810: unable to read itable block [ 103.186744][ T8665] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 103.195243][ T8665] EXT4-fs (loop5): I/O error while writing superblock [ 103.202268][ T8665] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: IO failure [ 103.211361][ T8665] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 103.213552][ T8682] netlink: 'syz.7.1818': attribute type 1 has an invalid length. [ 103.219750][ T8665] EXT4-fs (loop5): I/O error while writing superblock [ 103.234381][ T8665] EXT4-fs error (device loop5): ext4_truncate:4597: inode #18: comm syz.5.1810: mark_inode_dirty error [ 103.245489][ T8665] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 103.253395][ T8682] bond1: (slave gretap1): making interface the new active one [ 103.253821][ T8665] EXT4-fs (loop5): I/O error while writing superblock [ 103.262940][ T8682] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 103.293281][ T4093] EXT4-fs error (device loop5): ext4_get_inode_loc:4930: inode #2: block 34: comm syz-executor: unable to read itable block [ 103.308071][ T4093] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 103.316537][ T4093] EXT4-fs (loop5): I/O error while writing superblock [ 103.323456][ T4093] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: IO failure [ 103.334212][ T4093] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 103.342606][ T4093] EXT4-fs (loop5): I/O error while writing superblock [ 103.349497][ T4093] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz-executor: mark_inode_dirty error [ 103.372743][ T8688] loop7: detected capacity change from 0 to 2048 [ 103.379397][ T4093] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 103.595511][ T3880] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.642248][ T3880] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.712114][ T3880] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.762031][ T3880] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.918738][ T3880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.931973][ T3880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.947985][ T3880] bond0 (unregistering): (slave team0): Releasing backup interface [ 103.967643][ T3880] bond0 (unregistering): Released all slaves [ 103.975364][ T8686] syz.6.1821 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 103.986422][ T8686] CPU: 0 UID: 0 PID: 8686 Comm: syz.6.1821 Tainted: G W 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) [ 103.986461][ T8686] Tainted: [W]=WARN [ 103.986467][ T8686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.986479][ T8686] Call Trace: [ 103.986486][ T8686] [ 103.986493][ T8686] __dump_stack+0x1d/0x30 [ 103.986580][ T8686] dump_stack_lvl+0xe8/0x140 [ 103.986599][ T8686] dump_stack+0x15/0x1b [ 103.986615][ T8686] dump_header+0x81/0x220 [ 103.986725][ T8686] oom_kill_process+0x334/0x3f0 [ 103.986759][ T8686] out_of_memory+0x979/0xb80 [ 103.986834][ T8686] try_charge_memcg+0x5e6/0x9e0 [ 103.986888][ T8686] charge_memcg+0x51/0xc0 [ 103.986922][ T8686] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 103.986962][ T8686] __read_swap_cache_async+0x1df/0x350 [ 103.987126][ T8686] swap_cluster_readahead+0x376/0x3e0 [ 103.987169][ T8686] swapin_readahead+0xde/0x6f0 [ 103.987226][ T8686] ? __filemap_get_folio+0x4f7/0x6b0 [ 103.987255][ T8686] ? __rcu_read_unlock+0x34/0x70 [ 103.987277][ T8686] ? swap_cache_get_folio+0x77/0x200 [ 103.987359][ T8686] do_swap_page+0x301/0x2430 [ 103.987385][ T8686] ? css_rstat_updated+0xcd/0x5b0 [ 103.987427][ T8686] ? __pfx_default_wake_function+0x10/0x10 [ 103.987527][ T8686] handle_mm_fault+0x9a5/0x2be0 [ 103.987556][ T8686] ? mas_walk+0xf2/0x120 [ 103.987601][ T8686] do_user_addr_fault+0x636/0x1090 [ 103.987646][ T8686] exc_page_fault+0x62/0xa0 [ 103.987678][ T8686] asm_exc_page_fault+0x26/0x30 [ 103.987742][ T8686] RIP: 0033:0x7fc213fe6740 [ 103.987757][ T8686] Code: 6e c7 89 13 48 8b 50 08 0f 16 40 50 0f 11 00 48 89 50 50 48 8b 50 10 48 89 78 10 48 89 50 40 48 89 d7 eb b2 66 0f 1f 44 00 00 <64> 48 8b 0c 25 10 00 00 00 8b 91 08 03 00 00 48 8d b9 08 03 00 00 [ 103.987774][ T8686] RSP: 002b:00007ffc464fe128 EFLAGS: 00010206 [ 103.987789][ T8686] RAX: 00000000fffffffa RBX: 00007fc2141e5fa0 RCX: 0000000000000000 [ 103.987801][ T8686] RDX: 00007ffc464fe170 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.987813][ T8686] RBP: 