last executing test programs: 3.919032945s ago: executing program 4 (id=1127): write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x5b0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000140)='./file0\x00') openat(r2, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x124, 0x5dd9, 0x0, 0x0, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xaf}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x8}}]}, 0x1a0}}, 0x0) 3.796594857s ago: executing program 4 (id=1128): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x198) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) 3.710535648s ago: executing program 4 (id=1130): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="18020000002000000000000000000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000040), &(0x7f0000000180)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 3.62653617s ago: executing program 4 (id=1131): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) setresuid(0x0, 0xee00, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x3, 0x0) fcntl$setpipe(r3, 0x4, 0xfffffffffffff000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x9c, 0x2, 0x2, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x29}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000865) 3.295968725s ago: executing program 2 (id=1132): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.780828384s ago: executing program 4 (id=1139): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000b02000000000000000300000d000000000300000003000000000000000300000004000000010000000000000000000005000000000000002e"], 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x50740270124fb2d8) 2.466431539s ago: executing program 3 (id=1140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r6}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf39, 0x0) splice(r3, 0x0, r7, 0x0, 0x80, 0x4) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close(r4) 2.38377669s ago: executing program 2 (id=1142): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 2.289473422s ago: executing program 2 (id=1145): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pread64(0xffffffffffffffff, &(0x7f0000032080)=""/102400, 0x19000, 0x1000000000) recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000300)=""/82, 0x52, 0x0, &(0x7f0000000380)=@isdn={0x22, 0xd9, 0xc, 0x4, 0x5}, 0x80) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(&(0x7f00000001c0)='-B\xd5\x9appp\xf0\x00\x84\xa2[\xfc<+\x9a\xb0\xa4-y\xc8\xabm\x00\ve\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xa7\x10\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}\x00\x10\x00\x00\x00\x00\x00\x00\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe9\x04\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\x00\x00\x00\x00\x00', 0x1) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) getsockname$packet(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c00024000000000000000101400018009"], 0x104}}, 0x40000) 2.002443627s ago: executing program 1 (id=1146): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000340)) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4], 0x20) 2.001912456s ago: executing program 2 (id=1147): r0 = socket(0xa, 0x3, 0x3a) creat(&(0x7f0000000000)='./file0\x00', 0x8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x5b) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000890c"], 0x80}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='i2c_read\x00', r2, 0x0, 0x1}, 0x18) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r8, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x800) io_submit(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, r2, &(0x7f0000000fc0)="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", 0x1000, 0x8000, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x64a, r3, &(0x7f0000000440)="764daa9a65f8321ab881522844a4bfec644dd88abe856e0ba24adff64c1111c52b007886b0dca7a968eb1a0aff2fe2682d4ce101b78ea66b9f398d7fe50dde107f1e624d8c", 0x45, 0x4, 0x0, 0x2, r6}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000002}, 0x18) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDADDIO(r9, 0x4b34, 0x7) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c250000000000202020540af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000070000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000000308050000ea000000000000050000000500030021000000240004"], 0x48}}, 0x40) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 1.930118038s ago: executing program 1 (id=1148): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) 1.857498579s ago: executing program 0 (id=1149): openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000880)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x467, &(0x7f0000002280)="$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") setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000001140)=ANY=[@ANYBLOB], 0x24, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x46) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0xfffffffffffffcdf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open_by_handle_at(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="08000000020000000b00000000000000f1378dc1b814d0b70dd30a8133a1dc"], 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002840), 0x28000, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.79799451s ago: executing program 0 (id=1150): perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000000000, 0xffffffffffffff9c}, 0x0, 0x0, 0x510a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xc3ff}}, 0x0) close(r0) 1.79741169s ago: executing program 0 (id=1151): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000013c0)="5802009400140091d491321dcea4acd70729723b478925450db4564df63e79dbf050a10004226c1aac9891343d24cfbb19f8e3e3bd94cd18075db30d89b96ee7d567e8709d85c3a7610aa2576cddf59f2683c40fa8af324234ebcde8c6b1ef090f5fda2e5e2ab3012179d69af27868b9b1fbe37f0f9df1cc627f49082e2d3c7a8762ae03adeaea7422eed72da6221ffaf87ba3", 0x93}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4f21, @local}, 0x42) syz_emit_ethernet(0x73, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff88a82100810040000011fc8ebfe9b65196a7e39d963c826c45e3e8c0ce9fd1f2a0de62fdf00083c02bedcd716e69b619d5196eb05e35411361ff19509da6e5d749c1d19f75e6510019c9161c8aba725d9d0a7aee81"], 0x0) close(r0) 1.768232671s ago: executing program 0 (id=1152): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040000) 1.653589453s ago: executing program 2 (id=1153): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) unshare(0x22020400) umount2(&(0x7f0000000040)='.\x00', 0x2) 1.653081633s ago: executing program 3 (id=1154): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 1.609870013s ago: executing program 2 (id=1155): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.150626331s ago: executing program 3 (id=1156): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa8a80, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100402, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='workqueue_activate_work\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/66}, 0x20) 1.106065672s ago: executing program 3 (id=1157): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfd6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) 1.067523783s ago: executing program 1 (id=1158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) acct(&(0x7f00000001c0)='./file0\x00') 853.287286ms ago: executing program 0 (id=1159): bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0xa1}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) 853.058066ms ago: executing program 1 (id=1160): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000, 0x92}, 0x104010, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20008864) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 852.843916ms ago: executing program 3 (id=1161): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) 768.214327ms ago: executing program 1 (id=1162): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x20, 0x0, @rand_addr=' \x01\x00', 0xf0}}}, 0x32) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="59bb22bd70000000200011"], 0x28}}, 0x0) 709.439118ms ago: executing program 1 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0xb, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0x9, 0x1, '/($}\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20040804) 478.053092ms ago: executing program 3 (id=1164): r0 = socket(0xa, 0x3, 0x3a) creat(&(0x7f0000000000)='./file0\x00', 0x8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x5b) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000890c"], 0x80}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='i2c_read\x00', r2, 0x0, 0x1}, 0x18) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x14, r8, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x800) io_submit(0x0, 0x2, &(0x7f0000000500)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, r2, &(0x7f0000000fc0)="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", 0x1000, 0x8000, 0x0, 0x2}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0x64a, r3, &(0x7f0000000440)="764daa9a65f8321ab881522844a4bfec644dd88abe856e0ba24adff64c1111c52b007886b0dca7a968eb1a0aff2fe2682d4ce101b78ea66b9f398d7fe50dde107f1e624d8c", 0x45, 0x4, 0x0, 0x2, r6}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x10000002}, 0x18) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDADDIO(r9, 0x4b34, 0x7) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c250000000000202020540af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000000800000018010000202070250000000000202020dd1af5ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000070000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_KEEPCAPS(0x8, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000000308050000ea000000000000050000000500030021000000240004"], 0x48}}, 0x40) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) 87.723249ms ago: executing program 4 (id=1165): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$netlink(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 0 (id=1166): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x500, &(0x7f0000000b00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x13) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r0, 0x1e, 0x0, @val=@netfilter={0x5, 0x0, 0x8, 0x1}}, 0x20) clock_gettime(0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0), 0x1, 0x789, &(0x7f0000001240)="$eJzs3M9rG2caAOB3JlacH96VF/awe8kuJJBAiGzHl+RU91J6CQQCvabGHhvjsRUsObXdQJzeCoU0vrSlUNp7j70WQvoH9FYCLfTWQ6G0qXtoe1GRLCuJIylKYkeJ+zww1veNvpn3fWfkzzPgUQB/W/+v/0gihiLiYkQUm+vTiDjYaB2KWN8at3nv2lR9SaJWu/RzUt8sNmvF1r6S5uvRaGwS/4mIO4WI0+88GreyujY/mefZUrM/Ul24MlJZXTsztzA5m81mi2Pj50fPjY+fGx3ftVpPvHH+8K2vX9vY+OaL6s1jA2eSmGjUHc3adi3QA7aOSSEmdqxf3ItgfZT0MGbgOeQBAEB39ev8A81rs0IU40C3qzQXcAAAAPBSqg3WevVHzyMBAACAF0wS/c4AAAAA2Fvb/wew/WzvXj0H28lPr0bEcLv4A41niCMORSEijmwmDz1+kGxtBs9k/UZE3J5o8/nr5Ynm7kbvNw/vzh7Zbbfr889Eu/knbc0/0Wb+Gdj+7oRn1Hn+ux//QIf572KPMb785L+FjvFvVFbePdYuftKKn3SI/2aP8W9uvHer03u1zyJOtv37kzwUq8v3Q4zMzOXtfrVa6d7589TdzvVHHHkkfpI0oibd67/SY/1vb/46v94l/qnj3c//VvzBh7arfybeb+aRRsSt5mu9v7EjxvGFb796NHKyvh1/usPxb3/+X2/V/2mP9X//+eBKj0MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgIY2IoUjSUqudpqVSxNGI+HccSfNypXp6pry8OF1/L2I4CunMXJ6NRkRxq5/U+2ON9v3+2R398Yj413eHt4LO5VlpqpxP97t4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWo5GxFAkaSki0oj4rZimpVK/swIAAAB23XC/EwAAAAD2nPt/AAAA2P+e9v4/2eU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH3t4oUL9aW2ee/aVL0/fXV1eb589cx0VpkvLSxPlabKS1dKs+XybJ6VpsoLj9tfGhFj52N5ZaSaVaojldW1ywvl5cXq5bmFydnsclZ4LlUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwpIYaS5KWIiJttNO0VIr4R0QMRyGZmcuz0Yj4Z0TcLRYG6/2xficNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArqusrs1P5nm29HI3avurnJ4bkUS8AGl0aHzUPCvdxiTrEXn2Q3Nkn1JNm+GfZT9Plvz1xxyWfjf+14e5CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/qusrs1P5nm2VOl3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRX+mMSEfXlZPHE0M53Dya/FxuvEfHWx5c+WJmsVpfG6ut/aa2vfthcf/aBDa8/zxoAAABg33vlSQZv36dv38cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0qrK6Nj+Z59nSHjbiRr+rBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnsZfAQAA//9bFLc7") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$vga_arbiter(r2, &(0x7f0000000000)=@target={'target ', {'PCI:', '7', ':', 'b', ':', '1a', '.', '5'}}, 0x14) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, 0x0, 0x0) kernel console output (not intermixed with test programs): de #11: comm syz.0.194: mark_inode_dirty error [ 40.471750][ T4139] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.194: invalid indirect mapped block 1 (level 1) [ 40.489293][ T4139] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.194: corrupted inode contents [ 40.501378][ T4139] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 40.516539][ T4139] EXT4-fs error (device loop0): ext4_do_update_inode:5211: inode #11: comm syz.0.194: corrupted inode contents [ 40.544720][ T4139] EXT4-fs error (device loop0): ext4_truncate:4255: inode #11: comm syz.0.194: mark_inode_dirty error [ 40.558675][ T4139] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 40.574113][ T4139] EXT4-fs (loop0): 1 truncate cleaned up [ 40.580291][ T4139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.597601][ T3381] tipc: Node number set to 4269801491 [ 40.643752][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.698505][ T4157] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.780287][ T4157] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.855223][ T4176] loop3: detected capacity change from 0 to 128 [ 40.862445][ T4157] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.873709][ T4176] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 40.881931][ T4176] System zones: 1-3, 19-19, 35-36 [ 40.887730][ T4176] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.905655][ T4176] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.940322][ T4181] loop2: detected capacity change from 0 to 128 [ 40.956910][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.967662][ T4181] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.993286][ T4181] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.031012][ T4157] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.074030][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.082351][ T4190] loop3: detected capacity change from 0 to 1024 [ 