last executing test programs: 1m30.027357002s ago: executing program 3 (id=108): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0) 1m29.780956906s ago: executing program 3 (id=113): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000940)=0xff) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 1m29.721103146s ago: executing program 3 (id=114): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) 1m29.704615467s ago: executing program 3 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0/../file0\x00', 0x580, 0x40) move_mount(r0, &(0x7f00000002c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) 1m29.690286877s ago: executing program 3 (id=116): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m29.47713489s ago: executing program 3 (id=119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x22020600) fgetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0) 1m29.47694994s ago: executing program 32 (id=119): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x22020600) fgetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', 0x0, 0x0) 1.809431061s ago: executing program 1 (id=2834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68f}, 0x18) r2 = io_uring_setup(0x192, &(0x7f0000000240)={0x0, 0x4914, 0x400, 0x7fffffe, 0x3d7}) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r3, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r3, 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 1.687606682s ago: executing program 1 (id=2836): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000304090000000000000000004500", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 1.394529897s ago: executing program 1 (id=2847): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.308155119s ago: executing program 5 (id=2851): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x2000006, &(0x7f0000000bc0)={[{@shortname_mixed}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@uni_xlate}, {@fat=@tz_utc}, {@numtail}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_winnt}, {@rodir}, {@shortname_mixed}, {@fat=@nocase}, {@shortname_lower}, {@shortname_mixed}, {@fat=@errors_remount}, {@numtail}], [{@smackfsdef={'smackfsdef', 0x3d, 'utf8=0'}}, {@flag='dirsync'}, {@smackfshat={'smackfshat', 0x3d, '&'}}, {@euid_gt}, {@obj_role}, {@hash}]}, 0x25, 0x34f, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb76}, 0x18) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c0002800500010000000000240001801400018008000100ac000200ac1414bb0c000280050001"], 0x80}}, 0x0) 1.265162329s ago: executing program 1 (id=2854): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.177261601s ago: executing program 4 (id=2855): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.061309993s ago: executing program 5 (id=2857): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001340)="6dcb05f2e48e61674ebd89769f9b927046079a4c6ab892d9f86b4055e41f9354be76dac275a1f97b8ae4a5a32ef98168f544f231803f620017a7a9faa294c78047e4ca39d474942f867f63510b836739483f0abaca269f0e173855387e16996e23c2482f194dd78e17f67aeeda5d35a842c298f9972314014c439d57cd74cb190e527db50d4760e4a54c12735b8e98871b0c7bd10748e969ef864f65381d4db90528adcbdf460d31074d34b27770933de479090331e728e8434347c93c52f985105a3d57f766486ea16428a7e8054cff9dbec74e9c77fe4c483e306e1042874ae8e51db87e", 0xe5}, {&(0x7f0000000640)="0590ab7c5379d4fc3e9f9cd7dbeebfa58219a6820d9af837dbcbb2e713865c85f980a1ef4eecbf07c2a0f45d118c3f334e39e74064f379244309ac82016ccc31d15441ba1fc6e673239bfbf58a8ff42206", 0x51}, {&(0x7f0000000000)="195954405d070d1fff60070f9216", 0xe}, {&(0x7f00000006c0)="7be02767d8579dea4ccb83a128b87f01f3ff83ecebf1b92655f3329a8b5f631313aaaf8df9cd1b87a3d5bb30a5444f003445a8d96e4e88b7e94b8e342161b3927daebc3dc249ccac6357ddf21ac7312840c0d8fe", 0x54}], 0x4}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000d00)="eb5ab84f63a3517d3618292b4ac1c3f98bad4e232370016d1a77cbc3bcfdfaf47084debfb2cfe2d2910b600a46da20e4d9d162b95c37a2f7362be4aee1b96ec27c6014366cb3e06feb6fdf3128008590136f1d2781f0c4bae67dfc2e5e90db8affd0f9dfdff5c7d4543ba46409faf1ed3e7e6ce5281d59906fa8390b05377edd602eac7f2355b9cb81cf7525e72e1c3ae911f3f79c15ea7ac5f66cb39aa01ff256619823723957b6d4307be4c0f0960afbb98e8255b65d88b4c3a7d1aa2ac1b67bdee8c264d87b0299cf15a4d793d16f1915b8ef2df3c576da4846193b", 0xdd}, {&(0x7f0000000e00)="d584132c6710c94c4fbf0cbd772bc95ecb4f7c2c6dbf979b1583404a7778cb520be332e623ad5378e40d7d7cc801f1f1f39db7058ddcff7d98d6a4160eb55c0e323d0d979d31e829fdbbb8e07cb27bdf060d9f8909549ec8a05ecf2a3f7f56b35682f23b24d98841173ac3fb95c5bcf1ba0bb0d2cb44abf5a7cdc13b6b2f064e53ee5bd71668c9c977c16aa59d06d034ae7e53f77adeac09bd64ccf1a827dc5733c0cf95678d79c909af85e61929f7ee60ea27be4cc898f1fccaf2d2c160ad88fc0eb5594f89da17bff25539da950c29b99356688d97d9d188dc44a0a6671781873ee856a69a3ee9f1a5049cea8d61250c6d2b96", 0xf4}, {&(0x7f0000001440)="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", 0x160}], 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="30000000000000000000000007000000890d622b81b2bf68770eab6a9c9403a78907f2ffffffff07076fac14142401001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000002e0000001000000001400000000000000000000000100000008000000000000001c"], 0x88}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 776.603518ms ago: executing program 0 (id=2876): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 639.201029ms ago: executing program 2 (id=2867): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r0, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 638.646909ms ago: executing program 0 (id=2878): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x7f06, 0x80, 0x0, 0x3e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) 614.68966ms ago: executing program 2 (id=2868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) close(r1) 544.061391ms ago: executing program 2 (id=2869): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x24040000) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x3, 0x800}, &(0x7f0000001200)=0x0, &(0x7f0000001040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x23, 0x6000, @fd_index=0x6, 0x75a5, 0x0, 0x0, 0xa, 0x1}) r3 = eventfd(0x3ff) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000001240)=r3, 0x1) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 543.763301ms ago: executing program 4 (id=2870): r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r2}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x5, 0x0, 0x0, @void, @value}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 494.696572ms ago: executing program 4 (id=2871): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = dup(r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) 453.133013ms ago: executing program 4 (id=2883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000580), 0xfe, 0x507, &(0x7f0000001780)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) 452.788102ms ago: executing program 0 (id=2872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 452.617873ms ago: executing program 2 (id=2873): r0 = syz_io_uring_setup(0x71e2, &(0x7f0000000280)={0x0, 0x0, 0x10180, 0x5, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000300)) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x2004002, 0x10, 0x0, 0x2e9, 0x0, r0}, &(0x7f0000001480), &(0x7f00000014c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) io_uring_enter(r0, 0x2d3e, 0x2d25, 0x1, 0x0, 0x0) 346.380094ms ago: executing program 2 (id=2874): socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000006000000180100006020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000035000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) 345.820374ms ago: executing program 1 (id=2887): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0x8000, 0x0, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 345.382574ms ago: executing program 0 (id=2875): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) 192.301257ms ago: executing program 5 (id=2877): r0 = epoll_create(0x3ff) r1 = epoll_create1(0x80000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x2000000}) 190.868617ms ago: executing program 4 (id=2879): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffff9c, 0x0, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x1102, 0x5dd8, 0x0, 0x3, 0xa32, 0x7, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) 100.099698ms ago: executing program 5 (id=2880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) 93.029388ms ago: executing program 5 (id=2892): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x34, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) 82.438748ms ago: executing program 0 (id=2893): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='kfree\x00', r1}, 0x18) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 81.294928ms ago: executing program 1 (id=2894): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffb3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 979.21µs ago: executing program 2 (id=2881): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 772.019µs ago: executing program 5 (id=2882): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp, 0x2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r0, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev}, 0x14) 439.35µs ago: executing program 0 (id=2896): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 0s ago: executing program 4 (id=2897): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0x8000, 0x0, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0xfbb0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) kernel console output (not intermixed with test programs): 'noacl' [ 71.450878][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.492368][ T6900] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 71.684959][ T6913] loop5: detected capacity change from 0 to 128 [ 71.695600][ T6913] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 71.703495][ T6913] FAT-fs (loop5): Filesystem has been set read-only [ 71.710483][ T6913] syz.5.1248: attempt to access beyond end of device [ 71.710483][ T6913] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 71.724508][ T6913] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 71.732339][ T6913] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 71.741768][ T6913] syz.5.1248: attempt to access beyond end of device [ 71.741768][ T6913] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.756320][ T6913] syz.5.1248: attempt to access beyond end of device [ 71.756320][ T6913] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.771344][ T6913] syz.5.1248: attempt to access beyond end of device [ 71.771344][ T6913] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.785836][ T6913] syz.5.1248: attempt to access beyond end of device [ 71.785836][ T6913] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 71.935988][ T6934] smc: net device bond0 applied user defined pnetid SYZ0 [ 72.087042][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'. [ 72.098366][ T6950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1266'. [ 72.169541][ T6956] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1267'. [ 72.267085][ T6963] loop1: detected capacity change from 0 to 8192 [ 72.276607][ T6963] syz.1.1271: attempt to access beyond end of device [ 72.276607][ T6963] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 72.290656][ T6963] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 72.298514][ T6963] FAT-fs (loop1): Filesystem has been set read-only [ 72.306244][ T6963] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 72.315433][ T6963] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 72.342675][ T6981] loop5: detected capacity change from 0 to 2048 [ 72.359574][ T6983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6983 comm=syz.4.1281 [ 72.389837][ T6981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.402345][ T6981] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.777263][ T41] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 72.825709][ T41] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 230 with error 117 [ 72.838386][ T41] EXT4-fs (loop5): This should not happen!! Data will be lost [ 72.838386][ T41] [ 72.950732][ T7016] loop2: detected capacity change from 0 to 8192 [ 73.478585][ T7047] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1306'. [ 73.493755][ T7047] netlink: 'syz.1.1306': attribute type 5 has an invalid length. [ 73.501502][ T7047] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1306'. [ 73.704415][ T7070] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1317'. [ 73.715207][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 73.715219][ T29] audit: type=1400 audit(1745224197.894:1645): avc: denied { ioctl } for pid=7069 comm="syz.0.1318" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 73.790822][ T7075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1320'. [ 73.814933][ T7078] 9pnet: p9_errstr2errno: server reported unknown error &ëŸjâáë=‹ùÆ«&B [ 73.844541][ T29] audit: type=1326 audit(1745224198.014:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 73.867975][ T29] audit: type=1326 audit(1745224198.024:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 73.891413][ T29] audit: type=1326 audit(1745224198.024:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 73.914635][ T29] audit: type=1326 audit(1745224198.024:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 73.938038][ T29] audit: type=1326 audit(1745224198.024:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 73.966105][ T29] audit: type=1326 audit(1745224198.124:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 73.989680][ T29] audit: type=1326 audit(1745224198.124:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 74.013086][ T29] audit: type=1326 audit(1745224198.124:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 74.036771][ T29] audit: type=1326 audit(1745224198.124:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7081 comm="syz.1.