00007fc2141e7ba0 R08: 00000000360eec53 R09: 7fffffffffffffff [ 103.987891][ T8686] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000196c9 [ 103.987904][ T8686] R13: 00007ffc464fe290 R14: ffffffffffffffff R15: 00007ffc464fe2b0 [ 103.987932][ T8686] [ 103.987938][ T8686] memory: usage 307200kB, limit 307200kB, failcnt 211 [ 104.172124][ T6592] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 104.173682][ T8686] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 104.231058][ T8686] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 104.238402][ T8686] Memory cgroup stats for /syz6: [ 104.239175][ T6592] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.239335][ T8686] cache 0 [ 104.256870][ T8686] rss 0 [ 104.259658][ T8686] shmem 0 [ 104.262647][ T8686] mapped_file 0 [ 104.266117][ T8686] dirty 0 [ 104.269064][ T8686] writeback 0 [ 104.272413][ T8686] workingset_refault_anon 38 [ 104.277049][ T8686] workingset_refault_file 0 [ 104.281598][ T8686] swap 196608 [ 104.284917][ T8686] swapcached 0 [ 104.288358][ T8686] pgpgin 35636 [ 104.291793][ T8686] pgpgout 35635 [ 104.295270][ T8686] pgfault 53475 [ 104.298745][ T8686] pgmajfault 24 [ 104.302262][ T8686] inactive_anon 0 [ 104.305907][ T8686] active_anon 0 [ 104.309494][ T8686] inactive_file 0 [ 104.313181][ T8686] active_file 4096 [ 104.316949][ T8686] unevictable 0 [ 104.320443][ T8686] hierarchical_memory_limit 314572800 [ 104.325881][ T8686] hierarchical_memsw_limit 9223372036854771712 [ 104.332091][ T8686] total_cache 0 [ 104.335572][ T8686] total_rss 0 [ 104.338880][ T8686] total_shmem 0 [ 104.342389][ T8686] total_mapped_file 0 [ 104.346389][ T8686] total_dirty 0 [ 104.349897][ T8686] total_writeback 0 [ 104.353768][ T8686] total_workingset_refault_anon 38 [ 104.358907][ T8686] total_workingset_refault_file 0 [ 104.363985][ T8686] total_swap 196608 [ 104.367844][ T8686] total_swapcached 0 [ 104.371807][ T8686] total_pgpgin 35636 [ 104.375726][ T8686] total_pgpgout 35635 [ 104.379786][ T8686] total_pgfault 53475 [ 104.381325][ T8690] chnl_net:caif_netlink_parms(): no params data found [ 104.383859][ T8686] total_pgmajfault 24 [ 104.383870][ T8686] total_inactive_anon 0 [ 104.398864][ T8686] total_active_anon 0 [ 104.402923][ T8686] total_inactive_file 0 [ 104.407098][ T8686] total_active_file 4096 [ 104.411403][ T8686] total_unevictable 0 [ 104.415407][ T8686] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1821,pid=8686,uid=0 [ 104.430165][ T8686] Memory cgroup out of memory: Killed process 8686 (syz.6.1821) total-vm:95676kB, anon-rss:944kB, file-rss:22324kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 104.480872][ T3880] tipc: Left network mode [ 104.532452][ T8690] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.539718][ T8690] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.583405][ T8690] bridge_slave_0: entered allmulticast mode [ 104.598077][ T8690] bridge_slave_0: entered promiscuous mode [ 104.613418][ T3880] hsr_slave_1: left promiscuous mode [ 104.625953][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.633497][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.644945][ T8687] syz.6.1821 (8687) used greatest stack depth: 7160 bytes left [ 104.654765][ T3880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.662480][ T3880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.673788][ T3880] veth1_vlan: left promiscuous mode [ 104.679447][ T3880] veth0_vlan: left promiscuous mode [ 104.694864][ T8720] loop7: detected capacity change from 0 to 512 [ 104.701868][ T8720] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.772046][ T3880] team0 (unregistering): Port device team_slave_1 removed [ 104.783249][ T3880] team0 (unregistering): Port device team_slave_0 removed [ 104.819721][ T8733] loop7: detected capacity change from 0 to 128 [ 104.826787][ T8690] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.833943][ T8690] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.841693][ T8690] bridge_slave_1: entered allmulticast mode [ 104.843598][ T8733] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 104.848640][ T8690] bridge_slave_1: entered promiscuous mode [ 104.855614][ T8733] FAT-fs (loop7): Filesystem has been set read-only [ 104.869932][ T8733] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 104.877902][ T8733] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 104.921233][ T8690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.942227][ T8690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.978019][ T8743] netlink: 'syz.2.1839': attribute type 13 has an invalid length. [ 105.017489][ T8743] gretap0: refused to change device tx_queue_len [ 105.024233][ T8743] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 105.041649][ T8690] team0: Port device team_slave_0 added [ 105.048569][ T8690] team0: Port device team_slave_1 added [ 105.073602][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.080793][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.106911][ T8690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.122468][ T8690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.129798][ T8690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.155870][ T8690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.181841][ T8748] netlink: 566 bytes leftover after parsing attributes in process `syz.6.1841'. [ 105.221915][ T8690] hsr_slave_0: entered promiscuous mode [ 105.232248][ T8690] hsr_slave_1: entered promiscuous mode [ 105.273773][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 105.273792][ T29] audit: type=1326 audit(1753605424.454:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8757 comm="syz.2.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 105.342762][ T29] audit: type=1326 audit(1753605424.454:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8757 comm="syz.2.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 105.366405][ T29] audit: type=1326 audit(1753605424.454:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8757 comm="syz.2.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 105.389878][ T29] audit: type=1326 audit(1753605424.454:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8757 comm="syz.2.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 105.413333][ T29] audit: type=1326 audit(1753605424.454:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8757 comm="syz.2.1846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 105.437448][ T29] audit: type=1326 audit(1753605424.524:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 105.460934][ T29] audit: type=1326 audit(1753605424.524:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 105.484470][ T29] audit: type=1326 audit(1753605424.524:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 105.508038][ T29] audit: type=1326 audit(1753605424.524:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 105.531523][ T29] audit: type=1326 audit(1753605424.524:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8762 comm="syz.2.1848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ed414e9a9 code=0x7ffc0000 [ 105.691702][ T8690] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 105.704225][ T8690] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 105.730613][ T8690] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 105.741532][ T8690] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 105.828263][ T8690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.841489][ T8798] loop7: detected capacity change from 0 to 512 [ 105.849363][ T8796] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1861'. [ 105.852291][ T8690] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.870440][ T3840] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.877752][ T3840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.889700][ T8798] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1859: bg 0: block 248: padding at end of block bitmap is not set [ 105.901451][ T8690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.915175][ T8690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.928411][ T3884] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.935519][ T3884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.944255][ T8798] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.1859: Failed to acquire dquot type 1 [ 105.957410][ T8798] EXT4-fs (loop7): 1 truncate cleaned up [ 105.965541][ T8798] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.988756][ T8798] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.013017][ T8811] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm iou-wrk-8798: deleted inode referenced: 12 [ 106.027525][ T8798] xt_hashlimit: max too large, truncated to 1048576 [ 106.037597][ T8811] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm iou-wrk-8798: deleted inode referenced: 12 [ 106.075996][ T8798] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.1859: deleted inode referenced: 12 [ 106.090283][ T8690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.100602][ T8811] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm iou-wrk-8798: deleted inode referenced: 12 [ 106.142151][ T8811] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm iou-wrk-8798: deleted inode referenced: 12 [ 106.172736][ T8818] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm iou-wrk-8798: deleted inode referenced: 12 [ 106.204752][ T8818] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm iou-wrk-8798: deleted inode referenced: 12 [ 106.230129][ T8818] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm iou-wrk-8798: deleted inode referenced: 12 [ 106.271494][ T8811] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm iou-wrk-8798: deleted inode referenced: 12 [ 106.285852][ T8811] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm iou-wrk-8798: deleted inode referenced: 12 [ 106.328030][ T8841] pim6reg1: entered promiscuous mode [ 106.333478][ T8841] pim6reg1: entered allmulticast mode [ 106.426824][ T8690] veth0_vlan: entered promiscuous mode [ 106.440120][ T8690] veth1_vlan: entered promiscuous mode [ 106.457923][ T8690] veth0_macvtap: entered promiscuous mode [ 106.465849][ T8690] veth1_macvtap: entered promiscuous mode [ 106.477967][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.515662][ T8690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.531085][ T7389] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.552672][ T8690] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.561561][ T8690] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.570335][ T8690] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.579112][ T8690] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.630378][ T8860] loop7: detected capacity change from 0 to 1024 [ 106.689966][ T8863] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.697220][ T8863] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.784160][ T8863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.796656][ T8863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.827720][ T8863] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.836255][ T8863] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.844766][ T8863] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.853309][ T8863] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.861944][ T8863] vxlan0: left promiscuous mode [ 106.867952][ T8863] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.876434][ T8863] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.884826][ T8863] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.893470][ T8863] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.904140][ T8863] geneve2: left promiscuous mode [ 107.101075][ T8889] loop7: detected capacity change from 0 to 512 [ 107.132132][ T8889] EXT4-fs (loop7): too many log groups per flexible block group [ 107.135802][ T8891] loop6: detected capacity change from 0 to 1024 [ 107.139848][ T8889] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 107.189775][ T8889] EXT4-fs (loop7): mount failed [ 107.404999][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.412322][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.494042][ T8919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.507059][ T8919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.508407][ T8938] netlink: 'syz.9.1906': attribute type 10 has an invalid length. [ 107.543288][ T8919] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.551809][ T8919] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.560282][ T8919] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.569431][ T8919] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.580230][ T8944] netlink: 'syz.9.1906': attribute type 10 has an invalid length. [ 107.624515][ T8938] team0: Port device dummy0 added [ 107.661095][ T8944] team0: Port device dummy0 removed [ 107.685684][ T8944] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 107.738098][ T8948] SELinux: failed to load policy [ 107.795056][ T8958] hub 6-0:1.0: USB hub found [ 107.809335][ T8958] hub 6-0:1.0: 8 ports detected [ 107.983303][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 