41.115583][ T4157] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.128678][ T4157] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.128852][ T4190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.140904][ T4157] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.160453][ T4157] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.169718][ T4190] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.326657][ T12] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 393: padding at end of block bitmap is not set [ 41.342320][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 41.355022][ T12] EXT4-fs (loop3): This should not happen!! Data will be lost [ 41.355022][ T12] [ 41.372365][ T4206] loop2: detected capacity change from 0 to 128 [ 41.392358][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.495421][ T4220] loop4: detected capacity change from 0 to 128 [ 41.522886][ T4222] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.569259][ T4222] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.595503][ T4227] ªªªªªª: renamed from vlan0 (while UP) [ 41.619889][ T4222] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.641685][ T4231] loop3: detected capacity change from 0 to 128 [ 41.657930][ T4231] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 41.670941][ T4231] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.682253][ T4222] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.697413][ T4234] loop4: detected capacity change from 0 to 512 [ 41.705106][ T4234] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.714213][ T4234] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 41.725924][ T3306] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.736342][ T4234] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 41.745336][ T4234] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 41.753622][ T4234] System zones: 0-2, 18-18, 34-34 [ 41.759502][ T4234] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 41.774539][ T4234] EXT4-fs (loop4): 1 truncate cleaned up [ 41.780743][ T4234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.814098][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.890370][ T4247] bond0: entered promiscuous mode [ 41.895459][ T4247] bond_slave_0: entered promiscuous mode [ 41.897420][ T4249] loop4: detected capacity change from 0 to 1024 [ 41.901365][ T4247] bond_slave_1: entered promiscuous mode [ 41.909711][ T4249] EXT4-fs: quotafile must be on filesystem root [ 41.921109][ T4247] batadv0: entered promiscuous mode [ 41.927027][ T4247] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 41.938270][ T4247] bond0: left promiscuous mode [ 41.943088][ T4247] bond_slave_0: left promiscuous mode [ 41.948742][ T4247] bond_slave_1: left promiscuous mode [ 41.956221][ T4247] batadv0: left promiscuous mode [ 41.982393][ T4253] IPv4: Oversized IP packet from 127.202.26.0 [ 42.049105][ T4261] netlink: 'syz.4.245': attribute type 1 has an invalid length. [ 42.056798][ T4261] netlink: 'syz.4.245': attribute type 2 has an invalid length. [ 42.067255][ T4261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.245'. [ 42.072293][ T4263] vlan2: entered promiscuous mode [ 42.081235][ T4263] bond0: entered promiscuous mode [ 42.086281][ T4263] bond_slave_0: entered promiscuous mode [ 42.092162][ T4263] bond_slave_1: entered promiscuous mode [ 42.293505][ T4286] netlink: 'syz.4.257': attribute type 7 has an invalid length. [ 42.301261][ T4286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 42.342594][ T4291] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.511879][ T4304] syzkaller0: entered promiscuous mode [ 42.517404][ T4304] syzkaller0: entered allmulticast mode [ 42.562258][ T4312] xt_hashlimit: max too large, truncated to 1048576 [ 42.680159][ T4327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.276'. [ 42.890695][ T4341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 42.905596][ T4341] bond0: (slave bond_slave_0): Releasing backup interface [ 42.914260][ T4341] bond_slave_0 (unregistering): left promiscuous mode [ 42.943447][ T4345] loop1: detected capacity change from 0 to 128 [ 42.962520][ T4345] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 42.975404][ T4345] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.012111][ T3303] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.651016][ T4363] vlan2: entered allmulticast mode [ 43.656236][ T4363] bond0: entered allmulticast mode [ 43.661412][ T4363] bond_slave_0: entered allmulticast mode [ 43.667214][ T4363] bond_slave_1: entered allmulticast mode [ 43.985246][ T4371] syzkaller0: entered allmulticast mode [ 43.991464][ T4371] syzkaller0: entered promiscuous mode [ 43.999892][ T4371] syzkaller0 (unregistering): left promiscuous mode [ 44.006583][ T4371] syzkaller0 (unregistering): left allmulticast mode [ 44.121309][ T4378] syzkaller0: entered promiscuous mode [ 44.126914][ T4378] syzkaller0: entered allmulticast mode [ 44.170189][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 44.170203][ T29] audit: type=1400 audit(1744935771.175:559): avc: denied { create } for pid=4385 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 44.176584][ T4384] loop2: detected capacity change from 0 to 512 [ 44.203564][ T4386] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 44.204287][ T4384] journal_path: Non-blockdev passed as './bus' [ 44.218706][ T4384] EXT4-fs: error: could not find journal device path [ 44.249781][ T29] audit: type=1400 audit(1744935771.255:560): avc: denied { accept } for pid=4389 comm="syz.3.304" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 44.299721][ T29] audit: type=1326 audit(1744935771.305:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 44.323118][ T29] audit: type=1326 audit(1744935771.305:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 44.348412][ T29] audit: type=1326 audit(1744935771.355:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 44.371698][ T29] audit: type=1326 audit(1744935771.355:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 44.394971][ T29] audit: type=1326 audit(1744935771.355:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 44.418231][ T29] audit: type=1326 audit(1744935771.355:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 44.441486][ T29] audit: type=1326 audit(1744935771.355:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 44.465225][ T29] audit: type=1326 audit(1744935771.355:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.4.307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 44.707271][ T4428] netlink: 'syz.2.318': attribute type 7 has an invalid length. [ 44.715045][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 44.823144][ T4435] Illegal XDP return value 168111171 on prog (id 264) dev syz_tun, expect packet loss! [ 44.852243][ T4424] Set syz1 is full, maxelem 65536 reached [ 44.964410][ T4452] batadv0: entered promiscuous mode [ 44.970243][ T4452] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 44.979487][ T4452] batadv0: left promiscuous mode [ 45.367538][ T4477] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 45.396369][ T4479] netlink: 96 bytes leftover after parsing attributes in process `syz.1.340'. [ 45.431827][ T4481] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.455987][ T4222] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.468797][ T4222] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.478818][ T4481] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.494484][ T4222] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.506555][ T4222] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.517468][ T4481] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.561267][ T4481] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.610273][ T4485] loop0: detected capacity change from 0 to 8192 [ 45.626713][ T4481] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.650305][ T4481] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.675101][ T4481] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.700943][ T4481] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.876238][ T4504] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.919313][ T4504] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.979752][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 45.987735][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 45.995488][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.004132][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.005352][ T4504] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.011941][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.011966][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.037342][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.045126][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.053059][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.060932][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.068701][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.076455][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.084331][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.092106][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.101101][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.108978][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.116725][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.124681][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.132455][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.140276][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.148032][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.155786][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.163664][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.171471][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.179352][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.187095][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.194861][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.202691][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.210458][ T23] hid-generic 0000:0000:20000000.0001: unknown main item tag 0x0 [ 46.220837][ T23] hid-generic 0000:0000:20000000.0001: hidraw0: HID v0.01 Device [syz0] on syz1 [ 46.281781][ T4504] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.468671][ T4537] bond0: entered promiscuous mode [ 46.473826][ T4537] bond_slave_0: entered promiscuous mode [ 46.480862][ T4537] bond_slave_1: entered promiscuous mode [ 46.488155][ T4537] batadv0: entered promiscuous mode [ 46.493833][ T4537] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 46.502907][ T4537] bond0: left promiscuous mode [ 46.507734][ T4537] bond_slave_0: left promiscuous mode [ 46.513173][ T4537] bond_slave_1: left promiscuous mode [ 46.519255][ T4537] batadv0: left promiscuous mode [ 46.552387][ T4540] syzkaller0: entered promiscuous mode [ 46.558020][ T4540] syzkaller0: entered allmulticast mode [ 46.752450][ T4565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.379'. [ 46.784193][ T4567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 46.845442][ T4571] Cannot find add_set index 0 as target [ 46.867074][ T4574] veth1_to_bridge: entered allmulticast mode [ 46.878263][ T4574] veth1_to_bridge: left allmulticast mode [ 46.900314][ T4577] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.931565][ T4585] sch_fq: defrate 0 ignored. [ 46.977872][ T4577] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.027760][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 47.036568][ T4583] netlink: 32 bytes leftover after parsing attributes in process `syz.3.385'. [ 47.101867][ T4577] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.181618][ T4577] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.223725][ T4604] loop1: detected capacity change from 0 to 8192 [ 47.272748][ T4577] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.300846][ T4577] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.309420][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 47.313847][ T4577] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.318243][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 47.354556][ T4577] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.362935][ T4609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 47.451299][ T4615] loop3: detected capacity change from 0 to 512 [ 47.490137][ T4615] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.399: bg 0: block 248: padding at end of block bitmap is not set [ 47.528923][ T4622] loop2: detected capacity change from 0 to 128 [ 47.538498][ T4615] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.399: Failed to acquire dquot type 1 [ 47.551928][ T4615] EXT4-fs (loop3): 1 truncate cleaned up [ 47.606598][ T4615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.650179][ T4615] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.720448][ T4615] syz.3.399 (4615) used greatest stack depth: 9456 bytes left [ 47.730314][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.748843][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 47.870983][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.878812][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.886560][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.899683][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.907591][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.915343][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.923178][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.931018][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.938917][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.946803][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.954607][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.962466][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.970283][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.978080][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.986503][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 47.994344][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 48.002196][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 48.009973][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 48.017823][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 48.025604][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 48.033426][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 