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 74.088653][ T6981] syz.5.1289 (6981) used greatest stack depth: 6024 bytes left [ 74.126113][ T7089] loop2: detected capacity change from 0 to 2049 [ 74.144988][ T7089] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 64 [ 74.172893][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.268610][ T7091] loop1: detected capacity change from 0 to 8192 [ 74.295809][ T7091] +}[@: attempt to access beyond end of device [ 74.295809][ T7091] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 74.352851][ T7106] loop0: detected capacity change from 0 to 128 [ 74.362169][ T7106] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.395646][ T7106] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 74.434634][ T7113] netlink: 'syz.1.1336': attribute type 13 has an invalid length. [ 74.514623][ T7118] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 74.539231][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.546431][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.585764][ T7113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.596360][ T7113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.622068][ T7113] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.630481][ T7113] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.639050][ T7113] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.647556][ T7113] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.896329][ T7157] loop5: detected capacity change from 0 to 1024 [ 74.903727][ T7157] EXT4-fs: Ignoring removed bh option [ 74.913083][ T7159] macsec1: entered allmulticast mode [ 74.918486][ T7159] bridge0: entered allmulticast mode [ 74.925665][ T7159] bridge0: port 3(macsec1) entered blocking state [ 74.932263][ T7159] bridge0: port 3(macsec1) entered disabled state [ 74.940192][ T7157] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.959383][ T7159] bridge0: left allmulticast mode [ 74.989938][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.134404][ T7171] loop5: detected capacity change from 0 to 256 [ 75.265933][ T7179] loop5: detected capacity change from 0 to 128 [ 75.273552][ T7179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 75.281601][ T7179] System zones: 1-3, 19-19, 35-36 [ 75.287478][ T7179] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.300557][ T7179] ext4 filesystem being mounted at /234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.302484][ T7184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1364'. [ 75.366287][ T3719] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.428291][ T7188] loop1: detected capacity change from 0 to 8192 [ 75.456994][ T3378] kernel write not supported for file /648/attr/exec (pid: 3378 comm: kworker/0:3) [ 75.486751][ T7198] loop7: detected capacity change from 0 to 16384 [ 75.498903][ T7200] loop1: detected capacity change from 0 to 1024 [ 75.526320][ T7200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.542154][ T7200] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 88: padding at end of block bitmap is not set [ 75.566320][ T7198] I/O error, dev loop7, sector 14848 op 0x0:(READ) flags 0x80700 phys_seg 28 prio class 0 [ 75.577022][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.577479][ T7198] I/O error, dev loop7, sector 15104 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 75.596339][ T7198] I/O error, dev loop7, sector 14848 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 75.605955][ T7198] Buffer I/O error on dev loop7, logical block 1856, async page read [ 75.627204][ T7197] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 75.636962][ T7197] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 75.645512][ T7197] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 75.653874][ T7197] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 75.662218][ T7197] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 75.670659][ T7197] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 75.679026][ T7197] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 75.687468][ T7197] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 75.695812][ T7197] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 75.704214][ T7197] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 75.714959][ T7197] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 75.727698][ T7197] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 75.740377][ T7197] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 75.752992][ T7197] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 75.765629][ T7197] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 75.777828][ T7197] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 75.841924][ T7210] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 75.969432][ T7219] loop2: detected capacity change from 0 to 1024 [ 75.977289][ T7219] EXT4-fs: Ignoring removed bh option [ 75.998374][ T7219] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.124815][ T7229] loop1: detected capacity change from 0 to 2049 [ 76.131889][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.149323][ T7229] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 64 [ 76.183692][ T7231] netlink: 'syz.2.1383': attribute type 10 has an invalid length. [ 76.199174][ T7231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.220429][ T7231] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 76.304739][ T7237] loop1: detected capacity change from 0 to 1024 [ 76.322169][ T7237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.347377][ T7237] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1386: bg 0: block 88: padding at end of block bitmap is not set [ 76.366355][ T3378] kernel write not supported for file /529/attr/exec (pid: 3378 comm: kworker/0:3) [ 76.437944][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.444114][ T7254] netlink: 'syz.5.1395': attribute type 13 has an invalid length. [ 76.499256][ T7259] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 76.541158][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.548545][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.592623][ T7265] loop0: detected capacity change from 0 to 2050 [ 76.600293][ T7265] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 64 [ 76.620880][ T7263] loop1: detected capacity change from 0 to 2048 [ 76.628024][ T7263] ext4: Invalid gid '0x00000000ffffffff' [ 76.655869][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.672259][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.714977][ T7254] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.723988][ T7254] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.732833][ T7254] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.741883][ T7254] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.919606][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1413'. [ 76.940031][ T7293] netlink: 'syz.4.1411': attribute type 10 has an invalid length. [ 76.949079][ T7297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1413'. [ 76.966287][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.995387][ T7293] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 77.058377][ T7303] loop0: detected capacity change from 0 to 8192 [ 77.071789][ T7303] +}[@: attempt to access beyond end of device [ 77.071789][ T7303] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 77.139871][ T7315] loop0: detected capacity change from 0 to 512 [ 77.148783][ T7315] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 77.159092][ T7315] EXT4-fs (loop0): orphan cleanup on readonly fs [ 77.166664][ T7315] EXT4-fs warning (device loop0): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 77.181455][ T7315] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 77.188376][ T7315] EXT4-fs error (device loop0): ext4_orphan_get:1390: inode #16: comm syz.0.1420: iget: immutable or append flags not allowed on symlinks [ 77.202974][ T7315] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.1420: couldn't read orphan inode 16 (err -117) [ 77.216524][ T7315] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 77.597622][ T7336] loop5: detected capacity change from 0 to 512 [ 77.606014][ T3378] kernel write not supported for file /659/attr/exec (pid: 3378 comm: kworker/0:3) [ 77.627560][ T7336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.640316][ T7336] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.654390][ T7336] tipc: Started in network mode [ 77.659252][ T7336] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 77.668203][ T7336] tipc: Enabling of bearer rejected, failed to enable media [ 77.678114][ T7342] loop2: detected capacity change from 0 to 8192 [ 77.687970][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.703561][ T7342] +}[@: attempt to access beyond end of device [ 77.703561][ T7342] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 77.727460][ T7344] loop5: detected capacity change from 0 to 2048 [ 77.734555][ T7344] ext4: Invalid gid '0x00000000ffffffff' [ 77.829664][ T7356] loop5: detected capacity change from 0 to 128 [ 77.863284][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1440'. [ 77.874284][ T7361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1440'. [ 77.959919][ T7369] loop2: detected capacity change from 0 to 2048 [ 77.977639][ T7369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.993742][ T7369] ext4 filesystem being mounted at /304/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.004717][ T7375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1456'. [ 78.038676][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.076501][ T31] kworker/u8:1: attempt to access beyond end of device [ 78.076501][ T31] loop5: rw=1, sector=153, nr_sectors = 8 limit=128 [ 78.110155][ T31] kworker/u8:1: attempt to access beyond end of device [ 78.110155][ T31] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 78.113115][ T7379] vlan0: entered allmulticast mode [ 78.123539][ T31] kworker/u8:1: attempt to access beyond end of device [ 78.123539][ T31] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 78.142021][ T31] kworker/u8:1: attempt to access beyond end of device [ 78.142021][ T31] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 78.157343][ T41] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 78.174752][ T31] kworker/u8:1: attempt to access beyond end of device [ 78.174752][ T31] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 78.182376][ T41] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 233 with error 117 [ 78.200666][ T41] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.200666][ T41] [ 78.202236][ T31] kworker/u8:1: attempt to access beyond end of device [ 78.202236][ T31] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 78.225109][ T31] kworker/u8:1: attempt to access beyond end of device [ 78.225109][ T31] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 78.238663][ T31] kworker/u8:1: attempt to access beyond end of device [ 78.238663][ T31] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 78.335454][ T7394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1454'. [ 78.353279][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1454'. [ 78.608322][ T48] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 249 with max blocks 2 with error 117 [ 78.620931][ T48] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.620931][ T48] [ 78.633457][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 78.642421][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1469'. [ 78.722642][ T7435] loop5: detected capacity change from 0 to 512 [ 78.731437][ T7435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.747723][ T7435] ext4 filesystem being mounted at /262/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 78.774864][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.804964][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 78.804993][ T29] audit: type=1326 audit(1745224202.984:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 78.834759][ T29] audit: type=1326 audit(1745224202.984:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 78.909023][ T29] audit: type=1326 audit(1745224202.984:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="syz.1.1477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 78.932546][ T29] audit: type=1326 audit(1745224202.984:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 78.955632][ T29] audit: type=1326 audit(1745224202.984:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 78.978759][ T29] audit: type=1326 audit(1745224202.984:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 79.001704][ T29] audit: type=1326 audit(1745224202.984:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 79.024748][ T29] audit: type=1326 audit(1745224202.984:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 79.047754][ T29] audit: type=1326 audit(1745224202.984:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 79.070884][ T29] audit: type=1326 audit(1745224203.034:1825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7441 comm="kfree" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f640fb3e169 code=0x7ffc0000 [ 79.127469][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.247374][ T7470] loop0: detected capacity change from 0 to 512 [ 79.275922][ T7470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.337384][ T7480] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 79.345720][ T7470] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.404932][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.547052][ T7503] xt_connbytes: Forcing CT accounting to be enabled [ 79.555164][ T7503] Cannot find del_set index 1 as target [ 79.724825][ T7528] ipvlan2: entered promiscuous mode [ 79.730479][ T7528] bridge0: port 3(ipvlan2) entered blocking state [ 79.737094][ T7528] bridge0: port 3(ipvlan2) entered disabled state [ 79.743950][ T7528] ipvlan2: entered allmulticast mode [ 79.749279][ T7528] bridge0: entered allmulticast mode [ 79.755480][ T7528] ipvlan2: left allmulticast mode [ 79.760523][ T7528] bridge0: left allmulticast mode [ 79.814902][ T7530] loop1: detected capacity change from 0 to 512 [ 79.821761][ T7530] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.833111][ T7530] EXT4-fs (loop1): 1 truncate cleaned up [ 79.839731][ T7530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.863445][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.883175][ T7534] loop1: detected capacity change from 0 to 764 [ 80.492169][ T7571] loop0: detected capacity change from 0 to 256 [ 80.827633][ T7602] loop2: detected capacity change from 0 to 164 [ 81.038213][ T7612] bridge: RTM_NEWNEIGH with invalid ether address [ 81.209516][ T7627] loop5: detected capacity change from 0 to 512 [ 81.226868][ T7627] EXT4-fs: Ignoring removed orlov option [ 81.242332][ T7627] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.1552: corrupted in-inode xattr: invalid ea_ino [ 81.262782][ T7627] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.1552: couldn't read orphan inode 15 (err -117) [ 81.283133][ T7627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.371446][ T7639] xt_connbytes: Forcing CT accounting to be enabled [ 81.381116][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.416692][ T7644] smc: net device bond0 erased user defined pnetid SYZ0 [ 82.125756][ T7723] veth1_to_bond: entered allmulticast mode [ 82.135105][ T7723] veth1_to_bond: entered promiscuous mode [ 82.145731][ T7723] veth1_to_bond: left promiscuous mode [ 82.151294][ T7723] veth1_to_bond: left allmulticast mode [ 82.384771][ T7758] SELinux: security_context_str_to_sid (aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa.) failed with errno=-22 [ 82.555624][ T7639] Cannot find add_set index 0 as target [ 82.690810][ T7812] loop5: detected capacity change from 0 to 512 [ 82.701630][ T7811] loop0: detected capacity change from 0 to 128 [ 82.726731][ T7812] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 82.751301][ T7812] EXT4-fs (loop5): 1 truncate cleaned up [ 82.759003][ T7812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.806742][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.866489][ T7836] __nla_validate_parse: 3 callbacks suppressed [ 82.866546][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1595'. [ 82.915664][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1597'. [ 82.924660][ T7840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1597'. [ 82.933646][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1597'. [ 82.944128][ T7840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1597'. [ 82.953087][ T7840] netlink: 'syz.2.1597': attribute type 6 has an invalid length. [ 83.110532][ T7854] loop0: detected capacity change from 0 to 512 [ 83.118473][ T7854] EXT4-fs: Ignoring removed orlov option [ 83.144002][ T7854] EXT4-fs error (device loop0): ext4_iget_extra_inode:4693: inode #15: comm syz.0.1614: corrupted in-inode xattr: invalid ea_ino [ 83.164378][ T7854] EXT4-fs error (device loop0): ext4_orphan_get:1395: comm syz.0.1614: couldn't read orphan inode 15 (err -117) [ 83.192141][ T7854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.243038][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.276557][ T7870] loop5: detected capacity change from 0 to 2048 [ 83.333704][ T7881] loop0: detected capacity change from 0 to 512 [ 83.340869][ T7870] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.362931][ T7881] EXT4-fs (loop0): 1 orphan inode deleted [ 83.369859][ T7881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.374229][ T52] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 83.384406][ T7881] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.409291][ T7886] Direct I/O collision with buffered writes! File: /file2 Comm: syz.5.1609 [ 83.505102][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.610265][ T7907] veth1_to_bond: entered allmulticast mode [ 83.616390][ T7907] veth1_to_bond: entered promiscuous mode [ 83.623287][ T7907] veth1_to_bond: left promiscuous mode [ 83.628982][ T7907] veth1_to_bond: left allmulticast mode [ 83.805538][ T7923] IPv4: Oversized IP packet from 127.202.26.0 [ 84.066187][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 84.066203][ T29] audit: type=1326 audit(1745224208.244:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 84.096043][ T29] audit: type=1326 audit(1745224208.244:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 84.120376][ T29] audit: type=1326 audit(1745224208.244:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 84.143823][ T29] audit: type=1326 audit(1745224208.244:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 84.167235][ T29] audit: type=1326 audit(1745224208.244:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 84.190631][ T29] audit: type=1326 audit(1745224208.244:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 84.214091][ T29] audit: type=1326 audit(1745224208.244:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 84.237544][ T29] audit: type=1326 audit(1745224208.244:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 84.261022][ T29] audit: type=1326 audit(1745224208.244:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 84.284515][ T29] audit: type=1326 audit(1745224208.244:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 84.539882][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.612908][ T7956] xt_hashlimit: max too large, truncated to 1048576 [ 84.629779][ T7958] x_tables: ip_tables: osf match: only valid for protocol 6 [ 84.671062][ T7961] loop1: detected capacity change from 0 to 2048 [ 84.677602][ T7968] bond0: option arp_validate: invalid value (384) [ 84.699735][ T7961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.713044][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1654'. [ 84.751032][ T7972] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 84.784785][ T7981] Direct I/O collision with buffered writes! File: /file2 Comm: syz.1.1649 [ 84.799139][ T7980] loop2: detected capacity change from 0 to 512 [ 84.809035][ T7980] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.818201][ T7980] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 84.864884][ T7980] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 84.875337][ T7980] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 84.876731][ T7989] netlink: 'syz.4.1662': attribute type 4 has an invalid length. [ 84.883462][ T7980] System zones: 0-2, 18-18, 34-34 [ 84.897461][ T7980] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 84.921656][ T7980] EXT4-fs (loop2): 1 truncate cleaned up [ 84.928043][ T7980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.971855][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.991347][ T7994] loop2: detected capacity change from 0 to 128 [ 84.999773][ T7994] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 85.012484][ T7994] ext4 filesystem being mounted at /355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.131579][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.466598][ T8012] SELinux: ebitmap: truncated map [ 85.478043][ T8012] SELinux: failed to load policy [ 85.659955][ T8025] SELinux: failed to load policy [ 85.785838][ T8030] gretap1: entered allmulticast mode [ 85.799568][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1681'. [ 85.810994][ T8030] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 85.820267][ T8020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.829044][ T8020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.870893][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.922103][ T8040] loop2: detected capacity change from 0 to 128 [ 86.064579][ T8053] loop1: detected capacity change from 0 to 128 [ 86.091699][ T8053] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 86.111410][ T8053] ext4 filesystem being mounted at /305/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.210376][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.282838][ T8071] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 86.405155][ T8087] loop5: detected capacity change from 0 to 128 [ 86.417938][ T8087] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 86.430781][ T8087] ext4 filesystem being mounted at /306/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.519322][ T3719] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.537847][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1708'. [ 86.548326][ T8099] loop1: detected capacity change from 0 to 164 [ 86.551274][ T8097] vlan0: entered promiscuous mode [ 86.559701][ T8097] gretap0: entered promiscuous mode [ 86.569246][ T8099] bio_check_eod: 106 callbacks suppressed [ 86.569261][ T8099] +}[@: attempt to access beyond end of device [ 86.569261][ T8099] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 86.591528][ T8099] +}[@: attempt to access beyond end of device [ 86.591528][ T8099] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 86.668923][ T8110] serio: Serial port ptm0 [ 86.763927][ T8118] SELinux: ebitmap: truncated map [ 86.770219][ T8118] SELinux: failed to load policy [ 86.820097][ T8124] loop1: detected capacity change from 0 to 512 [ 86.826603][ T8124] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.833495][ T8124] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.854724][ T8124] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 86.871252][ T8124] EXT4-fs (loop1): 1 truncate cleaned up [ 86.877546][ T8124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.919426][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.940963][ T8132] loop1: detected capacity change from 0 to 1024 [ 86.966601][ T8132] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 87.033864][ T8145] netlink: 'syz.2.1729': attribute type 4 has an invalid length. [ 87.043305][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 87.224247][ T12] bridge_slave_1: left allmulticast mode [ 87.229921][ T12] bridge_slave_1: left promiscuous mode [ 87.235712][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.243368][ T12] bridge_slave_0: left promiscuous mode [ 87.248985][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.270257][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 87.402727][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.413074][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.426627][ T12] bond0 (unregistering): Released all slaves [ 87.492903][ T8151] chnl_net:caif_netlink_parms(): no params data found [ 87.526434][ T12] hsr_slave_0: left promiscuous mode [ 87.537643][ T12] hsr_slave_1: left promiscuous mode [ 87.549425][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.557427][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.569508][ T8182] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1741'. [ 87.663201][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.670335][ T8151] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.677596][ T8151] bridge_slave_0: entered allmulticast mode [ 87.684058][ T8151] bridge_slave_0: entered promiscuous mode [ 87.690818][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.697980][ T8151] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.705466][ T8151] bridge_slave_1: entered allmulticast mode [ 87.711958][ T8151] bridge_slave_1: entered promiscuous mode [ 87.730712][ T8151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.740725][ T8151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.758870][ T8151] team0: Port device team_slave_0 added [ 87.765435][ T8151] team0: Port device team_slave_1 added [ 87.780529][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.787504][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.813416][ T8151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.824588][ T8151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.831591][ T8151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.857483][ T8151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.884145][ T8151] hsr_slave_0: entered promiscuous mode [ 87.890090][ T8151] hsr_slave_1: entered promiscuous mode [ 88.161022][ T8151] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.170112][ T8151] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.179133][ T8151] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.188024][ T8151] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.201711][ T8151] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.208765][ T8151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.216205][ T8151] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.223290][ T8151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.252254][ T8151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.262256][ T390] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.270767][ T390] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.284238][ T8151] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.294249][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.301357][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.311681][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.318828][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.385325][ T8151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.388557][ T8231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1759'. [ 88.440399][ T8242] netlink: 'syz.0.1761': attribute type 33 has an invalid length. [ 88.448305][ T8242] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1761'. [ 88.454799][ T8151] veth0_vlan: entered promiscuous mode [ 88.464762][ T8242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'. [ 88.466264][ T8151] veth1_vlan: entered promiscuous mode [ 88.501404][ T8151] veth0_macvtap: entered promiscuous mode [ 88.508549][ T8151] veth1_macvtap: entered promiscuous mode [ 88.520714][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.531182][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.541143][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.551742][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.565131][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.574224][ T8246] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1763'. [ 88.587839][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.598363][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.608197][ T8151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.618738][ T8151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.630061][ T8151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.640554][ T8151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.649377][ T8151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.658125][ T8151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.666834][ T8151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.717868][ T8254] netlink: 'syz.1.1731': attribute type 4 has an invalid length. [ 88.729727][ T8254] netlink: 'syz.1.1731': attribute type 4 has an invalid length. [ 88.885093][ T8252] loop2: detected capacity change from 0 to 512 [ 88.917477][ T8252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.964053][ T8252] ext4 filesystem being mounted at /386/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.996005][ T8266] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1769'. [ 89.044181][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.117444][ T8276] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1774'. [ 89.252044][ T8288] smc: net device bond0 applied user defined pnetid S [ 89.363191][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 89.363205][ T29] audit: type=1400 audit(1745224213.534:2042): avc: denied { ioctl } for pid=8298 comm="syz.2.1784" path="socket:[19195]" dev="sockfs" ino=19195 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 89.428350][ T8306] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 89.434880][ T8306] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.442321][ T8306] vhci_hcd vhci_hcd.0: Device attached [ 89.450504][ T8306] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 89.457015][ T8306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 89.464653][ T8306] vhci_hcd vhci_hcd.0: Device attached [ 89.471823][ T8306] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 89.480829][ T8306] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 89.487348][ T8306] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 89.494925][ T8306] vhci_hcd vhci_hcd.0: Device attached [ 89.501703][ T8306] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(11) [ 89.508332][ T8306] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.515964][ T8306] vhci_hcd vhci_hcd.0: Device attached [ 89.522117][ T8306] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 89.531031][ T8306] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(15) [ 89.537624][ T8306] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.545372][ T8306] vhci_hcd vhci_hcd.0: Device attached [ 89.551848][ T8306] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(17) [ 89.558437][ T8306] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 89.566067][ T8306] vhci_hcd vhci_hcd.0: Device attached [ 89.572777][ T8322] vhci_hcd: connection closed [ 89.572860][ T8320] vhci_hcd: connection closed [ 89.576524][ T8318] vhci_hcd: connection closed [ 89.577730][ T8307] vhci_hcd: connection closed [ 89.582532][ T8316] vhci_hcd: connection closed [ 89.588890][ T8311] vhci_hcd: connection closed [ 89.591730][ T12] vhci_hcd: stop threads [ 89.605288][ T12] vhci_hcd: release socket [ 89.609699][ T12] vhci_hcd: disconnect device [ 89.614758][ T12] vhci_hcd: stop threads [ 89.619087][ T12] vhci_hcd: release socket [ 89.623528][ T12] vhci_hcd: disconnect device [ 89.628659][ T12] vhci_hcd: stop threads [ 89.632930][ T12] vhci_hcd: release socket [ 89.637714][ T12] vhci_hcd: disconnect device [ 89.643614][ T10] vhci_hcd: vhci_device speed not set [ 89.649163][ T12] vhci_hcd: stop threads [ 89.650501][ T29] audit: type=1400 audit(1745224213.824:2043): avc: denied { listen } for pid=8324 comm="syz.5.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.653433][ T12] vhci_hcd: release socket [ 89.677473][ T12] vhci_hcd: disconnect device [ 89.684851][ T29] audit: type=1400 audit(1745224213.864:2044): avc: denied { accept } for pid=8324 comm="syz.5.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.704621][ T10] usb 5-1: new full-speed USB device number 2 using vhci_hcd [ 89.708665][ T12] vhci_hcd: stop threads [ 89.712131][ T10] usb 5-1: enqueue for inactive port 0 [ 89.716286][ T12] vhci_hcd: release socket [ 89.721748][ T10] usb 5-1: enqueue for inactive port 0 [ 89.731620][ T12] vhci_hcd: disconnect device [ 89.731862][ T10] usb 5-1: enqueue for inactive port 0 [ 89.742213][ T12] vhci_hcd: stop threads [ 89.746497][ T12] vhci_hcd: release socket [ 89.750970][ T12] vhci_hcd: disconnect device [ 89.768836][ T29] audit: type=1400 audit(1745224213.944:2045): avc: denied { mounton } for pid=8328 comm="syz.5.1792" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 89.803721][ T10] vhci_hcd: vhci_device speed not set [ 89.928609][ T8333] 9pnet: p9_errstr2errno: server reported unknown error í p4 [ 90.518639][ T8388] loop2: p4 size 8388608 extends beyond EOD, truncated [ 90.763014][ T8429] loop5: detected capacity change from 0 to 512 [ 90.772134][ T8429] EXT4-fs (loop5): orphan cleanup on readonly fs [ 90.780092][ T8429] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm wÞ£ÿ: bad orphan inode 13 [ 90.796726][ T8429] ext4_test_bit(bit=12, block=18) = 1 [ 90.802127][ T8429] is_bad_inode(inode)=0 [ 90.806365][ T8429] NEXT_ORPHAN(inode)=2130706432 [ 90.811225][ T8429] max_ino=32 [ 90.814551][ T8429] i_nlink=1 [ 90.830391][ T8429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.855299][ T8437] netlink: 'syz.2.1841': attribute type 3 has an invalid length. [ 90.865188][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.883111][ T8441] netlink: 'syz.5.1842': attribute type 33 has an invalid length. [ 90.891102][ T8441] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1842'. [ 90.900751][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1842'. [ 90.931818][ T8443] netlink: 848 bytes leftover after parsing attributes in process `syz.2.1843'. [ 91.028010][ T8455] random: crng reseeded on system resumption [ 91.152229][ T8462] loop1: detected capacity change from 0 to 512 [ 91.159882][ T8462] EXT4-fs: Ignoring removed orlov option [ 91.167062][ T8462] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.1852: corrupted in-inode xattr: invalid ea_ino [ 91.182174][ T8462] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.1852: couldn't read orphan inode 15 (err -117) [ 91.196174][ T8462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.212952][ T8466] vlan2: entered allmulticast mode [ 91.218114][ T8466] veth0: entered allmulticast mode [ 91.254742][ T8151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.426097][ T8485] wireguard0: entered promiscuous mode [ 91.431700][ T8485] wireguard0: entered allmulticast mode [ 91.500520][ T8496] loop5: detected capacity change from 0 to 2048 [ 91.544154][ T8496] loop5: p1 < > p4 [ 91.548346][ T8496] loop5: p4 size 8388608 extends beyond EOD, truncated [ 91.577082][ T8477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.586011][ T8477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.767900][ T8525] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 91.774482][ T8525] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.782364][ T8525] vhci_hcd vhci_hcd.0: Device attached [ 91.797693][ T8525] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 91.804283][ T8525] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 91.811897][ T8525] vhci_hcd vhci_hcd.0: Device attached [ 91.834967][ T8525] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 91.854922][ T8525] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 91.861435][ T8525] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 91.868846][ T8525] vhci_hcd vhci_hcd.0: Device attached [ 91.891479][ T8525] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 91.898092][ T8525] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 91.905862][ T8525] vhci_hcd vhci_hcd.0: Device attached [ 91.916412][ T8525] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 91.948843][ T8525] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 91.955489][ T8525] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 91.963079][ T8525] vhci_hcd vhci_hcd.0: Device attached [ 91.973730][ T3356] vhci_hcd: vhci_device speed not set [ 91.984110][ T8525] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(17) [ 91.990851][ T8525] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 91.998464][ T8525] vhci_hcd vhci_hcd.0: Device attached [ 92.021343][ T8548] vhci_hcd: connection closed [ 92.021379][ T8540] vhci_hcd: connection closed [ 92.021403][ T8535] vhci_hcd: connection closed [ 92.021730][ T48] vhci_hcd: stop threads [ 92.028520][ T8532] vhci_hcd: connection closed [ 92.030949][ T48] vhci_hcd: release socket [ 92.030962][ T48] vhci_hcd: disconnect device [ 92.036244][ T3356] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 92.044973][ T48] vhci_hcd: stop threads [ 92.065627][ T48] vhci_hcd: release socket [ 92.070042][ T48] vhci_hcd: disconnect device [ 92.076119][ T8528] vhci_hcd: connection closed [ 92.076199][ T8526] vhci_hcd: connection reset by peer [ 92.109272][ T48] vhci_hcd: stop threads [ 92.113523][ T48] vhci_hcd: release socket [ 92.117990][ T48] vhci_hcd: disconnect device [ 92.139570][ T48] vhci_hcd: stop threads [ 92.143849][ T48] vhci_hcd: release socket [ 92.148276][ T48] vhci_hcd: disconnect device [ 92.159544][ T48] vhci_hcd: stop threads [ 92.163823][ T48] vhci_hcd: release socket [ 92.168250][ T48] vhci_hcd: disconnect device [ 92.173364][ T48] vhci_hcd: stop threads [ 92.177682][ T48] vhci_hcd: release socket [ 92.182189][ T48] vhci_hcd: disconnect device [ 92.199794][ T8565] loop1: detected capacity change from 0 to 2048 [ 92.234742][ T8565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.293843][ T8151] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.457612][ T8610] random: crng reseeded on system resumption [ 92.715942][ T8641] xt_hashlimit: size too large, truncated to 1048576 [ 92.773509][ T8652] loop2: detected capacity change from 0 to 512 [ 92.830493][ T8652] EXT4-fs (loop2): orphan cleanup on readonly fs [ 92.838879][ T8652] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1929: bg 0: block 248: padding at end of block bitmap is not set [ 92.891258][ T8652] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.1929: Failed to acquire dquot type 1 [ 92.926618][ T8652] EXT4-fs (loop2): 1 truncate cleaned up [ 92.932859][ T8652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.958419][ T8652] EXT4-fs error (device loop2): ext4_lookup:1793: inode #2: comm syz.2.1929: deleted inode referenced: 12 [ 93.106699][ T8684] pim6reg1: entered promiscuous mode [ 93.112022][ T8684] pim6reg1: entered allmulticast mode [ 93.240272][ T8696] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 93.268103][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.275565][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.283027][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.290851][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.298341][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.305786][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.313288][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.320770][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.328172][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.335624][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.343023][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.350476][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.357885][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.367363][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.374900][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.382290][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.389873][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.396339][ T8707] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 93.397254][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.408011][ T8706] IPVS: stopping backup sync thread 8707 ... [ 93.413847][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.413870][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.413891][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.413911][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.413932][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.413956][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.463516][ T8709] validate_nla: 2 callbacks suppressed [ 93.463532][ T8709] netlink: 'syz.0.1952': attribute type 11 has an invalid length. [ 93.464334][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.464360][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.464384][ T3379] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 93.467842][ T3379] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 93.470157][ T8709] __nla_validate_parse: 8 callbacks suppressed [ 93.470233][ T8709] netlink: 448 bytes leftover after parsing attributes in process `syz.0.1952'. [ 93.621501][ T8723] loop5: detected capacity change from 0 to 512 [ 93.647356][ T8723] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.838996][ T8741] netlink: 'syz.4.1966': attribute type 11 has an invalid length. [ 93.848494][ T8741] netlink: 448 bytes leftover after parsing attributes in process `syz.4.1966'. [ 93.887458][ T8746] netlink: 'syz.0.1968': attribute type 10 has an invalid length. [ 93.895991][ T8746] hsr_slave_0: left promiscuous mode [ 93.901768][ T8746] hsr_slave_1: left promiscuous mode [ 93.959190][ T8755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1972'. [ 94.029481][ T8766] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1977'. [ 94.203733][ T8773] sch_fq: defrate 0 ignored. [ 94.235998][ T8777] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1982'. [ 94.409398][ T8787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1987'. [ 94.421239][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 94.430662][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.438143][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.445953][ T8789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.453467][ T8789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.464252][ T8789] bond0: (slave batadv0): Releasing backup interface [ 94.658721][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 94.658736][ T29] audit: type=1326 audit(1745224218.834:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 94.702297][ T29] audit: type=1326 audit(1745224218.864:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 94.725831][ T29] audit: type=1326 audit(1745224218.864:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 94.749329][ T29] audit: type=1326 audit(1745224218.864:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 94.772938][ T29] audit: type=1326 audit(1745224218.864:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 94.796378][ T29] audit: type=1326 audit(1745224218.864:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8801 comm="syz.5.1994" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 94.909271][ T29] audit: type=1400 audit(1745224219.084:2204): avc: denied { write } for pid=8815 comm="syz.0.2000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.028848][ T29] audit: type=1326 audit(1745224219.204:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 95.055250][ T29] audit: type=1326 audit(1745224219.204:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 95.078680][ T29] audit: type=1326 audit(1745224219.204:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8822 comm="syz.5.2004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 95.122431][ T8830] xt_hashlimit: size too large, truncated to 1048576 [ 95.295454][ T8847] loop2: detected capacity change from 0 to 512 [ 95.319589][ T8847] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.2014: Invalid inode bitmap blk 4 in block_group 0 [ 95.395938][ T8851] loop5: detected capacity change from 0 to 512 [ 95.417809][ T8851] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 95.441596][ T8855] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 95.467170][ T8851] EXT4-fs (loop5): 1 truncate cleaned up [ 95.913425][ T8891] loop5: detected capacity change from 0 to 2048 [ 95.920010][ T8891] ext4: Unknown parameter 'noacl' [ 95.966358][ T8893] loop5: detected capacity change from 0 to 256 [ 96.112988][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2040'. [ 96.122026][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.129953][ T8908] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.256889][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2042'. [ 96.266502][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2042'. [ 96.374925][ T8924] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 97.133649][ T3356] usb 1-1: enqueue for inactive port 0 [ 97.139174][ T3356] usb 1-1: enqueue for inactive port 0 [ 97.213748][ T3356] vhci_hcd: vhci_device speed not set [ 97.279223][ T8962] loop2: detected capacity change from 0 to 2048 [ 97.285954][ T8962] ext4: Unknown parameter 'noacl' [ 97.335994][ T8966] vlan2: entered allmulticast mode [ 97.362778][ T8969] loop2: detected capacity change from 0 to 2048 [ 97.403928][ T8969] loop2: p1 < > p4 [ 97.408146][ T8969] loop2: p4 size 8388608 extends beyond EOD, truncated [ 97.512108][ T8977] loop5: detected capacity change from 0 to 8192 [ 97.521496][ T8977] syz.5.2068: attempt to access beyond end of device [ 97.521496][ T8977] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 97.538280][ T8977] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 97.546145][ T8977] FAT-fs (loop5): Filesystem has been set read-only [ 97.554928][ T8977] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 97.563015][ T8977] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 97.691198][ T9002] loop5: detected capacity change from 0 to 164 [ 97.698535][ T9002] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.711811][ T9002] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 97.720811][ T9002] Symlink component flag not implemented [ 97.726489][ T9002] Symlink component flag not implemented [ 97.732582][ T9002] Symlink component flag not implemented (7) [ 97.738598][ T9002] Symlink component flag not implemented (116) [ 97.881884][ T9022] netlink: 'syz.0.2090': attribute type 4 has an invalid length. [ 98.143431][ T9056] loop5: detected capacity change from 0 to 256 [ 98.174906][ T9060] syzkaller1: entered promiscuous mode [ 98.180489][ T9060] syzkaller1: entered allmulticast mode [ 98.462994][ T9090] 9pnet_fd: Insufficient options for proto=fd [ 98.500916][ T9099] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 98.530631][ T9095] __nla_validate_parse: 2 callbacks suppressed [ 98.530645][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2121'. [ 98.545732][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2121'. [ 98.556744][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2121'. [ 98.635042][ T9105] netlink: 'syz.0.2126': attribute type 21 has an invalid length. [ 98.639642][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2121'. [ 98.652117][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2121'. [ 98.666632][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2121'. [ 98.720523][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2121'. [ 98.729641][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2121'. [ 98.749418][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2121'. [ 98.795749][ T9127] 9pnet_fd: Insufficient options for proto=fd [ 98.929609][ T9146] pim6reg: entered allmulticast mode [ 98.938646][ T9146] pim6reg: left allmulticast mode [ 99.303452][ T9187] pim6reg: entered allmulticast mode [ 99.310927][ T9187] pim6reg: left allmulticast mode [ 99.335820][ T9191] ip6gre1: entered allmulticast mode [ 99.428502][ T9202] bridge0: port 3(bond0) entered blocking state [ 99.435016][ T9202] bridge0: port 3(bond0) entered disabled state [ 99.450707][ T9202] bond0: entered allmulticast mode [ 99.457054][ T9202] bond_slave_0: entered allmulticast mode [ 99.462820][ T9202] bond_slave_1: entered allmulticast mode [ 99.472992][ T9202] bond0: entered promiscuous mode [ 99.478169][ T9202] bond_slave_0: entered promiscuous mode [ 99.483915][ T9202] bond_slave_1: entered promiscuous mode [ 99.497533][ T9204] bond0: left allmulticast mode [ 99.502406][ T9204] bond_slave_0: left allmulticast mode [ 99.507928][ T9204] bond_slave_1: left allmulticast mode [ 99.513441][ T9204] bond0: left promiscuous mode [ 99.518263][ T9204] bond_slave_0: left promiscuous mode [ 99.523733][ T9204] bond_slave_1: left promiscuous mode [ 99.529237][ T9204] bridge0: port 3(bond0) entered disabled state [ 99.671744][ T9226] loop1: detected capacity change from 0 to 2048 [ 99.702224][ T9226] Alternate GPT is invalid, using primary GPT. [ 99.708625][ T9226] loop1: p1 p2 p3 [ 99.803278][ T9252] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 99.810837][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 99.810848][ T29] audit: type=1326 audit(1745224223.974:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edb66e169 code=0x7ffc0000 [ 99.840466][ T29] audit: type=1326 audit(1745224223.974:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8edb66e169 code=0x7ffc0000 [ 99.863999][ T29] audit: type=1326 audit(1745224223.974:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8edb66e1a3 code=0x7ffc0000 [ 99.887341][ T29] audit: type=1326 audit(1745224223.974:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8edb66e1a3 code=0x7ffc0000 [ 99.910755][ T29] audit: type=1326 audit(1745224223.974:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edb66e169 code=0x7ffc0000 [ 99.934288][ T29] audit: type=1326 audit(1745224223.974:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8edb66e169 code=0x7ffc0000 [ 99.957794][ T29] audit: type=1326 audit(1745224223.974:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edb66e169 code=0x7ffc0000 [ 99.983958][ T29] audit: type=1326 audit(1745224223.984:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8edb66e169 code=0x7ffc0000 [ 100.007375][ T29] audit: type=1326 audit(1745224224.064:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edb66e169 code=0x7ffc0000 [ 100.030892][ T29] audit: type=1326 audit(1745224224.064:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9251 comm="syz.1.2186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8edb66e169 code=0x7ffc0000 [ 100.078896][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2191'. [ 100.236682][ T9289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.245440][ T9289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.263123][ T9291] vlan2: entered allmulticast mode [ 100.268366][ T9291] bond0: entered allmulticast mode [ 100.273511][ T9291] bond_slave_0: entered allmulticast mode [ 100.279369][ T9291] bond_slave_1: entered allmulticast mode [ 100.394648][ T9302] tipc: Failed to remove unknown binding: 66,1,1/0:3908770668/3908770670 [ 100.422571][ T9304] netem: change failed [ 100.463481][ T9309] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 100.492684][ T9313] loop5: detected capacity change from 0 to 1024 [ 100.499722][ T9313] EXT4-fs: Ignoring removed nobh option [ 100.505400][ T9313] EXT4-fs: Ignoring removed bh option [ 100.521880][ T9313] EXT4-fs mount: 7 callbacks suppressed [ 100.521893][ T9313] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.560665][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.596721][ T9325] kernel profiling enabled (shift: 6) [ 100.621682][ T9324] loop2: detected capacity change from 0 to 2048 [ 100.645456][ T9324] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.807106][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.348215][ T9376] SELinux: security policydb version 18 (MLS) not backwards compatible [ 101.357021][ T9376] SELinux: failed to load policy [ 101.506457][ T9392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.515551][ T9392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.161930][ T9459] netlink: 'syz.1.2249': attribute type 4 has an invalid length. [ 102.173309][ T9459] netlink: 'syz.1.2249': attribute type 4 has an invalid length. [ 102.219163][ T9466] loop2: detected capacity change from 0 to 128 [ 102.407397][ T9479] loop1: detected capacity change from 0 to 1764 [ 102.744339][ T31] kworker/u8:1: attempt to access beyond end of device [ 102.744339][ T31] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 102.776416][ T31] kworker/u8:1: attempt to access beyond end of device [ 102.776416][ T31] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 102.790082][ T31] kworker/u8:1: attempt to access beyond end of device [ 102.790082][ T31] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 102.803778][ T31] kworker/u8:1: attempt to access beyond end of device [ 102.803778][ T31] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 102.821193][ T31] kworker/u8:1: attempt to access beyond end of device [ 102.821193][ T31] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 102.835525][ T31] kworker/u8:1: attempt to access beyond end of device [ 102.835525][ T31] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 102.849502][ T31] kworker/u8:1: attempt to access beyond end of device [ 102.849502][ T31] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 102.864557][ T31] kworker/u8:1: attempt to access beyond end of device [ 102.864557][ T31] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 102.878098][ T31] kworker/u8:1: attempt to access beyond end of device [ 102.878098][ T31] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 102.892768][ T31] kworker/u8:1: attempt to access beyond end of device [ 102.892768][ T31] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 103.005460][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 103.013227][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 103.038212][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.045953][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.053710][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.061385][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.069099][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.076804][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.084499][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.092153][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.099842][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.107544][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.115282][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.122961][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.130676][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.138408][ T3356] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x0 [ 103.149470][ T3356] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 103.282338][ T9544] loop5: detected capacity change from 0 to 2048 [ 103.344098][ T9544] loop5: p1 < > p4 [ 103.361898][ T9548] netlink: 'syz.0.2286': attribute type 1 has an invalid length. [ 103.372409][ T9544] loop5: p4 size 8388608 extends beyond EOD, truncated [ 103.504554][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.511985][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.519413][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.526953][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.534413][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.541899][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.549486][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.556974][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.564395][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.571777][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.579242][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.586643][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.594050][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.601562][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.609063][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.616549][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.623987][ T1051] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 103.632139][ T1051] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 103.752681][ T9567] loop5: detected capacity change from 0 to 1024 [ 103.771440][ T9567] EXT4-fs error (device loop5): ext4_acquire_dquot:6935: comm syz.5.2292: Failed to acquire dquot type 0 [ 103.882307][ T9567] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 103.936344][ T9567] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2292: corrupted inode contents [ 103.950509][ T9567] EXT4-fs error (device loop5): ext4_dirty_inode:6103: inode #13: comm syz.5.2292: mark_inode_dirty error [ 103.964260][ T9567] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2292: corrupted inode contents [ 103.979905][ T9567] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #13: comm syz.5.2292: mark_inode_dirty error [ 103.992598][ T9567] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2292: corrupted inode contents [ 104.006820][ T9567] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 104.041662][ T9567] EXT4-fs error (device loop5): ext4_do_update_inode:5211: inode #13: comm syz.5.2292: corrupted inode contents [ 104.077726][ T9567] EXT4-fs error (device loop5): ext4_truncate:4255: inode #13: comm syz.5.2292: mark_inode_dirty error [ 104.120481][ T9567] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 104.136419][ T9567] EXT4-fs (loop5): 1 truncate cleaned up [ 104.147001][ T9567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.218186][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.253418][ T9597] loop5: detected capacity change from 0 to 256 [ 104.293125][ T9602] __nla_validate_parse: 4 callbacks suppressed [ 104.293138][ T9602] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2305'. [ 104.722320][ T9650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2327'. [ 104.749386][ T9656] loop5: detected capacity change from 0 to 512 [ 104.773512][ T9656] EXT4-fs error (device loop5): ext4_iget_extra_inode:4693: inode #15: comm syz.5.2330: corrupted in-inode xattr: invalid ea_ino [ 104.802300][ T9656] EXT4-fs error (device loop5): ext4_orphan_get:1395: comm syz.5.2330: couldn't read orphan inode 15 (err -117) [ 104.842265][ T9656] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.859500][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 104.859543][ T29] audit: type=1400 audit(1745224229.034:2519): avc: denied { connect } for pid=9667 comm="syz.4.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 104.930052][ T9656] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 104.966459][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.017670][ T29] audit: type=1326 audit(1745224229.194:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.5.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 105.041331][ T29] audit: type=1326 audit(1745224229.194:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.5.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 105.068323][ T29] audit: type=1326 audit(1745224229.194:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.5.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 105.085904][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2347'. [ 105.091758][ T29] audit: type=1326 audit(1745224229.194:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.5.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 105.115756][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2347'. [ 105.124071][ T29] audit: type=1326 audit(1745224229.194:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.5.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 105.124098][ T29] audit: type=1326 audit(1745224229.194:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.5.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 105.179959][ T29] audit: type=1326 audit(1745224229.194:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.5.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 105.203351][ T29] audit: type=1326 audit(1745224229.194:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.5.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 105.227016][ T29] audit: type=1326 audit(1745224229.194:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9690 comm="syz.5.2345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 105.284597][ T9708] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 105.410017][ T9719] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2357'. [ 105.420134][ T9720] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 105.838085][ T9729] loop2: detected capacity change from 0 to 256 [ 105.871718][ T9731] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2362'. [ 105.894716][ T9731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.930463][ T9731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.944368][ T9731] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 105.961751][ T9731] bond1: (slave vti0): Error -95 calling set_mac_address [ 106.086045][ T9739] loop8: detected capacity change from 0 to 1 [ 106.094988][ T9739] buffer_io_error: 1847 callbacks suppressed [ 106.095001][ T9739] Buffer I/O error on dev loop8, logical block 0, async page read [ 106.109911][ T9739] Buffer I/O error on dev loop8, logical block 0, async page read [ 106.117770][ T9739] loop8: unable to read partition table [ 106.123898][ T9739] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 106.170318][ T9748] SELinux: syz.1.2368 (9748) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 106.381948][ T3309] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 106.392854][ T3309] CPU: 1 UID: 0 PID: 3309 Comm: syz-executor Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 106.392940][ T3309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.392952][ T3309] Call Trace: [ 106.392959][ T3309] [ 106.392966][ T3309] dump_stack_lvl+0xf6/0x150 [ 106.392990][ T3309] dump_stack+0x15/0x1a [ 106.393007][ T3309] dump_header+0x83/0x2d0 [ 106.393031][ T3309] oom_kill_process+0x341/0x4c0 [ 106.393061][ T3309] out_of_memory+0x9d1/0xc20 [ 106.393122][ T3309] mem_cgroup_out_of_memory+0x13f/0x190 [ 106.393150][ T3309] try_charge_memcg+0x5f1/0x890 [ 106.393171][ T3309] charge_memcg+0x50/0xc0 [ 106.393204][ T3309] mem_cgroup_swapin_charge_folio+0xd0/0x150 [ 106.393262][ T3309] __read_swap_cache_async+0x207/0x3b0 [ 106.393301][ T3309] swap_cluster_readahead+0x38b/0x400 [ 106.393409][ T3309] swapin_readahead+0xe6/0x6f0 [ 106.393472][ T3309] ? next_uptodate_folio+0x826/0x8a0 [ 106.393574][ T3309] ? swap_cache_get_folio+0x77/0x210 [ 106.393609][ T3309] do_swap_page+0x31c/0x2510 [ 106.393638][ T3309] ? __rcu_read_lock+0x36/0x50 [ 106.393685][ T3309] ? __pfx_default_wake_function+0x10/0x10 [ 106.393767][ T3309] handle_mm_fault+0x8ed/0x2e80 [ 106.393791][ T3309] ? mas_walk+0x204/0x320 [ 106.393837][ T3309] ? __rcu_read_unlock+0x4e/0x70 [ 106.393866][ T3309] exc_page_fault+0x3b9/0x6a0 [ 106.393890][ T3309] asm_exc_page_fault+0x26/0x30 [ 106.393946][ T3309] RIP: 0033:0x7f38b8e851b7 [ 106.393958][ T3309] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 05 e8 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 04 e8 00 48 01 d1 39 7c 24 [ 106.393973][ T3309] RSP: 002b:00007ffff5327dc0 EFLAGS: 00010202 [ 106.393985][ T3309] RAX: 0000001b31c20000 RBX: 0000000000000436 RCX: 0000000000019e10 [ 106.393996][ T3309] RDX: 0000000004ea93fc RSI: 00007ffff5327e50 RDI: 0000000000000007 [ 106.394140][ T3309] RBP: 00007ffff5327dfc R08: 0000000012c11826 R09: 7fffffffffffffff [ 106.394153][ T3309] R10: 00007f38b9d0f038 R11: 0000000000000010 R12: 0000000000001388 [ 106.394165][ T3309] R13: 00000000000927c0 R14: 0000000000019c37 R15: 00007ffff5327e50 [ 106.394231][ T3309] [ 106.555017][ T9757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.561113][ T3309] memory: usage 307200kB, limit 307200kB, failcnt 671 [ 106.569208][ T9757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.576982][ T3309] memory+swap: usage 324124kB, limit 9007199254740988kB, failcnt 0 [ 106.576994][ T3309] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 106.577004][ T3309] Memory cgroup stats for /syz0: [ 106.605242][ T3309] cache 0 [ 106.649950][ T3309] rss 0 [ 106.652712][ T3309] shmem 0 [ 106.655688][ T3309] mapped_file 0 [ 106.659157][ T3309] dirty 0 [ 106.662091][ T3309] writeback 0 [ 106.665464][ T3309] workingset_refault_anon 1361 [ 106.670255][ T3309] workingset_refault_file 285 [ 106.674984][ T3309] swap 17330176 [ 106.678441][ T3309] swapcached 12288 [ 106.682203][ T3309] pgpgin 125673 [ 106.685720][ T3309] pgpgout 125670 [ 106.689350][ T3309] pgfault 121920 [ 106.692891][ T3309] pgmajfault 286 [ 106.696541][ T3309] inactive_anon 12288 [ 106.700525][ T3309] active_anon 0 [ 106.703998][ T3309] inactive_file 0 [ 106.707633][ T3309] active_file 0 [ 106.711094][ T3309] unevictable 0 [ 106.714589][ T3309] hierarchical_memory_limit 314572800 [ 106.719966][ T3309] hierarchical_memsw_limit 9223372036854771712 [ 106.726152][ T3309] total_cache 0 [ 106.729625][ T3309] total_rss 0 [ 106.732976][ T3309] total_shmem 0 [ 106.736480][ T3309] total_mapped_file 0 [ 106.740458][ T3309] total_dirty 0 [ 106.744017][ T3309] total_writeback 0 [ 106.747876][ T3309] total_workingset_refault_anon 1361 [ 106.753220][ T3309] total_workingset_refault_file 285 [ 106.758516][ T3309] total_swap 17330176 [ 106.762598][ T3309] total_swapcached 12288 [ 106.766860][ T3309] total_pgpgin 125673 [ 106.770877][ T3309] total_pgpgout 125670 [ 106.774970][ T3309] total_pgfault 121920 [ 106.779041][ T3309] total_pgmajfault 286 [ 106.783159][ T3309] total_inactive_anon 12288 [ 106.787682][ T3309] total_active_anon 0 [ 106.791665][ T3309] total_inactive_file 0 [ 106.795895][ T3309] total_active_file 0 [ 106.799888][ T3309] total_unevictable 0 [ 106.803886][ T3309] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2355,pid=9714,uid=0 [ 106.818549][ T3309] Memory cgroup out of memory: Killed process 9714 (syz.0.2355) total-vm:95796kB, anon-rss:936kB, file-rss:21988kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 107.057596][ T9780] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2382'. [ 107.262396][ T9803] xt_hashlimit: size too large, truncated to 1048576 [ 107.391420][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2397'. [ 107.660898][ T9843] xt_TPROXY: Can be used only with -p tcp or -p udp [ 107.671305][ T9820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.681089][ T9820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.802788][ T9864] atomic_op ffff88817fff8928 conn xmit_atomic 0000000000000000 [ 107.855871][ T9877] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.2429'. [ 107.940674][ T9891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2434'. [ 108.399443][ T9954] vlan2: entered allmulticast mode [ 108.758070][ T9977] netlink: 'syz.1.2472': attribute type 12 has an invalid length. [ 108.767200][ T9961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.785229][ T9961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.995182][T10005] cgroup: fork rejected by pids controller in /syz1 [ 109.602600][T10026] chnl_net:caif_netlink_parms(): no params data found [ 109.778742][T10026] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.785828][T10026] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.803525][T10058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.811905][T10026] bridge_slave_0: entered allmulticast mode [ 109.818390][T10026] bridge_slave_0: entered promiscuous mode [ 109.825405][T10058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.834291][T10026] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.841369][T10026] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.861172][T10026] bridge_slave_1: entered allmulticast mode [ 109.867732][T10026] bridge_slave_1: entered promiscuous mode [ 109.886228][T10026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.897502][T10026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.925593][T10026] team0: Port device team_slave_0 added [ 109.932053][T10026] team0: Port device team_slave_1 added [ 109.964279][T10026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.971237][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.997206][T10026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.047903][T10076] loop2: detected capacity change from 0 to 1024 [ 110.064242][T10026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.071261][T10026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.074938][T10076] EXT4-fs: Ignoring removed nobh option [ 110.097219][T10026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.113465][T10076] EXT4-fs: Ignoring removed bh option [ 110.144418][T10026] hsr_slave_0: entered promiscuous mode [ 110.151327][T10026] hsr_slave_1: entered promiscuous mode [ 110.157396][T10076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.170070][T10026] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.177650][T10026] Cannot create hsr debugfs directory [ 110.232695][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.293014][T10026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.304162][T10096] loop2: detected capacity change from 0 to 2048 [ 110.353884][T10096] loop2: p1 < > p4 [ 110.358252][T10096] loop2: p4 size 8388608 extends beyond EOD, truncated [ 110.366826][T10026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.436595][T10026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.479251][T10109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.526250][T10026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.556791][T10109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.606287][T10109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.631191][T10026] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.639707][T10026] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.648171][T10026] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.661528][T10109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.672761][T10026] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.708251][T10026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.725361][T10026] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.737178][ T9431] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.744369][ T9431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.758145][ T9431] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.765252][ T9431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.782494][T10026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.793114][T10026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.811824][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 110.811837][ T29] audit: type=1326 audit(1745224234.984:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.4.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 110.850356][T10109] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.878322][ T29] audit: type=1326 audit(1745224235.014:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.4.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 110.902019][ T29] audit: type=1326 audit(1745224235.014:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.4.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 110.925725][ T29] audit: type=1326 audit(1745224235.014:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.4.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 110.949165][ T29] audit: type=1326 audit(1745224235.014:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10110 comm="syz.4.2523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 110.977997][T10109] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.990014][T10109] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.001709][T10109] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.010153][T10116] loop5: detected capacity change from 0 to 512 [ 111.023779][T10116] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.046839][T10116] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 111.054798][T10116] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 111.055181][T10026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.066751][T10116] System zones: 0-1, 15-15, 18-18, 34-34 [ 111.075694][T10116] EXT4-fs (loop5): orphan cleanup on readonly fs [ 111.082096][T10116] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 111.091525][T10116] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 111.106123][T10116] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 111.113654][T10116] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2525: bg 0: block 40: padding at end of block bitmap is not set [ 111.140315][T10116] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 111.149237][T10116] EXT4-fs (loop5): 1 truncate cleaned up [ 111.155825][T10116] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.170801][T10026] veth0_vlan: entered promiscuous mode [ 111.181833][T10026] veth1_vlan: entered promiscuous mode [ 111.188477][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.200846][T10026] veth0_macvtap: entered promiscuous mode [ 111.209030][T10026] veth1_macvtap: entered promiscuous mode [ 111.220372][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.230891][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.240817][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.251368][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.272402][T10026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.284466][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.295010][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.304846][T10026] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.315282][T10026] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.327676][T10026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.338154][T10026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.346980][T10026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.355843][T10026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.364614][T10026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.460653][T10152] __nla_validate_parse: 6 callbacks suppressed [ 111.460669][T10152] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2535'. [ 111.537868][ T29] audit: type=1326 audit(1745224235.714:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.5.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 111.574933][ T29] audit: type=1326 audit(1745224235.714:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.5.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 111.598479][ T29] audit: type=1326 audit(1745224235.714:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.5.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 111.621988][ T29] audit: type=1326 audit(1745224235.714:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10167 comm="syz.5.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06c992e169 code=0x7ffc0000 [ 111.648994][T10143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.666044][T10143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.681871][T10173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2542'. [ 111.741640][T10176] SELinux: failed to load policy [ 111.993772][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2551'. [ 112.141387][T10207] loop5: detected capacity change from 0 to 512 [ 112.187471][T10207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.206077][T10207] ext4 filesystem being mounted at /520/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.287263][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.336470][T10225] loop5: detected capacity change from 0 to 1024 [ 112.463533][T10235] loop1: detected capacity change from 0 to 8192 [ 112.514875][T10235] loop1: p1 p2 [ 112.558954][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.566473][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.573895][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.581287][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.588713][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.596130][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.603512][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.611034][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.618536][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.626139][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.633542][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.668327][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.675762][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.683173][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.690644][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.698057][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.705575][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.712969][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.720386][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.727851][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.735280][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.742695][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.750126][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.757538][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.764956][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.770986][T10261] tipc: Failed to remove unknown binding: 66,1,1/0:1149568643/1149568645 [ 112.772335][ T3356] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 112.806488][ T3356] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 113.024229][T10299] tipc: Failed to remove unknown binding: 66,1,1/0:3227474691/3227474693 [ 113.042186][T10301] loop1: detected capacity change from 0 to 512 [ 113.058352][T10301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.071172][T10301] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.105544][T10309] loop5: detected capacity change from 0 to 512 [ 113.120526][T10309] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 113.136605][T10309] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 113.153052][T10309] System zones: 1-12 [ 113.157449][T10309] EXT4-fs (loop5): orphan cleanup on readonly fs [ 113.167755][T10309] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2597: bg 0: block 361: padding at end of block bitmap is not set [ 113.192508][T10309] EXT4-fs (loop5): Remounting filesystem read-only [ 113.197336][T10026] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.199529][T10309] EXT4-fs (loop5): 1 truncate cleaned up [ 113.214777][T10309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 113.220995][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.229115][T10309] sg_write: data in/out 33856/8 bytes for SCSI command 0x6e-- guessing data in; [ 113.229115][T10309] program syz.5.2597 not setting count and/or reply_len properly [ 113.234224][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.258500][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.265893][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.273386][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.280798][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.288194][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.295615][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.302998][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.310370][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.317775][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.325333][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.325556][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 113.332758][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.332781][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.356543][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.363964][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.371422][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.378846][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.386261][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.393666][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.401048][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.405428][T10322] netlink: 'syz.1.2601': attribute type 1 has an invalid length. [ 113.408494][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.423625][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.430996][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.438413][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.445801][ T3378] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 113.453689][ T3378] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 113.510524][T10331] loop1: detected capacity change from 0 to 512 [ 113.517259][T10331] EXT4-fs: dax option not supported [ 113.719699][T10358] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2616'. [ 113.855431][ T3378] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 113.865986][ T3378] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 114.246184][T10402] loop1: detected capacity change from 0 to 2048 [ 114.265341][T10402] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.2636: bad orphan inode 8192 [ 114.280993][T10402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.311443][T10026] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.349848][T10406] netlink: 'syz.1.2637': attribute type 30 has an invalid length. [ 114.465127][T10408] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.472650][T10408] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 114.516113][T10412] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2640'. [ 114.560334][T10417] random: crng reseeded on system resumption [ 114.847191][T10437] loop5: detected capacity change from 0 to 2048 [ 