107.990883][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.010486][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.017943][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.025428][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.033080][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.040543][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.047966][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.055473][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.063010][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.070487][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.077936][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.085957][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.093501][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.100954][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.108418][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.115873][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.123330][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.130780][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.138342][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.145903][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.153481][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.160930][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.168369][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.175877][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.183353][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.190811][ T6592] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 108.229277][ T6592] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 108.277374][ T8982] loop9: detected capacity change from 0 to 512 [ 108.304948][ T8982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.326973][ T8991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.336127][ T8991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.345907][ T8982] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.421527][ T8982] loop9: detected capacity change from 512 to 0 [ 108.431154][ T8982] bio_check_eod: 8444 callbacks suppressed [ 108.431174][ T8982] syz.9.1925: attempt to access beyond end of device [ 108.431174][ T8982] loop9: rw=12288, sector=84, nr_sectors = 4 limit=0 [ 108.457733][ T8982] syz.9.1925: attempt to access beyond end of device [ 108.457733][ T8982] loop9: rw=12288, sector=80, nr_sectors = 4 limit=0 [ 108.474391][ T8982] EXT4-fs error (device loop9): ext4_write_dquot:6913: comm syz.9.1925: Failed to commit dquot type 1 [ 108.485839][ T8982] syz.9.1925: attempt to access beyond end of device [ 108.485839][ T8982] loop9: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 108.499119][ T8982] buffer_io_error: 5 callbacks suppressed [ 108.499134][ T8982] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 108.513317][ T8982] EXT4-fs (loop9): I/O error while writing superblock [ 108.520219][ T8982] syz.9.1925: attempt to access beyond end of device [ 108.520219][ T8982] loop9: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 108.533878][ T8982] syz.9.1925: attempt to access beyond end of device [ 108.533878][ T8982] loop9: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 108.547335][ T8982] syz.9.1925: attempt to access beyond end of device [ 108.547335][ T8982] loop9: rw=12288, sector=140, nr_sectors = 4 limit=0 [ 108.560938][ T8982] EXT4-fs error (device loop9): ext4_get_inode_loc:4930: inode #18: block 35: comm syz.9.1925: unable to read itable block [ 108.573846][ T8982] syz.9.1925: attempt to access beyond end of device [ 108.573846][ T8982] loop9: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 108.587034][ T8982] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 108.595427][ T8982] EXT4-fs (loop9): I/O error while writing superblock [ 108.602258][ T8982] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: IO failure [ 108.611045][ T8982] syz.9.1925: attempt to access beyond end of device [ 108.611045][ T8982] loop9: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 108.624339][ T8982] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 108.632814][ T8982] EXT4-fs (loop9): I/O error while writing superblock [ 108.639664][ T8982] EXT4-fs error (device loop9): ext4_ext_truncate:4475: inode #18: comm syz.9.1925: mark_inode_dirty error [ 108.651304][ T8982] syz.9.1925: attempt to access beyond end of device [ 108.651304][ T8982] loop9: rw=14337, sector=0, nr_sectors = 4 limit=0 [ 108.664592][ T8982] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 108.672980][ T8982] EXT4-fs (loop9): I/O error while writing superblock [ 108.679869][ T8982] syz.9.1925: attempt to access beyond end of device [ 108.679869][ T8982] loop9: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 108.694346][ T8982] EXT4-fs error (device loop9): ext4_get_inode_loc:4930: inode #18: block 35: comm syz.9.1925: unable to read itable block [ 108.708090][ T8982] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 108.717212][ T8982] EXT4-fs (loop9): I/O error while writing superblock [ 108.724167][ T8982] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: IO failure [ 108.727173][ T9008] loop6: detected capacity change from 0 to 1024 [ 108.735170][ T8982] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 108.739850][ T9008] ext4: Unknown parameter 'uid<00000000000000000000' [ 108.748073][ T8982] EXT4-fs (loop9): I/O error while writing superblock [ 108.761277][ T8982] EXT4-fs error (device loop9): ext4_truncate:4597: inode #18: comm syz.9.1925: mark_inode_dirty error [ 108.774320][ T8982] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 108.782749][ T8982] EXT4-fs (loop9): I/O error while writing superblock [ 108.806804][ T8690] EXT4-fs error (device loop9): ext4_get_inode_loc:4930: inode #2: block 34: comm syz-executor: unable to read itable block [ 108.819950][ T8690] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 108.828634][ T8690] EXT4-fs (loop9): I/O error while writing superblock [ 108.835501][ T8690] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6255: IO failure [ 108.844463][ T8690] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 108.852947][ T8690] EXT4-fs (loop9): I/O error while writing superblock [ 108.859797][ T8690] EXT4-fs error (device loop9): ext4_dirty_inode:6459: inode #2: comm syz-executor: mark_inode_dirty error [ 108.871719][ T8690] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 109.660193][ T9038] ================================================================== [ 109.668365][ T9038] BUG: KCSAN: data-race in __dev_change_flags / xfrm_lookup_with_ifid [ 109.676786][ T9038] [ 109.679141][ T9038] read-write to 0xffff8881191190b0 of 4 bytes by task 9039 on cpu 0: [ 109.687239][ T9038] __dev_change_flags+0x9a/0x400 [ 109.692223][ T9038] netif_change_flags+0x5a/0xd0 [ 109.697118][ T9038] do_setlink+0x9d2/0x2810 [ 109.701575][ T9038] rtnl_newlink+0xd8b/0x12d0 [ 109.706207][ T9038] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 109.711177][ T9038] netlink_rcv_skb+0x123/0x220 [ 109.715991][ T9038] rtnetlink_rcv+0x1c/0x30 [ 109.720452][ T9038] netlink_unicast+0x5a8/0x680 [ 109.725267][ T9038] netlink_sendmsg+0x58b/0x6b0 [ 109.730073][ T9038] __sock_sendmsg+0x142/0x180 [ 109.734784][ T9038] ____sys_sendmsg+0x31e/0x4e0 [ 109.739562][ T9038] ___sys_sendmsg+0x17b/0x1d0 [ 109.744268][ T9038] __x64_sys_sendmsg+0xd4/0x160 [ 109.749142][ T9038] x64_sys_call+0x2999/0x2fb0 [ 109.753853][ T9038] do_syscall_64+0xd2/0x200 [ 109.758375][ T9038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.764300][ T9038] [ 109.766647][ T9038] read to 0xffff8881191190b0 of 4 bytes by task 9038 on cpu 1: [ 109.774211][ T9038] xfrm_lookup_with_ifid+0xed3/0x1360 [ 109.779624][ T9038] xfrm_lookup_route+0x3a/0x110 [ 109.784520][ T9038] ip_route_output_flow+0xf1/0x130 [ 109.789669][ T9038] raw_sendmsg+0x9f5/0xe50 [ 109.794115][ T9038] inet_sendmsg+0xc2/0xd0 [ 109.798504][ T9038] __sock_sendmsg+0x102/0x180 [ 109.803213][ T9038] ____sys_sendmsg+0x345/0x4e0 [ 109.808022][ T9038] ___sys_sendmsg+0x17b/0x1d0 [ 109.812731][ T9038] __sys_sendmmsg+0x178/0x300 [ 109.817431][ T9038] __x64_sys_sendmmsg+0x57/0x70 [ 109.822327][ T9038] x64_sys_call+0x2f2f/0x2fb0 [ 109.827052][ T9038] do_syscall_64+0xd2/0x200 [ 109.831585][ T9038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.837512][ T9038] [ 109.839864][ T9038] value changed: 0x00000081 -> 0x00001021 [ 109.845633][ T9038] [ 109.847989][ T9038] Reported by Kernel Concurrency Sanitizer on: [ 109.854174][ T9038] CPU: 1 UID: 0 PID: 9038 Comm: syz.6.1946 Tainted: G W 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) [ 109.868290][ T9038] Tainted: [W]=WARN [ 109.872194][ T9038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.882293][ T9038] ================================================================== [ 109.959842][ T9039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.977652][ T9039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.005869][ T9039] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.014337][ T9039] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.022951][ T9039] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.031548][ T9039] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.042234][ T9039] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.050737][ T9039] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.059125][ T9039] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.067547][ T9039] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 110.076524][ T9039] vxlan0: left promiscuous mode [ 110.167529][ T9036] syz.2.1945 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 110.181727][ T9036] CPU: 0 UID: 0 PID: 9036 Comm: syz.2.1945 Tainted: G W 6.16.0-rc7-syzkaller-00140-gec2df4364666 #0 PREEMPT(voluntary) [ 110.181774][ T9036] Tainted: [W]=WARN [ 110.181783][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 110.181800][ T9036] Call Trace: [ 110.181809][ T9036] [ 110.181820][ T9036] __dump_stack+0x1d/0x30 [ 110.181850][ T9036] dump_stack_lvl+0xe8/0x140 [ 110.181872][ T9036] dump_stack+0x15/0x1b [ 110.181895][ T9036] dump_header+0x81/0x220 [ 110.181938][ T9036] oom_kill_process+0x334/0x3f0 [ 110.181983][ T9036] out_of_memory+0x979/0xb80 [ 110.182023][ T9036] try_charge_memcg+0x5e6/0x9e0 [ 110.182072][ T9036] obj_cgroup_charge_pages+0xa6/0x150 [ 110.182103][ T9036] __memcg_kmem_charge_page+0x9f/0x170 [ 110.182157][ T9036] __alloc_frozen_pages_noprof+0x188/0x360 [ 110.182244][ T9036] alloc_pages_mpol+0xb3/0x250 [ 110.182293][ T9036] alloc_pages_noprof+0x90/0x130 [ 110.182333][ T9036] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 110.182387][ T9036] __kvmalloc_node_noprof+0x30f/0x4e0 [ 110.182462][ T9036] ? ip_set_alloc+0x1f/0x30 [ 110.182541][ T9036] ? ip_set_alloc+0x1f/0x30 [ 110.182569][ T9036] ? __kmalloc_cache_noprof+0x189/0x320 [ 110.182596][ T9036] ip_set_alloc+0x1f/0x30 [ 110.182626][ T9036] hash_netiface_create+0x282/0x740 [ 110.182664][ T9036] ? __pfx_hash_netiface_create+0x10/0x10 [ 110.182698][ T9036] ip_set_create+0x3c9/0x960 [ 110.182745][ T9036] ? __nla_parse+0x40/0x60 [ 110.182807][ T9036] nfnetlink_rcv_msg+0x4c6/0x590 [ 110.182858][ T9036] ? selinux_capable+0x1f9/0x270 [ 110.182932][ T9036] netlink_rcv_skb+0x123/0x220 [ 110.182977][ T9036] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 110.183015][ T9036] nfnetlink_rcv+0x16b/0x1690 [ 110.183076][ T9036] ? insn_get_prefixes+0x99d/0xbe0 [ 110.183162][ T9036] ? insn_get_prefixes+0x99d/0xbe0 [ 110.183283][ T9036] ? ___slab_alloc+0x275/0x900 [ 110.183350][ T9036] ? insn_get_opcode+0x750/0x790 [ 110.183382][ T9036] ? xas_create+0x950/0xbe0 [ 110.183480][ T9036] ? should_fail_ex+0x30/0x280 [ 110.183517][ T9036] ? __rcu_read_unlock+0x34/0x70 [ 110.183546][ T9036] ? context_to_sid+0x2da/0x310 [ 110.183648][ T9036] ? sidtab_context_to_sid+0x5d/0x5e0 [ 110.183679][ T9036] ? mls_compute_sid+0x139/0x560 [ 110.183720][ T9036] ? mls_context_isvalid+0x85/0x1f0 [ 110.183751][ T9036] ? ___slab_alloc+0x275/0x900 [ 110.183886][ T9036] ? should_fail_ex+0x30/0x280 [ 110.183926][ T9036] ? selinux_nlmsg_lookup+0x99/0x890 [ 110.184045][ T9036] ? selinux_netlink_send+0x59f/0x5f0 [ 110.184083][ T9036] ? __rcu_read_unlock+0x34/0x70 [ 110.184103][ T9036] ? __netlink_lookup+0x266/0x2a0 [ 110.184139][ T9036] netlink_unicast+0x5a8/0x680 [ 110.184176][ T9036] netlink_sendmsg+0x58b/0x6b0 [ 110.184249][ T9036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.184270][ T9036] __sock_sendmsg+0x142/0x180 [ 110.184296][ T9036] ____sys_sendmsg+0x31e/0x4e0 [ 110.184323][ T9036] ___sys_sendmsg+0x17b/0x1d0 [ 110.184438][ T9036] __x64_sys_sendmsg+0xd4/0x160 [ 110.184461][ T9036] x64_sys_call+0x2999/0x2fb0 [ 110.184482][ T9036] do_syscall_64+0xd2/0x200 [ 110.184504][ T9036] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 110.184564][ T9036] ? clear_bhb_loop+0x40/0x90 [ 110.184590][ T9036] ? clear_bhb_loop+0x40/0x90 [ 110.184611][ T9036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.184632][ T9036] RIP: 0033:0x7f4ed414e9a9 [ 110.184648][ T9036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.184678][ T9036] RSP: 002b:00007f4ed27af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.184704][ T9036] RAX: ffffffffffffffda RBX: 00007f4ed4375fa0 RCX: 00007f4ed414e9a9 [ 110.184742][ T9036] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000005 [ 110.184759][ T9036] RBP: 00007f4ed41d0d69 R08: 0000000000000000 R09: 0000000000000000 [ 110.184771][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.184782][ T9036] R13: 0000000000000000 R14: 00007f4ed4375fa0 R15: 00007ffd310a28c8 [ 110.184800][ T9036] [ 110.184806][ T9036] memory: usage 307200kB, limit 307200kB, failcnt 167 [ 110.586409][ T9036] memory+swap: usage 307560kB, limit 9007199254740988kB, failcnt 0 [ 110.594338][ T9036] kmem: usage 307108kB, limit 9007199254740988kB, failcnt 0 [ 110.601654][ T9036] Memory cgroup stats for /syz2: [ 110.602010][ T9036] cache 4096 [ 110.610346][ T9036] rss 0 [ 110.613245][ T9036] shmem 0 [ 110.616198][ T9036] mapped_file 0 [ 110.619701][ T9036] dirty 0 [ 110.622662][ T9036] writeback 0 [ 110.625952][ T9036] workingset_refault_anon 533 [ 110.630671][ T9036] workingset_refault_file 85 [ 110.635294][ T9036] swap 368640 [ 110.638583][ T9036] swapcached 0 [ 110.642089][ T9036] pgpgin 72180 [ 110.645488][ T9036] pgpgout 72179 [ 110.648998][ T9036] pgfault 74722 [ 110.652484][ T9036] pgmajfault 83 [ 110.655951][ T9036] inactive_anon 0 [ 110.659667][ T9036] active_anon 0 [ 110.663232][ T9036] inactive_file 0 [ 110.666864][ T9036] active_file 4096 [ 110.670629][ T9036] unevictable 0 [ 110.674105][ T9036] hierarchical_memory_limit 314572800 [ 110.679476][ T9036] hierarchical_memsw_limit 9223372036854771712 [ 110.685761][ T9036] total_cache 4096 [ 110.689492][ T9036] total_rss 0 [ 110.692804][ T9036] total_shmem 0 [ 110.696261][ T9036] total_mapped_file 0 [ 110.700263][ T9036] total_dirty 0 [ 110.703742][ T9036] total_writeback 0 [ 110.707548][ T9036] total_workingset_refault_anon 533 [ 110.712886][ T9036] total_workingset_refault_file 85 [ 110.717998][ T9036] total_swap 368640 [ 110.721869][ T9036] total_swapcached 0 [ 110.725846][ T9036] total_pgpgin 72180 [ 110.729786][ T9036] total_pgpgout 72179 [ 110.733802][ T9036] total_pgfault 74722 [ 110.737782][ T9036] total_pgmajfault 83 [ 110.741867][ T9036] total_inactive_anon 0 [ 110.746073][ T9036] total_active_anon 0 [ 110.750125][ T9036] total_inactive_file 0 [ 110.754368][ T9036] total_active_file 4096 [ 110.758610][ T9036] total_unevictable 0 [ 110.762675][ T9036] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1945,pid=9035,uid=0 [ 110.777353][ T9036] Memory cgroup out of memory: Killed process 9035 (syz.2.1945) total-vm:95676kB, anon-rss:1072kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 111.094906][ T3869] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.153110][ T3869] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.204532][ T3869] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.273668][ T3869] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.347571][ T3869] bridge_slave_1: left allmulticast mode [ 111.353488][ T3869] bridge_slave_1: left promiscuous mode [ 111.359267][ T3869] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.369355][ T3869] bridge_slave_0: left allmulticast mode [ 111.375119][ T3869] bridge_slave_0: left promiscuous mode [ 111.380927][ T3869] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.483798][ T3869] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.495672][ T3869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.506254][ T3869] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 111.517131][ T3869] bond0 (unregistering): Released all slaves [ 111.582960][ T3869] hsr_slave_0: left promiscuous mode [ 111.589323][ T3869] hsr_slave_1: left promiscuous mode [ 111.595831][ T3869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.603375][ T3869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.613517][ T3869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.621008][ T3869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.631063][ T3869] veth1_macvtap: left promiscuous mode [ 111.636575][ T3869] veth0_macvtap: left promiscuous mode [ 111.642254][ T3869] veth1_vlan: left promiscuous mode [ 111.647524][ T3869] veth0_vlan: left promiscuous mode [ 111.718480][ T3869] team0 (unregistering): Port device team_slave_1 removed [ 111.728451][ T3869] team0 (unregistering): Port device team_slave_0 removed