48.041192][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 48.049048][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 48.056812][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 48.064581][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 48.072350][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 48.080142][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 48.087956][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 48.095698][ T1038] hid-generic 0000:0000:20000000.0002: unknown main item tag 0x0 [ 48.107670][ T1038] hid-generic 0000:0000:20000000.0002: hidraw0: HID v0.01 Device [syz0] on syz1 [ 48.213765][ T4654] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.265278][ T4654] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.324128][ T4654] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.428227][ T4654] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.501973][ T4657] mmap: syz.3.414 (4657) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.530891][ T4654] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.566014][ T4654] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.597182][ T4654] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.650621][ T4654] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.188804][ T4683] netlink: 'syz.3.427': attribute type 11 has an invalid length. [ 49.258757][ T4664] loop1: detected capacity change from 0 to 8192 [ 49.286705][ T4504] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.305472][ T4504] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.329161][ T4504] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.342379][ T4504] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.451911][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 49.451927][ T29] audit: type=1400 audit(1744935776.455:633): avc: denied { setopt } for pid=4697 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 49.508103][ T29] audit: type=1326 audit(1744935776.515:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 49.531465][ T29] audit: type=1326 audit(1744935776.515:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 49.555041][ T29] audit: type=1326 audit(1744935776.515:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 49.578336][ T29] audit: type=1326 audit(1744935776.515:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 49.601646][ T29] audit: type=1326 audit(1744935776.515:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 49.624996][ T29] audit: type=1326 audit(1744935776.515:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 49.648290][ T29] audit: type=1326 audit(1744935776.515:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 49.671625][ T29] audit: type=1326 audit(1744935776.515:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 49.694881][ T29] audit: type=1326 audit(1744935776.515:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.4.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 49.755554][ T4718] netlink: 'syz.1.442': attribute type 3 has an invalid length. [ 49.784220][ T4720] loop1: detected capacity change from 0 to 512 [ 49.805495][ T4720] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.445: Invalid inode bitmap blk 4 in block_group 0 [ 49.819751][ T4720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.836289][ T4720] @: renamed from vlan0 (while UP) [ 49.854949][ T4729] __nla_validate_parse: 8 callbacks suppressed [ 49.854966][ T4729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.446'. [ 49.888506][ T4729] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.896737][ T4729] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.905168][ T4729] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.913502][ T4729] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.923420][ T4729] vxlan0: entered promiscuous mode [ 49.929315][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.946821][ T4734] syz.4.451 uses obsolete (PF_INET,SOCK_PACKET) [ 50.000606][ T4740] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.053776][ T4740] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.073184][ T4749] netlink: 9 bytes leftover after parsing attributes in process `syz.0.454'. [ 50.074345][ T4750] loop2: detected capacity change from 0 to 128 [ 50.088890][ T4749] gretap0: entered promiscuous mode [ 50.098507][ T4749] netlink: 5 bytes leftover after parsing attributes in process `syz.0.454'. [ 50.107471][ T4749] 0ªX¹¦D: renamed from gretap0 [ 50.114455][ T4749] 0ªX¹¦D: left promiscuous mode [ 50.119404][ T4749] 0ªX¹¦D: entered allmulticast mode [ 50.128056][ T4749] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 50.145844][ T4740] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.199812][ T4740] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.260607][ T4740] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.274622][ T4740] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.287398][ T4740] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.318963][ T4740] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.323771][ T4767] netlink: 'syz.2.464': attribute type 1 has an invalid length. [ 50.339711][ T4765] IPv4: Oversized IP packet from 127.202.26.0 [ 50.470978][ T4786] ref_ctr increment failed for inode: 0x27a offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881043e9080 [ 50.483925][ T4784] uprobe: syz.4.474:4784 failed to unregister, leaking uprobe [ 50.492603][ T4789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.475'. [ 50.506987][ T4789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.522026][ T4789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.522055][ T4792] loop2: detected capacity change from 0 to 512 [ 50.529254][ T4789] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 50.536851][ T4792] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 50.546871][ T4789] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 50.558855][ T4792] EXT4-fs (loop2): 1 truncate cleaned up [ 50.569589][ T4792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.602463][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.624231][ T4799] loop2: detected capacity change from 0 to 128 [ 50.647407][ T4799] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.662373][ T4799] ext4 filesystem being mounted at /101/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.698569][ T4802] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.708348][ T4802] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.726907][ T4797] veth1_macvtap: left promiscuous mode [ 50.732554][ T4797] macsec0: entered allmulticast mode [ 50.733623][ T3304] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.770242][ T4802] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.780065][ T4802] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.819628][ T4802] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.829572][ T4802] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.889459][ T4802] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.899322][ T4802] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.903481][ T4813] loop0: detected capacity change from 0 to 128 [ 50.935917][ T4813] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 50.949836][ T4817] IPv4: Oversized IP packet from 127.202.26.0 [ 50.991863][ T31] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 51.011171][ T4824] loop2: detected capacity change from 0 to 512 [ 51.018448][ T4824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.033960][ T4821] geneve0: entered allmulticast mode [ 51.041271][ T4824] EXT4-fs (loop2): 1 truncate cleaned up [ 51.047434][ T4824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.074851][ T4829] loop0: detected capacity change from 0 to 128 [ 51.127082][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.224383][ T4802] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.232695][ T4802] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.244395][ T4802] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.252700][ T4802] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.263837][ T4802] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.272147][ T4802] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.283793][ T4802] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.292212][ T4802] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.713147][ T4848] loop3: detected capacity change from 0 to 512 [ 51.730018][ T4848] EXT4-fs (loop3): 1 orphan inode deleted [ 51.736170][ T4848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.749160][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 51.750451][ T4848] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.784701][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.949025][ T4863] loop3: detected capacity change from 0 to 512 [ 51.960286][ T4863] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.972912][ T4863] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.048326][ T4869] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.077076][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.099406][ T4869] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.129610][ T4876] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 52.153219][ T4873] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 52.160307][ T3378] IPVS: starting estimator thread 0... [ 52.199410][ T4869] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.226800][ T4882] netlink: 'syz.3.511': attribute type 10 has an invalid length. [ 52.236068][ T4882] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.243939][ T4882] bridge_slave_1: left allmulticast mode [ 52.249650][ T4882] bridge_slave_1: left promiscuous mode [ 52.255309][ T4882] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.262853][ T4878] IPVS: using max 2448 ests per chain, 122400 per kthread [ 52.271835][ T4882] bridge_slave_1: entered promiscuous mode [ 52.278885][ T4882] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 52.291858][ T4869] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.330679][ T4869] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.345473][ T4869] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.353852][ T4880] loop2: detected capacity change from 0 to 1764 [ 52.359425][ T4869] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.370011][ T4880] ISOFS: unable to read i-node block [ 52.373777][ T4869] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.375329][ T4880] isofs_fill_super: get root inode failed [ 52.437948][ T4892] loop1: detected capacity change from 0 to 512 [ 52.445607][ T4888] loop3: detected capacity change from 0 to 512 [ 52.461276][ T4892] EXT4-fs (loop1): 1 orphan inode deleted [ 52.461993][ T4895] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.469266][ T4892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.489719][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:0: Failed to release dquot type 1 [ 52.499301][ T4892] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.515000][ T4898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 52.524013][ T4898] netlink: 32 bytes leftover after parsing attributes in process `syz.2.516'. [ 52.540464][ T4895] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.559185][ T4888] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.513: Failed to acquire dquot type 1 [ 52.576573][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.590195][ T4888] EXT4-fs (loop3): 1 truncate cleaned up [ 52.609419][ T4888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.633153][ T4888] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.633921][ T4895] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.658940][ T4888] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.725057][ T4895] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.762377][ T4925] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.839377][ T4925] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.899696][ T4925] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.949523][ T4925] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.139736][ T4948] loop3: detected capacity change from 0 to 128 [ 53.151760][ T4950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.533'. [ 53.151967][ T4895] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.170153][ T4948] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 53.175826][ T4950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.192836][ T4895] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.205173][ T4950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.212458][ T4950] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 53.224343][ T4950] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 53.237857][ T4895] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.247246][ T60] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 53.251397][ T4895] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.499101][ T4961] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.537'. [ 53.686388][ T4997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.553'. [ 54.156404][ T5001] netlink: 'syz.3.555': attribute type 13 has an invalid length. [ 54.190764][ T5001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.246406][ T5006] loop3: detected capacity change from 0 to 512 [ 54.260638][ T5006] EXT4-fs (loop3): 1 orphan inode deleted [ 54.266816][ T5006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.280959][ T60] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:4: Failed to release dquot type 1 [ 54.287970][ T5006] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.324262][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.395298][ T5030] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 54.443102][ T3446] Process accounting resumed [ 54.979434][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 54.979469][ T29] audit: type=1326 audit(1744935781.985:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 55.014159][ T29] audit: type=1326 audit(1744935781.985:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 55.037626][ T29] audit: type=1326 audit(1744935781.985:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 55.061014][ T29] audit: type=1326 audit(1744935781.985:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 55.084323][ T29] audit: type=1326 audit(1744935781.985:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 