114.873824][T10437] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.914855][T10437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.946700][T10437] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 115.006573][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.472238][T10524] loop2: detected capacity change from 0 to 256 [ 115.512383][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.519818][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.527241][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.534735][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.542114][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.549535][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.557153][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.564563][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.572043][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.579507][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.586937][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.594344][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.601840][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.609226][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.616812][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.624246][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.631628][ T23] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 115.669890][ T23] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 115.881941][T10543] loop2: detected capacity change from 0 to 1764 [ 116.324696][T10568] loop5: detected capacity change from 0 to 128 [ 116.338626][T10568] bio_check_eod: 103 callbacks suppressed [ 116.338637][T10568] syz.5.2698: attempt to access beyond end of device [ 116.338637][T10568] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 116.358762][T10568] syz.5.2698: attempt to access beyond end of device [ 116.358762][T10568] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 116.372493][T10568] syz.5.2698: attempt to access beyond end of device [ 116.372493][T10568] loop5: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 116.565640][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 116.565694][ T29] audit: type=1326 audit(1745224240.736:2864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10582 comm="syz.0.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b8fae169 code=0x7ffc0000 [ 116.629870][ T29] audit: type=1326 audit(1745224240.776:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10582 comm="syz.0.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f38b8fae169 code=0x7ffc0000 [ 116.653400][ T29] audit: type=1326 audit(1745224240.776:2866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10582 comm="syz.0.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b8fae169 code=0x7ffc0000 [ 116.677015][ T29] audit: type=1326 audit(1745224240.776:2867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10582 comm="syz.0.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f38b8fae169 code=0x7ffc0000 [ 116.700605][ T29] audit: type=1326 audit(1745224240.776:2868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10582 comm="syz.0.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b8fae169 code=0x7ffc0000 [ 116.724214][ T29] audit: type=1326 audit(1745224240.776:2869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10582 comm="syz.0.2704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38b8fae169 code=0x7ffc0000 [ 116.850736][T10597] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2710'. [ 116.862548][T10599] random: crng reseeded on system resumption [ 116.940570][ T29] audit: type=1326 audit(1745224241.106:2870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 117.008576][ T29] audit: type=1326 audit(1745224241.136:2871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 117.032202][ T29] audit: type=1326 audit(1745224241.136:2872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 117.055705][ T29] audit: type=1326 audit(1745224241.136:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10605 comm="syz.4.2715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f963748e169 code=0x7ffc0000 [ 117.444199][T10649] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.506073][T10649] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.586665][T10649] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.626177][T10649] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.689548][T10649] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.700261][T10649] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.710903][T10649] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.721734][T10649] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.064433][T10681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.081612][T10681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.098221][T10685] netlink: 'syz.0.2744': attribute type 30 has an invalid length. [ 118.727756][T10711] loop2: detected capacity change from 0 to 512 [ 118.756378][T10711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.783728][T10711] ext4 filesystem being mounted at /553/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.868957][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.382140][T10748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2773'. [ 119.495610][T10750] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 119.744412][T10758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2778'. [ 120.071812][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2784'. [ 120.081100][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2783'. [ 120.097132][T10771] vhci_hcd: invalid port number 96 [ 120.102272][T10771] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 120.103318][T10769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2784'. [ 120.122941][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2786'. [ 120.160189][T10773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.197754][T10773] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.218613][T10773] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 120.281429][T10773] bond2: (slave vti0): Error -95 calling set_mac_address [ 120.315253][T10783] bond2: (slave dummy0): Error -99 calling set_mac_address [ 120.388290][T10786] netlink: 'syz.0.2790': attribute type 10 has an invalid length. [ 120.464638][T10790] netlink: 'syz.0.2790': attribute type 10 has an invalid length. [ 120.472576][T10790] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2790'. [ 120.483838][T10786] bond0: (slave team0): Releasing backup interface [ 120.492693][T10786] batman_adv: batadv0: Adding interface: team0 [ 120.499025][T10786] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 120.527480][T10790] team0: entered promiscuous mode [ 120.532557][T10790] team_slave_0: entered promiscuous mode [ 120.538272][T10790] team_slave_1: entered promiscuous mode [ 120.604791][T10790] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.611874][T10790] batman_adv: batadv0: Interface activated: team0 [ 120.618463][T10790] batman_adv: batadv0: Interface deactivated: team0 [ 120.625125][T10790] batman_adv: batadv0: Removing interface: team0 [ 120.647973][T10790] bridge0: port 3(team0) entered blocking state [ 120.654272][T10790] bridge0: port 3(team0) entered disabled state [ 120.673637][T10790] team0: entered allmulticast mode [ 120.678776][T10790] team_slave_0: entered allmulticast mode [ 120.684532][T10790] team_slave_1: entered allmulticast mode [ 120.718126][T10790] bridge0: port 3(team0) entered blocking state [ 120.724486][T10790] bridge0: port 3(team0) entered forwarding state [ 120.769241][T10747] syz.5.2772 (10747) used greatest stack depth: 5024 bytes left [ 120.788114][T10796] syzkaller1: entered promiscuous mode [ 120.793711][T10796] syzkaller1: entered allmulticast mode [ 120.894136][T10806] loop2: detected capacity change from 0 to 1024 [ 120.908703][T10816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2803'. [ 120.960951][T10806] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.2798: Failed to acquire dquot type 0 [ 120.989021][T10806] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 121.006681][T10806] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2798: corrupted inode contents [ 121.020579][T10806] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #13: comm syz.2.2798: mark_inode_dirty error [ 121.033198][T10806] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2798: corrupted inode contents [ 121.047931][T10806] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.2798: mark_inode_dirty error [ 121.060945][T10806] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2798: corrupted inode contents [ 121.074807][T10806] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 121.084846][T10806] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #13: comm syz.2.2798: corrupted inode contents [ 121.098726][T10806] EXT4-fs error (device loop2): ext4_truncate:4255: inode #13: comm syz.2.2798: mark_inode_dirty error [ 121.111645][T10806] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 121.124094][T10806] EXT4-fs (loop2): 1 truncate cleaned up [ 121.133302][T10806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.171040][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.593285][T10840] loop5: detected capacity change from 0 to 512 [ 121.628679][T10840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.657078][T10840] ext4 filesystem being mounted at /567/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.905630][ T3719] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.496203][T10889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2833'. [ 122.641383][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2836'. [ 122.665072][T10894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.724441][T10894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.731540][T10894] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 122.801632][T10894] bond1: (slave vti0): Error -95 calling set_mac_address [ 122.861281][T10913] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2843'. [ 122.933342][T10926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2847'. [ 122.989001][T10930] loop5: detected capacity change from 0 to 256 [ 123.025337][T10930] FAT-fs (loop5): Directory bread(block 64) failed [ 123.033015][T10930] FAT-fs (loop5): Directory bread(block 65) failed [ 123.040773][T10930] FAT-fs (loop5): Directory bread(block 66) failed [ 123.047540][T10930] FAT-fs (loop5): Directory bread(block 67) failed [ 123.054126][T10930] FAT-fs (loop5): Directory bread(block 68) failed [ 123.060754][T10930] FAT-fs (loop5): Directory bread(block 69) failed [ 123.067414][T10930] FAT-fs (loop5): Directory bread(block 70) failed [ 123.081790][T10930] FAT-fs (loop5): Directory bread(block 71) failed [ 123.094973][T10930] FAT-fs (loop5): Directory bread(block 72) failed [ 123.103785][T10930] FAT-fs (loop5): Directory bread(block 73) failed [ 123.176983][T10930] syz.5.2851: attempt to access beyond end of device [ 123.176983][T10930] loop5: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 123.403487][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'. [ 123.416524][T10963] vlan3: entered allmulticast mode [ 123.949791][T10991] xt_hashlimit: size too large, truncated to 1048576 [ 123.960638][T10992] loop1: detected capacity change from 0 to 1024 [ 124.057332][T10992] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.115123][T10992] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 124.225000][T10026] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.257731][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2894'. [ 124.303795][T11012] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 124.313496][T11020] ================================================================== [ 124.321572][T11020] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 124.329381][T11020] [ 124.331686][T11020] write to 0xffffea0004885658 of 8 bytes by task 11017 on cpu 0: [ 124.339391][T11020] __filemap_remove_folio+0x1ae/0x2c0 [ 124.344766][T11020] filemap_remove_folio+0x6b/0x1c0 [ 124.349874][T11020] truncate_inode_folio+0x42/0x50 [ 124.354886][T11020] shmem_undo_range+0x25d/0xa80 [ 124.359719][T11020] shmem_evict_inode+0x13b/0x520 [ 124.364644][T11020] evict+0x2de/0x550 [ 124.368540][T11020] iput+0x42a/0x5b0 [ 124.372343][T11020] dentry_unlink_inode+0x24f/0x260 [ 124.377442][T11020] __dentry_kill+0x18b/0x4c0 [ 124.382023][T11020] dput+0x5c/0xd0 [ 124.385648][T11020] __fput+0x428/0x640 [ 124.389625][T11020] fput_close_sync+0xc0/0x110 [ 124.394290][T11020] __x64_sys_close+0x55/0xe0 [ 124.398872][T11020] x64_sys_call+0x262b/0x2e10 [ 124.403539][T11020] do_syscall_64+0xc9/0x1a0 [ 124.408030][T11020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.413905][T11020] [ 124.416215][T11020] read to 0xffffea0004885658 of 8 bytes by task 11020 on cpu 1: [ 124.423828][T11020] folio_mapping+0xa0/0x120 [ 124.428325][T11020] lru_add+0x89/0x440 [ 124.432289][T11020] folio_batch_move_lru+0x161/0x230 [ 124.437472][T11020] folio_add_lru+0x148/0x1f0 [ 124.442138][T11020] folio_add_lru_vma+0x48/0x60 [ 124.446891][T11020] handle_mm_fault+0x275f/0x2e80 [ 124.451818][T11020] exc_page_fault+0x3b9/0x6a0 [ 124.456483][T11020] asm_exc_page_fault+0x26/0x30 [ 124.461322][T11020] [ 124.463631][T11020] value changed: 0xffff8881191fe4d0 -> 0x0000000000000000 [ 124.470725][T11020] [ 124.473034][T11020] Reported by Kernel Concurrency Sanitizer on: [ 124.479181][T11020] CPU: 1 UID: 0 PID: 11020 Comm: syz.2.2881 Not tainted 6.15.0-rc3-syzkaller-00001-g9d7a0577c9db #0 PREEMPT(voluntary) [ 124.491666][T11020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.501718][T11020] ==================================================================