55.107754][ T29] audit: type=1326 audit(1744935781.985:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 55.131001][ T29] audit: type=1326 audit(1744935781.985:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 55.154297][ T29] audit: type=1326 audit(1744935781.985:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 55.177610][ T29] audit: type=1326 audit(1744935782.015:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 55.200858][ T29] audit: type=1326 audit(1744935782.015:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5166 comm="syz.4.569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 55.647176][ T5192] xt_CT: No such helper "pptp" [ 55.679933][ T5198] loop0: detected capacity change from 0 to 2048 [ 55.686688][ T5198] ext4: Unknown parameter 'noacl' [ 55.752369][ T5208] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 55.758926][ T5208] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 55.766603][ T5208] vhci_hcd vhci_hcd.0: Device attached [ 55.816475][ T5209] vhci_hcd: connection closed [ 55.816678][ T60] vhci_hcd: stop threads [ 55.825723][ T60] vhci_hcd: release socket [ 55.830195][ T60] vhci_hcd: disconnect device [ 55.926635][ T5218] 9pnet_fd: Insufficient options for proto=fd [ 55.991259][ T5222] netlink: 300 bytes leftover after parsing attributes in process `syz.4.585'. [ 56.219416][ T5239] loop3: detected capacity change from 0 to 512 [ 56.229354][ T5239] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.593: invalid indirect mapped block 256 (level 2) [ 56.243223][ T5239] EXT4-fs (loop3): 2 truncates cleaned up [ 56.250940][ T5239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.277538][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.321523][ T5246] SELinux: failed to load policy [ 56.471876][ T1030] Process accounting resumed [ 57.080122][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.625'. [ 57.089506][ T5316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.625'. [ 57.165328][ T4925] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.178217][ T4925] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.191392][ T4925] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.204152][ T4925] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.253997][ T5338] serio: Serial port ttyS3 [ 57.425936][ T5370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.630'. [ 57.434911][ T5370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.630'. [ 57.652108][ T5407] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.709448][ T5407] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.759004][ T5407] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.829302][ T5407] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.857015][ T5434] loop2: detected capacity change from 0 to 2048 [ 57.882227][ T5434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.905886][ T5407] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.908833][ T5434] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 57.925402][ T5407] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.930706][ T5434] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 57.949230][ T5434] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.949230][ T5434] [ 57.950211][ T5407] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.958902][ T5434] EXT4-fs (loop2): Total free blocks count 0 [ 57.958919][ T5434] EXT4-fs (loop2): Free/Dirty block details [ 57.958931][ T5434] EXT4-fs (loop2): free_blocks=2415919104 [ 57.984853][ T5434] EXT4-fs (loop2): dirty_blocks=16 [ 57.990071][ T5434] EXT4-fs (loop2): Block reservation details [ 57.996068][ T5434] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 58.003333][ T5359] loop3: detected capacity change from 0 to 1024 [ 58.006069][ T5451] tipc: Started in network mode [ 58.014991][ T5451] tipc: Node identity ac14140f, cluster identity 4711 [ 58.053114][ T5451] tipc: New replicast peer: 255.255.255.83 [ 58.059154][ T5451] tipc: Enabled bearer , priority 10 [ 58.068434][ T5407] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.102282][ T5462] bond2: entered promiscuous mode [ 58.107342][ T5462] bond2: entered allmulticast mode [ 58.113066][ T5462] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.140252][ T5465] netlink: 'syz.3.642': attribute type 2 has an invalid length. [ 58.148024][ T5465] netlink: 'syz.3.642': attribute type 1 has an invalid length. [ 58.155675][ T5465] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.642'. [ 58.163823][ T5467] netlink: 4 bytes leftover after parsing attributes in process `\'. [ 58.174901][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.353095][ T5480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.361897][ T5480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.397826][ T5480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.549627][ T5492] IPv4: Oversized IP packet from 127.202.26.0 [ 58.596487][ T5496] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.639139][ T5496] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.699298][ T5496] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.739696][ T5496] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.104575][ T5504] loop2: detected capacity change from 0 to 8192 [ 59.129553][ T5508] SELinux: failed to load policy [ 59.164858][ T5510] loop1: detected capacity change from 0 to 512 [ 59.172485][ T5510] EXT4-fs: Ignoring removed orlov option [ 59.178198][ T5510] EXT4-fs: Ignoring removed orlov option [ 59.183877][ T3378] tipc: Node number set to 2886997007 [ 59.189755][ T5510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.220170][ T5510] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.662: bg 0: block 248: padding at end of block bitmap is not set [ 59.234755][ T5510] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.662: Failed to acquire dquot type 1 [ 59.247010][ T5510] EXT4-fs (loop1): 1 truncate cleaned up [ 59.253418][ T5510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.266237][ T5510] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.281757][ T5504] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 59.289412][ T5504] FAT-fs (loop2): Filesystem has been set read-only [ 59.334698][ T5510] syz.1.662 (5510) used greatest stack depth: 9200 bytes left [ 59.379739][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.503412][ T5538] loop1: detected capacity change from 0 to 2048 [ 59.519252][ T5538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.537843][ T5538] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.554048][ T5538] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 59.566276][ T5538] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.566276][ T5538] [ 59.576077][ T5538] EXT4-fs (loop1): Total free blocks count 0 [ 59.582107][ T5538] EXT4-fs (loop1): Free/Dirty block details [ 59.588062][ T5538] EXT4-fs (loop1): free_blocks=2415919104 [ 59.593780][ T5538] EXT4-fs (loop1): dirty_blocks=16 [ 59.598921][ T5538] EXT4-fs (loop1): Block reservation details [ 59.604986][ T5538] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 59.620441][ T5538] tipc: New replicast peer: 255.255.255.83 [ 59.626335][ T5538] tipc: Enabled bearer , priority 10 [ 59.667530][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.704033][ T5557] loop1: detected capacity change from 0 to 128 [ 59.731444][ T5557] syz.1.675: attempt to access beyond end of device [ 59.731444][ T5557] loop1: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 59.747096][ T5562] loop2: detected capacity change from 0 to 128 [ 59.755262][ T5562] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 59.763141][ T5562] FAT-fs (loop2): Filesystem has been set read-only [ 59.769917][ T5562] syz.2.676: attempt to access beyond end of device [ 59.769917][ T5562] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 59.783600][ T5562] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 59.791444][ T5562] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 59.799491][ T5562] syz.2.676: attempt to access beyond end of device [ 59.799491][ T5562] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.813570][ T5562] syz.2.676: attempt to access beyond end of device [ 59.813570][ T5562] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.827069][ T5562] syz.2.676: attempt to access beyond end of device [ 59.827069][ T5562] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.840556][ T3408] kworker/u8:7: attempt to access beyond end of device [ 59.840556][ T3408] loop1: rw=1, sector=145, nr_sectors = 34 limit=128 [ 59.923561][ T5572] netlink: 'syz.1.682': attribute type 13 has an invalid length. [ 60.163644][ T5597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.693'. [ 60.172610][ T5597] netlink: 16 bytes leftover after parsing attributes in process `syz.3.693'. [ 60.263881][ T5608] ip6gretap0: entered promiscuous mode [ 60.269471][ T5608] ip6gretap0: entered allmulticast mode [ 60.275174][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 60.275189][ T29] audit: type=1326 audit(1744935787.265:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 60.304913][ T29] audit: type=1326 audit(1744935787.265:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 60.328239][ T29] audit: type=1326 audit(1744935787.275:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 60.351565][ T29] audit: type=1326 audit(1744935787.275:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 60.375097][ T29] audit: type=1326 audit(1744935787.275:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 60.398355][ T29] audit: type=1326 audit(1744935787.275:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 60.421598][ T29] audit: type=1400 audit(1744935787.275:832): avc: denied { block_suspend } for pid=5605 comm="syz.3.696" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.443281][ T29] audit: type=1326 audit(1744935787.275:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 60.468088][ T29] audit: type=1326 audit(1744935787.275:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5605 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 60.539787][ T5614] tipc: Started in network mode [ 60.544906][ T5614] tipc: Node identity ac14140f, cluster identity 4711 [ 60.553660][ T5614] tipc: New replicast peer: 255.255.255.83 [ 60.559620][ T5614] tipc: Enabled bearer , priority 10 [ 60.573984][ T5619] loop3: detected capacity change from 0 to 512 [ 60.589862][ T5619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 60.608623][ T5619] ext4 filesystem being mounted at /156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.630959][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 60.700577][ T29] audit: type=1326 audit(1744935787.705:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5635 comm="syz.4.708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 60.884108][ T5650] syzkaller0: entered allmulticast mode [ 60.890093][ T5650] syzkaller0: entered promiscuous mode [ 60.898176][ T5650] syzkaller0 (unregistering): left promiscuous mode [ 60.904813][ T5650] syzkaller0 (unregistering): left allmulticast mode [ 61.302201][ T5668] SELinux: failed to load policy [ 61.677615][ T3378] tipc: Node number set to 2886997007 [ 61.691107][ T5656] syz.3.717 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 61.705182][ T5656] CPU: 0 UID: 0 PID: 5656 Comm: syz.3.717 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 61.705214][ T5656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 61.705230][ T5656] Call Trace: [ 61.705238][ T5656] [ 61.705248][ T5656] dump_stack_lvl+0xf6/0x150 [ 61.705277][ T5656] dump_stack+0x15/0x1a [ 61.705310][ T5656] dump_header+0x83/0x2d0 [ 61.705333][ T5656] oom_kill_process+0x341/0x4c0 [ 61.705434][ T5656] out_of_memory+0x9d1/0xc20 [ 61.705462][ T5656] mem_cgroup_out_of_memory+0x13f/0x190 [ 61.705495][ T5656] try_charge_memcg+0x5f1/0x890 [ 61.705523][ T5656] obj_cgroup_charge_pages+0xc0/0x1a0 [ 61.705624][ T5656] __memcg_kmem_charge_page+0x9d/0x170 [ 61.705724][ T5656] __alloc_frozen_pages_noprof+0x1a6/0x360 [ 61.705796][ T5656] alloc_pages_mpol+0xb6/0x260 [ 61.705825][ T5656] alloc_pages_noprof+0xe8/0x130 [ 61.705868][ T5656] __vmalloc_node_range_noprof+0x6ea/0xe80 [ 61.705922][ T5656] __kvmalloc_node_noprof+0x311/0x520 [ 61.706036][ T5656] ? ip_set_alloc+0x1f/0x30 [ 61.706070][ T5656] ? ip_set_alloc+0x1f/0x30 [ 61.706105][ T5656] ip_set_alloc+0x1f/0x30 [ 61.706138][ T5656] hash_netiface_create+0x273/0x730 [ 61.706173][ T5656] ? __nla_parse+0x40/0x60 [ 61.706220][ T5656] ? __pfx_hash_netiface_create+0x10/0x10 [ 61.706271][ T5656] ip_set_create+0x3b6/0x970 [ 61.706382][ T5656] ? __nla_parse+0x40/0x60 [ 61.706412][ T5656] nfnetlink_rcv_msg+0x4ba/0x580 [ 61.706464][ T5656] netlink_rcv_skb+0x12f/0x230 [ 61.706486][ T5656] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 61.706595][ T5656] nfnetlink_rcv+0x187/0x1610 [ 61.706624][ T5656] ? __kfree_skb+0x102/0x150 [ 61.706693][ T5656] ? nlmon_xmit+0x51/0x60 [ 61.706728][ T5656] ? __kfree_skb+0x102/0x150 [ 61.706751][ T5656] ? consume_skb+0x49/0x160 [ 61.706775][ T5656] ? nlmon_xmit+0x51/0x60 [ 61.706870][ T5656] ? dev_hard_start_xmit+0x3d1/0x400 [ 61.706901][ T5656] ? __dev_queue_xmit+0xb76/0x20b0 [ 61.706925][ T5656] ? should_fail_ex+0x31/0x270 [ 61.706945][ T5656] ? ref_tracker_free+0x3b8/0x420 [ 61.706999][ T5656] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 61.707028][ T5656] netlink_unicast+0x605/0x6c0 [ 61.707084][ T5656] netlink_sendmsg+0x609/0x720 [ 61.707112][ T5656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 61.707136][ T5656] __sock_sendmsg+0x140/0x180 [ 61.707204][ T5656] ____sys_sendmsg+0x350/0x4e0 [ 61.707229][ T5656] __sys_sendmsg+0x1a0/0x240 [ 61.707273][ T5656] __x64_sys_sendmsg+0x46/0x50 [ 61.707378][ T5656] x64_sys_call+0x26f3/0x2e10 [ 61.707398][ T5656] do_syscall_64+0xc9/0x1a0 [ 61.707437][ T5656] ? clear_bhb_loop+0x25/0x80 [ 61.707462][ T5656] ? clear_bhb_loop+0x25/0x80 [ 61.707506][ T5656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.707525][ T5656] RIP: 0033:0x7f10df16e169 [ 61.707543][ T5656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 61.707562][ T5656] RSP: 002b:00007f10dd7d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 61.707641][ T5656] RAX: ffffffffffffffda RBX: 00007f10df395fa0 RCX: 00007f10df16e169 [ 61.707652][ T5656] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 61.707663][ T5656] RBP: 00007f10df1f0a68 R08: 0000000000000000 R09: 0000000000000000 [ 61.707675][ T5656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.707688][ T5656] R13: 0000000000000000 R14: 00007f10df395fa0 R15: 00007ffec180e258 [ 61.707708][ T5656] [ 62.046008][ T5656] memory: usage 307196kB, limit 307200kB, failcnt 177 [ 62.053324][ T5656] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 62.061286][ T5656] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 62.068593][ T5656] Memory cgroup stats for /syz3: [ 62.069740][ T5656] cache 4096 [ 62.078094][ T5656] rss 4096 [ 62.081132][ T5656] shmem 0 [ 62.084074][ T5656] mapped_file 4096 [ 62.087834][ T5656] dirty 0 [ 62.090844][ T5656] writeback 0 [ 62.094197][ T5656] workingset_refault_anon 50 [ 62.098795][ T5656] workingset_refault_file 1 [ 62.103351][ T5656] swap 192512 [ 62.106641][ T5656] swapcached 8192 [ 62.110400][ T5656] pgpgin 22846 [ 62.113775][ T5656] pgpgout 22843 [ 62.117284][ T5656] pgfault 36513 [ 62.120764][ T5656] pgmajfault 26 [ 62.124342][ T5656] inactive_anon 0 [ 62.128016][ T5656] active_anon 8192 [ 62.131733][ T5656] inactive_file 0 [ 62.135395][ T5656] active_file 4096 [ 62.139200][ T5656] unevictable 0 [ 62.142786][ T5656] hierarchical_memory_limit 314572800 [ 62.148258][ T5656] hierarchical_memsw_limit 9223372036854771712 [ 62.154464][ T5656] total_cache 4096 [ 62.158258][ T5656] total_rss 4096 [ 62.161808][ T5656] total_shmem 0 [ 62.165337][ T5656] total_mapped_file 4096 [ 62.169635][ T5656] total_dirty 0 [ 62.173188][ T5656] total_writeback 0 [ 62.177003][ T5656] total_workingset_refault_anon 50 [ 62.182144][ T5656] total_workingset_refault_file 1 [ 62.187242][ T5656] total_swap 192512 [ 62.191146][ T5656] total_swapcached 8192 [ 62.195313][ T5656] total_pgpgin 22846 [ 62.199241][ T5656] total_pgpgout 22843 [ 62.203230][ T5656] total_pgfault 36513 [ 62.207215][ T5656] total_pgmajfault 26 [ 62.211219][ T5656] total_inactive_anon 0 [ 62.215383][ T5656] total_active_anon 8192 [ 62.219688][ T5656] total_inactive_file 0 [ 62.223851][ T5656] total_active_file 4096 [ 62.228119][ T5656] total_unevictable 0 [ 62.232120][ T5656] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.717,pid=5655,uid=0 [ 62.246646][ T5656] Memory cgroup out of memory: Killed process 5655 (syz.3.717) total-vm:95796kB, anon-rss:936kB, file-rss:22192kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 62.669136][ T5656] syz.3.717 (5656) used greatest stack depth: 6968 bytes left [ 62.717623][ T5496] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.740340][ T5496] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.753464][ T5496] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.764711][ T5496] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.138259][ T5718] 0ªX¹¦D: left allmulticast mode [ 63.196321][ T5718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.363636][ T5732] netlink: 'syz.3.749': attribute type 3 has an invalid length. [ 63.577447][ T5745] bridge: RTM_NEWNEIGH with invalid ether address [ 63.753061][ T5758] Set syz1 is full, maxelem 65536 reached [ 63.875680][ T5779] veth0: entered promiscuous mode [ 63.881372][ T5779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 63.946945][ T5785] syzkaller0: entered promiscuous mode [ 63.952570][ T5785] syzkaller0: entered allmulticast mode [ 64.034147][ T5793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.056424][ T5793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.088501][ T5793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.590215][ T5814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.598759][ T5814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.419867][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 65.419884][ T29] audit: type=1326 audit(1744935792.425:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 65.455399][ T29] audit: type=1326 audit(1744935792.455:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9e5900087 code=0x7ffc0000 [ 65.478759][ T29] audit: type=1326 audit(1744935792.455:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 65.502299][ T29] audit: type=1326 audit(1744935792.455:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 65.525759][ T29] audit: type=1326 audit(1744935792.455:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5837 comm="syz.4.792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9e58fe169 code=0x7ffc0000 [ 65.598611][ T29] audit: type=1400 audit(1744935792.595:1058): avc: denied { write } for pid=5847 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.618143][ T29] audit: type=1400 audit(1744935792.595:1059): avc: denied { connect } for pid=5847 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.637702][ T29] audit: type=1400 audit(1744935792.605:1060): avc: denied { name_connect } for pid=5847 comm="syz.4.798" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 65.660216][ T29] audit: type=1400 audit(1744935792.665:1061): avc: denied { listen } for pid=5847 comm="syz.4.798" lport=48940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.681329][ T29] audit: type=1400 audit(1744935792.665:1062): avc: denied { accept } for pid=5847 comm="syz.4.798" lport=48940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 65.706580][ T5853] netlink: 14 bytes leftover after parsing attributes in process `syz.2.799'. [ 65.725060][ T5853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.735325][ T5853] bond_slave_0: left allmulticast mode [ 65.743187][ T5853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.752342][ T5853] bond_slave_1: left allmulticast mode [ 65.759182][ T5853] bond0 (unregistering): Released all slaves [ 66.001066][ T5861] syz.2.803 (5861): attempted to duplicate a private mapping with mremap. This is not supported. [ 66.044364][ T5871] IPv6: Can't replace route, no match found [ 66.065479][ T5873] tipc: Enabling of bearer rejected, failed to enable media [ 66.162179][ T5889] IPv4: Oversized IP packet from 127.202.26.0 [ 66.313328][ T5915] netlink: 'syz.0.824': attribute type 7 has an invalid length. [ 66.321057][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 66.459234][ T5932] IPv6: Can't replace route, no match found [ 66.476098][ T5936] pim6reg1: entered promiscuous mode [ 66.481465][ T5936] pim6reg1: entered allmulticast mode [ 66.493293][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 66.615474][ T5950] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.658895][ T5950] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.728406][ T5950] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.810008][ T5950] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.878470][ T5950] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.895865][ T5950] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.910655][ T5950] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.922946][ T5950] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.979305][ T3379] IPVS: starting estimator thread 0... [ 67.077607][ T5976] IPVS: using max 2592 ests per chain, 129600 per kthread [ 67.091519][ T5986] netlink: 'syz.0.850': attribute type 9 has an invalid length. [ 67.498051][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 67.764794][ T6003] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.809080][ T6003] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.869711][ T6003] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.919089][ T6003] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.019154][ T6003] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.031467][ T6003] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.043650][ T6003] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.058283][ T6003] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.091439][ T6011] bridge: RTM_NEWNEIGH with invalid ether address [ 68.228903][ T6028] loop1: detected capacity change from 0 to 2048 [ 68.239329][ T6028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.265907][ T6028] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.864: bg 0: block 65: padding at end of block bitmap is not set [ 68.341386][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.537726][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.631674][ T6053] loop1: detected capacity change from 0 to 512 [ 68.664021][ T6056] loop3: detected capacity change from 0 to 128 [ 68.688232][ T6053] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 68.714027][ T6053] EXT4-fs (loop1): 1 truncate cleaned up [ 68.722743][ T6053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.791842][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.822079][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.878'. [ 68.946447][ T6076] loop1: detected capacity change from 0 to 128 [ 69.143755][ T6090] loop1: detected capacity change from 0 to 2048 [ 69.168717][ T6090] EXT4-fs (loop1): failed to initialize system zone (-117) [ 69.183002][ T6090] EXT4-fs (loop1): mount failed [ 69.205314][ T6095] vlan0: entered allmulticast mode [ 69.210492][ T6095] bond0: entered allmulticast mode [ 69.215617][ T6095] bond_slave_0: entered allmulticast mode [ 69.221383][ T6095] bond_slave_1: entered allmulticast mode [ 69.243500][ T6095] bridge0: port 3(vlan0) entered blocking state [ 69.249931][ T6095] bridge0: port 3(vlan0) entered disabled state [ 69.281784][ T6095] vlan0: entered promiscuous mode [ 69.286890][ T6095] bond0: entered promiscuous mode [ 69.292030][ T6095] bond_slave_0: entered promiscuous mode [ 69.297742][ T6095] bond_slave_1: entered promiscuous mode [ 69.313099][ T6095] bridge0: port 3(vlan0) entered blocking state [ 69.319480][ T6095] bridge0: port 3(vlan0) entered forwarding state [ 69.368674][ T6101] sch_fq: defrate 0 ignored. [ 69.494469][ T6112] loop3: detected capacity change from 0 to 8192 [ 69.530946][ T6118] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.567868][ T3379] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 69.616877][ T6126] netlink: 'syz.3.901': attribute type 7 has an invalid length. [ 69.624758][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 69.636107][ T6118] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.657103][ T6128] netlink: 'syz.4.891': attribute type 10 has an invalid length. [ 69.666221][ T6128] hsr_slave_0: left promiscuous mode [ 69.673138][ T6128] hsr_slave_1: left promiscuous mode [ 69.691677][ T6118] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.732690][ T6135] loop3: detected capacity change from 0 to 512 [ 69.742857][ T6135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.755834][ T6135] ext4 filesystem being mounted at /188/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.783619][ T6118] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.786540][ T6137] loop2: detected capacity change from 0 to 4096 [ 69.806212][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.817862][ T6137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.921088][ T6154] loop3: detected capacity change from 0 to 2048 [ 70.055351][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.087095][ T6166] hsr0: entered promiscuous mode [ 70.111298][ T6170] loop2: detected capacity change from 0 to 128 [ 70.170402][ T6172] xt_hashlimit: size too large, truncated to 1048576 [ 70.177234][ T6172] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 70.257504][ T1309] kworker/u8:5: attempt to access beyond end of device [ 70.257504][ T1309] loop2: rw=1, sector=153, nr_sectors = 8 limit=128 [ 70.272454][ T1309] kworker/u8:5: attempt to access beyond end of device [ 70.272454][ T1309] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 70.287224][ T1309] kworker/u8:5: attempt to access beyond end of device [ 70.287224][ T1309] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 70.300938][ T1309] kworker/u8:5: attempt to access beyond end of device [ 70.300938][ T1309] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 70.314411][ T1309] kworker/u8:5: attempt to access beyond end of device [ 70.314411][ T1309] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 70.328027][ T1309] kworker/u8:5: attempt to access beyond end of device [ 70.328027][ T1309] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 70.342615][ T1309] kworker/u8:5: attempt to access beyond end of device [ 70.342615][ T1309] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 70.356047][ T1309] kworker/u8:5: attempt to access beyond end of device [ 70.356047][ T1309] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 70.370357][ T1309] kworker/u8:5: attempt to access beyond end of device [ 70.370357][ T1309] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 70.384340][ T1309] kworker/u8:5: attempt to access beyond end of device [ 70.384340][ T1309] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 70.437378][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 70.437395][ T29] audit: type=1326 audit(1744935797.435:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 70.493731][ T6192] netlink: 'syz.3.929': attribute type 7 has an invalid length. [ 70.501468][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.929'. [ 70.515585][ T29] audit: type=1326 audit(1744935797.475:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 70.539288][ T29] audit: type=1326 audit(1744935797.475:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 70.562930][ T29] audit: type=1326 audit(1744935797.475:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 70.578602][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.586445][ T29] audit: type=1326 audit(1744935797.475:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 70.594164][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.594187][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.594283][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.617583][ T29] audit: type=1326 audit(1744935797.475:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 70.625265][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.633120][ T29] audit: type=1326 audit(1744935797.475:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 70.640684][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.663942][ T29] audit: type=1326 audit(1744935797.475:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 70.671752][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.671803][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.671827][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.671855][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.695256][ T29] audit: type=1326 audit(1744935797.475:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 70.702851][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.702879][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.726346][ T29] audit: type=1326 audit(1744935797.475:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6189 comm="syz.3.928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 70.734031][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.734057][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.835072][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.842942][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.850720][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.858465][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.866281][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.874055][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.881908][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.889726][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.897447][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.905205][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.913007][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.920766][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.928502][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.936215][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.943989][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.951779][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.959533][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.967323][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.975075][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.982889][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.990641][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 70.998401][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 71.006137][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 71.013909][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 71.021661][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 71.029423][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 71.037173][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 71.044917][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 71.052675][ T23] hid-generic 0000:007F:FFFFFFFE.0003: unknown main item tag 0x0 [ 71.060643][ T3379] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 71.071763][ T23] hid-generic 0000:007F:FFFFFFFE.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.101294][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'. [ 71.139053][ T6205] syzkaller0: entered promiscuous mode [ 71.144558][ T6205] syzkaller0: entered allmulticast mode [ 71.256766][ T6215] xt_hashlimit: max too large, truncated to 1048576 [ 71.265331][ T6215] Cannot find set identified by id 0 to match [ 71.408214][ T6227] bridge_slave_0: left allmulticast mode [ 71.413923][ T6227] bridge_slave_0: left promiscuous mode [ 71.419759][ T6227] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.429566][ T6227] bridge_slave_1: left allmulticast mode [ 71.435248][ T6227] bridge_slave_1: left promiscuous mode [ 71.441069][ T6227] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.448919][ T6227] vlan0: left promiscuous mode [ 71.453748][ T6227] bond0: left promiscuous mode [ 71.461107][ T6227] bond0: (slave bond_slave_0): Releasing backup interface [ 71.469239][ T6227] bond_slave_0: left allmulticast mode [ 71.474786][ T6227] bond_slave_0: left promiscuous mode [ 71.482675][ T6227] bond0: (slave bond_slave_1): Releasing backup interface [ 71.493210][ T6227] bond_slave_1: left allmulticast mode [ 71.498751][ T6227] bond_slave_1: left promiscuous mode [ 71.507744][ T6227] team0: Port device team_slave_0 removed [ 71.516779][ T6227] team0: Port device team_slave_1 removed [ 71.523834][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.531296][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.540286][ T6227] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.548000][ T6227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.563025][ T6227] bridge0: port 3(vlan0) entered disabled state [ 72.127675][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 72.179764][ T6260] x_tables: duplicate underflow at hook 1 [ 72.423517][ T6284] vlan0: entered allmulticast mode [ 72.425950][ T6285] loop2: detected capacity change from 0 to 2048 [ 72.428815][ T6284] bond0: entered allmulticast mode [ 72.440372][ T6284] bond_slave_0: entered allmulticast mode [ 72.446110][ T6284] bond_slave_1: entered allmulticast mode [ 72.455819][ T6283] syz.0.963: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 72.455978][ T6284] bridge0: port 3(vlan0) entered blocking state [ 72.470422][ T6283] CPU: 0 UID: 0 PID: 6283 Comm: syz.0.963 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 72.470458][ T6283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 72.470474][ T6283] Call Trace: [ 72.470482][ T6283] [ 72.470491][ T6283] dump_stack_lvl+0xf6/0x150 [ 72.470538][ T6283] dump_stack+0x15/0x1a [ 72.470560][ T6283] warn_alloc+0x145/0x1b0 [ 72.470602][ T6283] ? __vmalloc_node_range_noprof+0x8a/0xe80 [ 72.470706][ T6283] __vmalloc_node_range_noprof+0xac/0xe80 [ 72.470830][ T6283] ? __pfx_futex_wake_mark+0x10/0x10 [ 72.470869][ T6283] ? __rcu_read_unlock+0x4e/0x70 [ 72.470896][ T6283] ? avc_has_perm_noaudit+0x1cc/0x210 [ 72.470926][ T6283] ? should_fail_ex+0x31/0x270 [ 72.470964][ T6283] ? should_failslab+0x8f/0xb0 [ 72.470993][ T6283] vmalloc_user_noprof+0x59/0x70 [ 72.471026][ T6283] ? xskq_create+0x79/0xd0 [ 72.471134][ T6283] xskq_create+0x79/0xd0 [ 72.471164][ T6283] xsk_init_queue+0x82/0xd0 [ 72.471193][ T6283] xsk_setsockopt+0x3fe/0x550 [ 72.471318][ T6283] ? __pfx_xsk_setsockopt+0x10/0x10 [ 72.471346][ T6283] __sys_setsockopt+0x187/0x200 [ 72.471377][ T6283] __x64_sys_setsockopt+0x66/0x80 [ 72.471406][ T6283] x64_sys_call+0x2a09/0x2e10 [ 72.471498][ T6283] do_syscall_64+0xc9/0x1a0 [ 72.471529][ T6283] ? clear_bhb_loop+0x25/0x80 [ 72.471555][ T6283] ? clear_bhb_loop+0x25/0x80 [ 72.471714][ T6283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.471743][ T6283] RIP: 0033:0x7fe5da07e169 [ 72.471757][ T6283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.471773][ T6283] RSP: 002b:00007fe5d86e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 72.471790][ T6283] RAX: ffffffffffffffda RBX: 00007fe5da2a5fa0 RCX: 00007fe5da07e169 [ 72.471802][ T6283] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 72.471875][ T6283] RBP: 00007fe5da100a68 R08: 0000000000000004 R09: 0000000000000000 [ 72.471890][ T6283] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 72.471906][ T6283] R13: 0000000000000000 R14: 00007fe5da2a5fa0 R15: 00007ffddd80d848 [ 72.471928][ T6283] [ 72.471942][ T6283] Mem-Info: [ 72.476755][ T6284] bridge0: port 3(vlan0) entered disabled state [ 72.489071][ T6283] active_anon:26043 inactive_anon:7 isolated_anon:29 [ 72.489071][ T6283] active_file:16356 inactive_file:2048 isolated_file:0 [ 72.489071][ T6283] unevictable:0 dirty:213 writeback:0 [ 72.489071][ T6283] slab_reclaimable:2873 slab_unreclaimable:25154 [ 72.489071][ T6283] mapped:28266 shmem:22581 pagetables:954 [ 72.489071][ T6283] sec_pagetables:0 bounce:0 [ 72.489071][ T6283] kernel_misc_reclaimable:0 [ 72.489071][ T6283] free:1865711 free_pcp:4078 free_cma:0 [ 72.501468][ T6284] vlan0: entered promiscuous mode [ 72.502486][ T6283] Node 0 active_anon:104172kB inactive_anon:28kB active_file:65424kB inactive_file:8192kB unevictable:0kB isolated(anon):116kB isolated(file):0kB mapped:113064kB dirty:852kB writeback:0kB shmem:90324kB writeback_tmp:0kB kernel_stack:2960kB pagetables:3816kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 72.505411][ T6284] bond0: entered promiscuous mode [ 72.510013][ T6283] Node 0 [ 72.514247][ T6284] bond_slave_0: entered promiscuous mode [ 72.518586][ T6283] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 72.524510][ T6284] bond_slave_1: entered promiscuous mode [ 72.530314][ T6283] lowmem_reserve[]: [ 72.618192][ T6284] bridge0: port 3(vlan0) entered blocking state [ 72.622239][ T6283] 0 2882 7860 7860 [ 72.641887][ T6284] bridge0: port 3(vlan0) entered forwarding state [ 72.650328][ T6283] [ 72.851290][ T6283] Node 0 DMA32 free:2947784kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951312kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 72.879952][ T6283] lowmem_reserve[]: 0 0 4978 4978 [ 72.880668][ T6285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.885044][ T6283] Node 0 Normal free:4499944kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB active_anon:110484kB inactive_anon:28kB active_file:65424kB inactive_file:8192kB unevictable:100kB writepending:852kB present:5242880kB managed:5098244kB mlocked:36kB bounce:0kB free_pcp:6036kB local_pcp:3128kB free_cma:0kB [ 72.927576][ T6283] lowmem_reserve[]: 0 0 0 0 [ 72.932218][ T6283] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 72.945027][ T6283] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947784kB [ 72.961245][ T6283] Node 0 Normal: 171*4kB (UME) 191*8kB (UME) 118*16kB (UME) 147*32kB (UME) 240*64kB (UME) 95*128kB (UME) 66*256kB (UME) 61*512kB (UME) 48*1024kB (UME) 28*2048kB (UM) 1052*4096kB (UM) = 4499940kB [ 72.980680][ T6283] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 72.990178][ T6283] 42555 total pagecache pages [ 72.994883][ T6283] 7 pages in swap cache [ 72.999090][ T6283] Free swap = 124968kB [ 73.003327][ T6283] Total swap = 124996kB [ 73.007505][ T6283] 2097051 pages RAM [ 73.011447][ T6283] 0 pages HighMem/MovableOnly [ 73.016224][ T6283] 80822 pages reserved [ 73.106678][ T6296] netlink: 34 bytes leftover after parsing attributes in process `syz.0.966'. [ 73.167724][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.247704][ T3378] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.342079][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.372050][ T6309] xt_hashlimit: size too large, truncated to 1048576 [ 73.378898][ T6309] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 73.422430][ T6314] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 73.571894][ T6328] bridge_slave_0: left allmulticast mode [ 73.577597][ T6328] bridge_slave_0: left promiscuous mode [ 73.583226][ T6328] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.602550][ T6331] loop2: detected capacity change from 0 to 512 [ 73.629316][ T6328] bridge_slave_1: left allmulticast mode [ 73.634999][ T6328] bridge_slave_1: left promiscuous mode [ 73.640753][ T6328] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.649562][ T6331] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.668740][ T6328] vlan0: left promiscuous mode [ 73.670015][ T6331] EXT4-fs (loop2): orphan cleanup on readonly fs [ 73.673673][ T6328] bond0: left promiscuous mode [ 73.681468][ T6331] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.979: bg 0: block 248: padding at end of block bitmap is not set [ 73.700506][ T6331] EXT4-fs error (device loop2): ext4_acquire_dquot:6935: comm syz.2.979: Failed to acquire dquot type 1 [ 73.718017][ T6331] EXT4-fs (loop2): 1 truncate cleaned up [ 73.718012][ T6328] bond0: (slave bond_slave_0): Releasing backup interface [ 73.731927][ T6328] bond_slave_0: left allmulticast mode [ 73.737585][ T6328] bond_slave_0: left promiscuous mode [ 73.743580][ T6331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 73.758498][ T6328] bond0: (slave bond_slave_1): Releasing backup interface [ 73.773058][ T6328] bond_slave_1: left allmulticast mode [ 73.778631][ T6328] bond_slave_1: left promiscuous mode [ 73.802255][ T6328] team0: Port device team_slave_0 removed [ 73.826381][ T6328] team0: Port device team_slave_1 removed [ 73.848000][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.855489][ T6328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.881000][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.888506][ T6328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.895964][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 73.922403][ T6328] bridge0: port 3(vlan0) entered disabled state [ 73.944651][ T6118] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.961758][ T6118] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.989916][ T6118] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.016696][ T6118] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.220973][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 74.403536][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.423424][ T6350] wireguard0: entered promiscuous mode [ 74.429007][ T6350] wireguard0: entered allmulticast mode [ 74.465188][ T6353] loop2: detected capacity change from 0 to 512 [ 74.485259][ T6353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 74.499932][ T6353] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.705655][ T6356] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.987: corrupted inode contents [ 74.760857][ T6356] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #19: comm syz.2.987: mark_inode_dirty error [ 74.816907][ T6356] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.987: corrupted inode contents [ 74.834498][ T6356] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.987: mark_inode_dirty error [ 74.846864][ T6356] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.987: mark inode dirty (error -117) [ 74.865203][ T6356] EXT4-fs warning (device loop2): ext4_evict_inode:279: xattr delete (err -117) [ 74.943865][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 74.961449][ T6374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 74.974834][ T6374] ip6gre1: entered allmulticast mode [ 75.018288][ T6378] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 75.020227][ T6376] $Hÿ: renamed from bond0 (while UP) [ 75.216172][ T6396] netlink: 16402 bytes leftover after parsing attributes in process `+}[@'. [ 75.247863][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 75.576939][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 75.585959][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 75.590611][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 75.590626][ T29] audit: type=1326 audit(1744935802.595:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da07e169 code=0x7ffc0000 [ 75.595353][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 75.603153][ T29] audit: type=1326 audit(1744935802.605:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5da07e169 code=0x7ffc0000 [ 75.673520][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 75.682473][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 75.693719][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 75.765852][ T6416] $Hÿ: renamed from bond0 (while UP) [ 75.775229][ T6416] $Hÿ: entered promiscuous mode [ 75.818928][ T6413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1009'. [ 75.965230][ T6422] loop2: detected capacity change from 0 to 512 [ 76.049692][ T29] audit: type=1326 audit(1744935802.635:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da07e169 code=0x7ffc0000 [ 76.069093][ T6422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 76.073184][ T29] audit: type=1326 audit(1744935802.635:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da07e169 code=0x7ffc0000 [ 76.087941][ T6422] ext4 filesystem being mounted at /180/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.108899][ T29] audit: type=1326 audit(1744935802.635:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5da07e169 code=0x7ffc0000 [ 76.108932][ T29] audit: type=1326 audit(1744935802.715:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da07e169 code=0x7ffc0000 [ 76.166376][ T29] audit: type=1326 audit(1744935802.715:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da07e169 code=0x7ffc0000 [ 76.189893][ T29] audit: type=1326 audit(1744935802.765:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe5da07e169 code=0x7ffc0000 [ 76.213303][ T29] audit: type=1326 audit(1744935802.765:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da07e169 code=0x7ffc0000 [ 76.236734][ T29] audit: type=1326 audit(1744935802.765:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6415 comm="syz.0.1010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5da07e169 code=0x7ffc0000 [ 76.298639][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 76.337606][ T6431] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.1011: corrupted inode contents [ 76.357205][ T6431] EXT4-fs error (device loop2): ext4_dirty_inode:6103: inode #19: comm syz.2.1011: mark_inode_dirty error [ 76.371176][ T6431] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #19: comm syz.2.1011: corrupted inode contents [ 76.408892][ T6431] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.1011: mark_inode_dirty error [ 76.413205][ T6436] macvlan1: entered promiscuous mode [ 76.431114][ T6431] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.1011: mark inode dirty (error -117) [ 76.442306][ T6436] ipvlan0: entered promiscuous mode [ 76.457745][ T6436] ipvlan0: left promiscuous mode [ 76.464219][ T6431] EXT4-fs warning (device loop2): ext4_evict_inode:279: xattr delete (err -117) [ 76.473579][ T6436] macvlan1: left promiscuous mode [ 76.524979][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 76.732656][ T6459] wireguard0: entered promiscuous mode [ 76.738195][ T6459] wireguard0: entered allmulticast mode [ 76.866244][ T6467] loop2: detected capacity change from 0 to 512 [ 76.917891][ T6467] EXT4-fs: Ignoring removed nobh option [ 77.024956][ T6467] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1027: invalid indirect mapped block 256 (level 2) [ 77.039897][ T6467] EXT4-fs (loop2): 2 truncates cleaned up [ 77.046013][ T6467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.327793][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 77.507846][ T6488] netlink: 'syz.0.1032': attribute type 12 has an invalid length. [ 77.645034][ T1309] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 77.668080][ T1309] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 77.680585][ T1309] EXT4-fs (loop2): This should not happen!! Data will be lost [ 77.680585][ T1309] [ 77.690240][ T1309] EXT4-fs (loop2): Total free blocks count 0 [ 77.696297][ T1309] EXT4-fs (loop2): Free/Dirty block details [ 77.702215][ T1309] EXT4-fs (loop2): free_blocks=0 [ 77.707317][ T1309] EXT4-fs (loop2): dirty_blocks=16000 [ 77.712730][ T1309] EXT4-fs (loop2): Block reservation details [ 77.718813][ T1309] EXT4-fs (loop2): i_reserved_data_blocks=16000 [ 77.764283][ T1309] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 78.367701][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 78.422059][ T6504] wireguard0: entered promiscuous mode [ 78.427707][ T6504] wireguard0: entered allmulticast mode [ 78.613065][ T6514] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.694611][ T6514] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.780311][ T6514] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.815269][ T6525] pim6reg1: entered promiscuous mode [ 78.820667][ T6525] pim6reg1: entered allmulticast mode [ 78.828979][ T6514] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.884480][ T6514] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.896904][ T6514] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.909865][ T6514] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.921626][ T6514] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.965688][ T6532] .: renamed from bond0 (while UP) [ 79.009031][ T1309] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 79.417758][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 79.833581][ T6563] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.843398][ T6563] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.862855][ T6559] loop2: detected capacity change from 0 to 256 [ 79.869622][ T6559] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.882943][ T6563] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.892784][ T6563] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.958942][ T6563] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.968869][ T6563] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.999216][ T6571] loop2: detected capacity change from 0 to 256 [ 80.029453][ T6563] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.039259][ T6563] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.093904][ T6563] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.102169][ T6563] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.115046][ T6563] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.123329][ T6563] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.136681][ T6563] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.144935][ T6563] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.158589][ T6563] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.166868][ T6563] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.420599][ T6584] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.430497][ T6584] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.454644][ T6585] __nla_validate_parse: 14 callbacks suppressed [ 80.454707][ T6585] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1066'. [ 80.476064][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 80.511239][ T6590] @: renamed from vlan0 [ 80.578311][ T6584] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.588256][ T6584] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.597992][ T6582] Set syz1 is full, maxelem 65536 reached [ 80.648948][ T6584] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.658910][ T6584] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.729810][ T6584] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 80.739677][ T6584] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.804936][ T6601] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.856607][ T6603] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1074'. [ 80.879565][ T6601] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.929443][ T6601] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.938304][ T1030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 80.990297][ T6601] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.041995][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 81.042021][ T29] audit: type=1400 audit(1744935808.045:1418): avc: denied { getopt } for pid=6614 comm="syz.2.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.079791][ T29] audit: type=1400 audit(1744935808.075:1419): avc: denied { getopt } for pid=6614 comm="syz.2.1088" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.109732][ T6601] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.122635][ T6601] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.134827][ T6601] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.147395][ T6601] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.322407][ T29] audit: type=1400 audit(1744935808.325:1420): avc: denied { ioctl } for pid=6632 comm="syz.2.1084" path="socket:[15560]" dev="sockfs" ino=15560 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 81.372636][ T29] audit: type=1400 audit(1744935808.355:1421): avc: denied { shutdown } for pid=6632 comm="syz.2.1084" lport=40159 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 81.510426][ T1030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 81.888614][ T29] audit: type=1326 audit(1744935808.815:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00676be169 code=0x7ffc0000 [ 81.912204][ T29] audit: type=1326 audit(1744935808.815:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00676be169 code=0x7ffc0000 [ 81.935706][ T29] audit: type=1326 audit(1744935808.845:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00676be169 code=0x7ffc0000 [ 81.959215][ T29] audit: type=1326 audit(1744935808.845:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00676be169 code=0x7ffc0000 [ 81.982568][ T29] audit: type=1326 audit(1744935808.845:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00676be169 code=0x7ffc0000 [ 82.006053][ T29] audit: type=1326 audit(1744935808.845:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6652 comm="syz.2.1093" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f00676be169 code=0x7ffc0000 [ 82.343800][ T3309] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 82.354761][ T3309] CPU: 1 UID: 0 PID: 3309 Comm: syz-executor Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 82.354791][ T3309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.354806][ T3309] Call Trace: [ 82.354818][ T3309] [ 82.354825][ T3309] dump_stack_lvl+0xf6/0x150 [ 82.354862][ T3309] dump_stack+0x15/0x1a [ 82.354878][ T3309] dump_header+0x83/0x2d0 [ 82.354899][ T3309] oom_kill_process+0x341/0x4c0 [ 82.354923][ T3309] out_of_memory+0x9d1/0xc20 [ 82.354950][ T3309] mem_cgroup_out_of_memory+0x13f/0x190 [ 82.355047][ T3309] try_charge_memcg+0x5f1/0x890 [ 82.355076][ T3309] charge_memcg+0x50/0xc0 [ 82.355108][ T3309] __mem_cgroup_charge+0x29/0xb0 [ 82.355201][ T3309] filemap_add_folio+0x56/0x1b0 [ 82.355223][ T3309] __filemap_get_folio+0x340/0x6b0 [ 82.355253][ T3309] filemap_fault+0x46a/0xbc0 [ 82.355287][ T3309] __do_fault+0xb6/0x200 [ 82.355318][ T3309] handle_mm_fault+0xe9b/0x2e80 [ 82.355363][ T3309] ? __rcu_read_unlock+0x4e/0x70 [ 82.355396][ T3309] exc_page_fault+0x3b9/0x6a0 [ 82.355456][ T3309] ? do_syscall_64+0xd6/0x1a0 [ 82.355509][ T3309] asm_exc_page_fault+0x26/0x30 [ 82.355529][ T3309] RIP: 0033:0x7ff9e57d51b4 [ 82.355546][ T3309] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 05 e8 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 04 e8 00 48 01 d1 [ 82.355566][ T3309] RSP: 002b:00007ffd0475ac20 EFLAGS: 00010206 [ 82.355580][ T3309] RAX: 0000001b32220000 RBX: 0000000000000278 RCX: 0000000000014050 [ 82.355591][ T3309] RDX: 000000000481c73a RSI: 00007ffd0475acb0 RDI: 0000000000000001 [ 82.355605][ T3309] RBP: 00007ffd0475ac5c R08: 0000000011315091 R09: 7fffffffffffffff [ 82.355616][ T3309] R10: 00007ff9e6665038 R11: 0000000000000010 R12: 0000000000001388 [ 82.355677][ T3309] R13: 00000000000927c0 R14: 0000000000013ff7 R15: 00007ffd0475acb0 [ 82.355700][ T3309] [ 82.355707][ T3309] memory: usage 307200kB, limit 307200kB, failcnt 3046 [ 82.550419][ T3309] memory+swap: usage 217204kB, limit 9007199254740988kB, failcnt 0 [ 82.558335][ T3309] kmem: usage 213964kB, limit 9007199254740988kB, failcnt 0 [ 82.565628][ T3309] Memory cgroup stats for /syz4: [ 82.565761][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 82.583633][ T3309] cache 0 [ 82.586582][ T3309] rss 0 [ 82.589366][ T3309] shmem 0 [ 82.592308][ T3309] mapped_file 0 [ 82.595772][ T3309] dirty 0 [ 82.598769][ T3309] writeback 0 [ 82.602108][ T3309] workingset_refault_anon 3 [ 82.606657][ T3309] workingset_refault_file 0 [ 82.611212][ T3309] swap 647168 [ 82.614556][ T3309] swapcached 0 [ 82.617954][ T3309] pgpgin 105973 [ 82.621413][ T3309] pgpgout 105973 [ 82.625020][ T3309] pgfault 87919 [ 82.628509][ T3309] pgmajfault 6 [ 82.631917][ T3309] inactive_anon 0 [ 82.635550][ T3309] active_anon 0 [ 82.639063][ T3309] inactive_file 0 [ 82.642704][ T3309] active_file 0 [ 82.646180][ T3309] unevictable 0 [ 82.649740][ T3309] hierarchical_memory_limit 314572800 [ 82.655115][ T3309] hierarchical_memsw_limit 9223372036854771712 [ 82.661279][ T3309] total_cache 0 [ 82.664736][ T3309] total_rss 0 [ 82.668047][ T3309] total_shmem 0 [ 82.671510][ T3309] total_mapped_file 0 [ 82.675541][ T3309] total_dirty 0 [ 82.679008][ T3309] total_writeback 0 [ 82.682833][ T3309] total_workingset_refault_anon 3 [ 82.687895][ T3309] total_workingset_refault_file 0 [ 82.692925][ T3309] total_swap 647168 [ 82.696741][ T3309] total_swapcached 0 [ 82.700675][ T3309] total_pgpgin 105973 [ 82.704656][ T3309] total_pgpgout 105973 [ 82.708799][ T3309] total_pgfault 87919 [ 82.712781][ T3309] total_pgmajfault 6 [ 82.716668][ T3309] total_inactive_anon 0 [ 82.720846][ T3309] total_active_anon 0 [ 82.724899][ T3309] total_inactive_file 0 [ 82.729228][ T3309] total_active_file 0 [ 82.733325][ T3309] total_unevictable 0 [ 82.737319][ T3309] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.102,pid=3928,uid=0 [ 82.751859][ T3309] Memory cgroup out of memory: Killed process 3928 (syz.4.102) total-vm:95664kB, anon-rss:956kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 82.754695][ T6681] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1102'. [ 82.849338][ T3381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 83.062030][ T6698] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 83.160566][ T6705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1108'. [ 83.169716][ T6705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1108'. [ 83.178719][ T6705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1108'. [ 83.187875][ T6705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1108'. [ 83.275139][ T6584] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.283469][ T6584] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.296463][ T6584] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.304706][ T6584] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.317481][ T6584] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.325737][ T6584] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.338061][ T6584] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 83.346291][ T6584] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.526006][ T6713] netlink: 'syz.1.1111': attribute type 7 has an invalid length. [ 83.533855][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 83.567911][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 83.875170][ T6720] loop2: detected capacity change from 0 to 1024 [ 83.895522][ T6720] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.924320][ T6720] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.119210][ T6720] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 84.128210][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 84.175865][ T6720] EXT4-fs error (device loop2): ext4_map_blocks:675: inode #3: block 2: comm +}[@: lblock 2 mapped to illegal pblock 2 (length 1) [ 84.221208][ T6720] EXT4-fs (loop2): Remounting filesystem read-only [ 84.234142][ T6720] EXT4-fs (loop2): 1 orphan inode deleted [ 84.244391][ T6720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.307796][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.331683][ T6730] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1119'. [ 84.479644][ T6736] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.518995][ T6736] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.531147][ T6741] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1121'. [ 84.574684][ T6736] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.608150][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 84.633124][ T6736] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.712176][ T6736] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.723345][ T6736] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.751020][ T6736] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.779968][ T6736] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.120721][ T6745] Set syz1 is full, maxelem 65536 reached [ 85.315230][ T1030] IPVS: starting estimator thread 0... [ 85.325319][ T6778] bridge0: entered promiscuous mode [ 85.330684][ T6778] macvlan2: entered promiscuous mode [ 85.336398][ T6778] bridge0: port 1(macvlan2) entered blocking state [ 85.343064][ T6778] bridge0: port 1(macvlan2) entered disabled state [ 85.349832][ T6778] macvlan2: entered allmulticast mode [ 85.355211][ T6778] bridge0: entered allmulticast mode [ 85.361219][ T6778] macvlan2: left allmulticast mode [ 85.366354][ T6778] bridge0: left allmulticast mode [ 85.372080][ T6778] bridge0: left promiscuous mode [ 85.407713][ T6779] IPVS: using max 2448 ests per chain, 122400 per kthread [ 85.723258][ T1030] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 85.774752][ T6792] loop1: detected capacity change from 0 to 128 [ 85.928999][ T6792] bio_check_eod: 102 callbacks suppressed [ 85.929016][ T6792] syz.1.1137: attempt to access beyond end of device [ 85.929016][ T6792] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 85.993549][ T6792] syz.1.1137: attempt to access beyond end of device [ 85.993549][ T6792] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 86.162482][ T6792] syz.1.1137: attempt to access beyond end of device [ 86.162482][ T6792] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 86.187633][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 86.187648][ T29] audit: type=1326 audit(1744935813.165:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 86.217311][ T29] audit: type=1326 audit(1744935813.185:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 86.240788][ T29] audit: type=1326 audit(1744935813.185:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6788 comm="syz.3.1136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10df16e169 code=0x7ffc0000 [ 86.257610][ T6792] syz.1.1137: attempt to access beyond end of device [ 86.257610][ T6792] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 86.305175][ T6792] syz.1.1137: attempt to access beyond end of device [ 86.305175][ T6792] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 86.318912][ T6792] syz.1.1137: attempt to access beyond end of device [ 86.318912][ T6792] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 86.332534][ T6792] syz.1.1137: attempt to access beyond end of device [ 86.332534][ T6792] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 86.346068][ T6792] syz.1.1137: attempt to access beyond end of device [ 86.346068][ T6792] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 86.380028][ T6792] syz.1.1137: attempt to access beyond end of device [ 86.380028][ T6792] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 86.413475][ T6792] syz.1.1137: attempt to access beyond end of device [ 86.413475][ T6792] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 86.565128][ T6811] loop1: detected capacity change from 0 to 512 [ 86.580917][ T6811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.594217][ T6811] ext4 filesystem being mounted at /180/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.633195][ T29] audit: type=1400 audit(1744935813.635:1469): avc: denied { name_bind } for pid=6819 comm="syz.2.1145" src=666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=tcp_socket permissive=1 [ 86.662284][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 86.671232][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 86.683146][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1145'. [ 86.799602][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.876062][ T6826] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.903744][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 86.929948][ T6827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 86.942667][ T6827] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1147'. [ 86.959885][ T6826] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.021531][ T6826] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.099266][ T6826] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.124277][ T6839] capability: warning: `syz.0.1151' uses 32-bit capabilities (legacy support in use) [ 87.185276][ T6826] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.196866][ T6826] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.208449][ T6826] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.220007][ T6826] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.269546][ T29] audit: type=1400 audit(1744935814.275:1470): avc: denied { mount } for pid=6843 comm="syz.2.1153" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 87.315811][ T29] audit: type=1400 audit(1744935814.275:1471): avc: denied { mounton } for pid=6843 comm="syz.2.1153" path="/213/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 87.338710][ T29] audit: type=1400 audit(1744935814.275:1472): avc: denied { unmount } for pid=6843 comm="syz.2.1153" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 87.358652][ T29] audit: type=1400 audit(1744935814.305:1473): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 87.847779][ T6851] syzkaller0: entered promiscuous mode [ 87.853317][ T6851] syzkaller0: entered allmulticast mode [ 87.877900][ T29] audit: type=1400 audit(1744935814.875:1474): avc: denied { append } for pid=6852 comm="syz.1.1158" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.968172][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 87.979108][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 88.151383][ T6862] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1162'. [ 88.496530][ T6870] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.506523][ T6870] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.580743][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1164'. [ 88.620221][ T6872] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1164'. [ 88.879162][ T6870] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 88.889029][ T6870] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.918190][ C0] ================================================================== [ 88.926299][ C0] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 88.932722][ C0] [ 88.935036][ C0] read to 0xffffc90000f2bbd0 of 4 bytes by task 6876 on cpu 1: [ 88.942568][ C0] do_sys_poll+0x9f1/0xc80 [ 88.946978][ C0] __se_sys_ppoll+0x1b5/0x1f0 [ 88.951654][ C0] __x64_sys_ppoll+0x67/0x80 [ 88.956237][ C0] x64_sys_call+0x2c89/0x2e10 [ 88.960906][ C0] do_syscall_64+0xc9/0x1a0 [ 88.965420][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.971301][ C0] [ 88.973611][ C0] write to 0xffffc90000f2bbd0 of 4 bytes by interrupt on cpu 0: [ 88.981261][ C0] pollwake+0xc1/0x110 [ 88.985411][ C0] __wake_up+0x65/0xb0 [ 88.989483][ C0] bpf_ringbuf_notify+0x22/0x30 [ 88.994331][ C0] irq_work_run+0xe1/0x2d0 [ 88.998757][ C0] __sysvec_irq_work+0x23/0x1a0 [ 89.003622][ C0] sysvec_irq_work+0x66/0x80 [ 89.008209][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 89.013145][ C0] default_send_IPI_self+0x38/0x80 [ 89.018255][ C0] arch_irq_work_raise+0x48/0x50 [ 89.023190][ C0] __irq_work_queue_local+0x82/0x1d0 [ 89.028481][ C0] irq_work_queue+0x85/0x120 [ 89.033067][ C0] bpf_ringbuf_discard+0xcd/0xf0 [ 89.038001][ C0] bpf_prog_fe0ed97373b08409+0x47/0x4b [ 89.043449][ C0] bpf_trace_run3+0x10e/0x1d0 [ 89.048117][ C0] kmem_cache_free+0x243/0x2e0 [ 89.052879][ C0] kernfs_free_rcu+0x97/0xb0 [ 89.057467][ C0] rcu_core+0x5a6/0xc20 [ 89.061615][ C0] rcu_core_si+0xd/0x20 [ 89.065771][ C0] handle_softirqs+0xbf/0x280 [ 89.070435][ C0] run_ksoftirqd+0x1c/0x30 [ 89.074859][ C0] smpboot_thread_fn+0x345/0x560 [ 89.079797][ C0] kthread+0x4b7/0x540 [ 89.083856][ C0] ret_from_fork+0x4b/0x60 [ 89.088260][ C0] ret_from_fork_asm+0x1a/0x30 [ 89.093015][ C0] [ 89.095341][ C0] value changed: 0x00000001 -> 0x00000000 [ 89.101048][ C0] [ 89.103368][ C0] Reported by Kernel Concurrency Sanitizer on: [ 89.109520][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Not tainted 6.15.0-rc2-syzkaller-00257-gb5c6891b2c5b #0 PREEMPT(voluntary) [ 89.121839][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.131897][ C0] ================================================================== [ 89.176236][ T6870] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.186193][ T6870] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.214502][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 89.259915][ T6870] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 89.269958][ T6870] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.325344][ T6870] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.333609][ T6870] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.349438][ T6870] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.357719][ T6870] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.379994][ T6870] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.388307][ T6870] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.400330][ T6870] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.408636][ T6870] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.898329][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 90.297639][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 91.327746][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 92.367634][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 92.447937][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 92.491196][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.539653][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.589191][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.649067][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.734643][ T12] team0: left allmulticast mode [ 92.739595][ T12] team_slave_0: left allmulticast mode [ 92.745074][ T12] team_slave_1: left allmulticast mode [ 92.750597][ T12] team0: left promiscuous mode [ 92.755370][ T12] team_slave_0: left promiscuous mode [ 92.760878][ T12] team_slave_1: left promiscuous mode [ 92.766430][ T12] bridge0: port 3(team0) entered disabled state [ 92.775255][ T12] bridge_slave_1: left allmulticast mode [ 92.781121][ T12] bridge_slave_1: left promiscuous mode [ 92.786933][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.796039][ T12] bridge_slave_0: left allmulticast mode [ 92.801781][ T12] bridge_slave_0: left promiscuous mode [ 92.807465][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.978522][ T12] tipc: Disabling bearer [ 92.983530][ T12] tipc: Left network mode [ 92.991578][ T12] hsr_slave_0: left promiscuous mode [ 92.997148][ T12] hsr_slave_1: left promiscuous mode [ 93.003153][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.010713][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.019646][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.027191][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.037520][ T12] veth1_macvtap: left promiscuous mode [ 93.044115][ T12] veth0_macvtap: left promiscuous mode [ 93.049961][ T12] veth1_vlan: left promiscuous mode [ 93.055199][ T12] veth0_vlan: left promiscuous mode [ 93.134028][ T12] team0 (unregistering): Port device team_slave_1 removed [ 93.145184][ T12] team0 (unregistering): Port device team_slave_0 removed [ 93.417649][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 93.732323][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 94.447684][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 95.009468][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 95.497672][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 95.648232][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 96.528588][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 96.927908][ T3446] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 97.568197][ T3441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 98.608373][ T23] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration