last executing test programs: 19.362917692s ago: executing program 3: ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000540)=""/2, 0x2}}, 0x120) write$UHID_DESTROY(r3, &(0x7f0000000200), 0x4) 19.268986297s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) socket$packet(0x11, 0x0, 0x300) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x600080b0) socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='numa_maps\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 18.124384265s ago: executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000000206070100000000000000000000000005000100070000000900020073797a300000000012000300686173683a6e65742c706f727400000005000500020000000500040006000000"], 0x4c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) pipe(&(0x7f0000000080)) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000540)=""/2, 0x2}}, 0x120) write$UHID_DESTROY(r3, &(0x7f0000000200), 0x4) 18.02864727s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) open$dir(0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = dup2(r1, r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) clock_gettime(0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, 0x0, 0x9, 0x0, @void}, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000), 0x4) acct(0x0) write$tun(r2, 0x0, 0x46) 17.673304105s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 16.191329686s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000180)='=', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) dup(r0) ptrace(0x10, 0x1) r1 = inotify_init1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x9, 0x3, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001d40)={{r2, 0xffffffffffffffff}, &(0x7f0000001cc0), &(0x7f0000001d00)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000100)={r3, &(0x7f0000000080), 0x0}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) write$binfmt_script(r7, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1d8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xa8}}, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4203, r8, 0x0, &(0x7f0000000000)) 2.770224119s ago: executing program 2: stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000640)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000000140)={0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) clock_settime(0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x34}}, 0x0) 2.743990362s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00\x00\x00\x00\x00\b\x00)'], 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x0) 2.657755706s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x220001e, &(0x7f00000007c0)={[{@dax}]}, 0x1, 0x4fe, &(0x7f0000000080)="$eJzs3c9vG1kdAPDvOL+cbLbJLnsABGxZFgqq6iTublT1AOWEEKqE6BGkNiRuFDWOo8QpTahE+j8gUYkTHPkDOPfEnQuCG5dyQOJHBGoqcTCa8Tg1qd2EJrGj+PNRp29mnu3ve3XnPfvrxC+AgXU5InYjYjQi7kXEVH4+ybe41dzS273Ye7y4v/d4MYlG484/kqw+PRdt90m9k/5VzP7ED74T8eOkQ+BCs9hoFuMz9er6zOb2zrWV6sJyZbmyVi7Pz83P3rj+afnU+vphdTTf++Lz3+9+46dpsybzM+39OE3Nro8cxEkNR8T3ziJYHwzl/Rntd0N4K+ll+H5EfJRd/1MxlD2bAMBF1mhMRWOq/RgAuOgKWQ4sKZTyXMBkFAqlUjOH90FMFFZrm/Wr92tba0vNXNl0jBTur6xWZvNc4XSMJOnxXLb/6rh86Ph6RLwXET8fG8+OS4u11aV+vvABgAH2zqH5/99jzfkfALjgiv1uAADQc+Z/ABg85n8AGDzmfwAYPEfM/z/rVTsAgN7x/h8ABo/5HwAGyvdv3063xn7+/ddLD7e3HtQeXluqbD4oVbcWS4u1jfXScq22nH1nT/Wox1ut1dbnPomtR9PfXN+sz2xu79yt1rbW6nez7/W+WxnpSa8AgDd578Nnf0oiYvfmeLZF21oO5mq42Ar9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRaorddMSLGD59sNBqNs2sScMaufE7+HwZVW/7fTwHDgJH/h8El/w+Dq9FIjrvmfxz3hgDA+SbHD3T5/P/9vPxN/uHAj5YO3+LpWbYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzrfW+r+lfC3wySgUSqWIdyNiOkaS+yurldmIuBQRfxwbGUuP5/rcZgDgpAp/TfL1v65MfTx5uHY0eTmWlRHxk1/e+cWjhXp94w/p+X8enK8/zc+X+9F+AOAorXk6K9veyL/Ye7zY2nrZnr99OyKKzfj7e6OxfxB/OIazshgjETHxryQ/bkrachcnsfskIj7bqf9JpC+GkkvNlU8Px09jv9uD+NPRil/4n/iFrK5Zpv8WnzmFtsCgeZaOP7c6XX+FuJyVna//YjZCnVw+/qUPtbifjYGv4rfGv6Eu49/l48b45Hffbe6Nv173JOLzwxGt2Ptt408rftIl/sfHjP/nL3zpo251jV9FXInO8dtjzdSr6zOb2zvXVqoLy5Xlylq5PD83P3vj+qflmSxHPdN9Nvj7zauXutWl/Z/oEr94RP+/esz+//o/93745TfE//pXOsUvxAdviJ/OiV87ZvyFid8Wu9Wl8Ze69P+o5//qMeM//8vOa8uGAwD9s7m982BhdbWy0cud1guJnga10++dsfxpP8HjHNy99f/3PPQr3/lWr2KNxv91r0bjrWJ1GzFOI+sGnAcHF31EvOx3YwAAAAAAAAAAAAAAgI568RtL/e4jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8sH8ST") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x1) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2001) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005e0000009500000000000000898173909ba3a4108aff2389e1bacbff68d676f26b38831cf54e162aec703d57e6f652e1899770bca346fbe5bf8705919e7c7e0a8edaaac4224863e9f989fe566121ad1780f68a9e4015e4d4f82f0ce10c99775fcd325e1c0ce362c4f7a4f002d2b1cf921778294fd2a540b6aa9604cc5c932ef056f73f0d35a6403f60a26bf494f9cd0dffa5f43a07cb87a20438943c19ddf71c694353f4498b1fc55f56eee74b810f9de3f94546a80338566aac94a7bfbc18239ea820e53e7dd1f6a4210dd3f0795397921906fbe732e28d024abafe1cc019155238a10323b40eeafd5a9bb57d371be0853c884e235e09b23d1922c2ffae02cf22a410a14c436f2ac0cc5e13f6eae236a8dd9ce2cb2e39fdd62d1d9bee15621f57ffd673a25bb5d762e6b0780afbf421b9ef309ad1b4eff3c03d0dc84f20709c423327a8c611580d1160845f99413f50cf34bf3e9a93e79c7e1cf2a8660e7a9eb27bf537c960023e4585715518be9f42517c86c518"], &(0x7f0000000180)='GPL\x00', 0x2, 0xc6, &(0x7f0000000300)=""/198, 0x0, 0x10}, 0x90) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000", @ANYBLOB="4be8d7eaebc4100dabbeb0d339ee9cf877d9cc94c5ceeea1a5022888ab07e351aeb4c9789c797fbeef2ee1017b8c5c8bb6328a560e51a4", @ANYRES8], 0x14}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ftruncate(r2, 0x10001) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) write$binfmt_elf64(r4, &(0x7f0000001340)=ANY=[], 0xa89) shutdown(r4, 0x1) ioctl$sock_proto_private(r2, 0x89e2, &(0x7f00000005c0)="891b8adca2a996f41047ca6dd1b836f5470604ecd1937ccb8ccf1b21c5c010071be8416a0a82ab46418935dafacc0a3cdfc36eba0be1c7c3327bfd878943f9dc79d3e0e4df755bb6ef020a12dee32879f175366c085c7a8e3423fc622e20b6ba26158f80b8ee40e94da5d5c75a3bed2769c94e1252d35ce5bb2a16b5a638e56215c6534e243b68ac453d9824206d77863fbd74fc4adde6146e2275e1120aefd1c722e5b42c075af595ffb3fd78d54567342832270d3009d8c5e710e9a1cd757c4d7c94258a87c935be3ca998b77846ed128566e934cb23") r5 = io_uring_setup(0x168e, &(0x7f0000000000)={0x0, 0x0, 0x100}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) socket$kcm(0x23, 0x2, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000002700)=@newtaction={0x1510, 0x30, 0x100, 0x0, 0x0, {}, [{0x14fc, 0x1, [@m_skbedit={0xcc, 0xa, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x80000001}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xb}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfff}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0x75, 0x6, "fe1b64270463ef9cc9bd590aaf997da318a1407900f6b411d94ac3938bf4532fc77995ab32b7fd9d495a6dfd1369de036a7e3863816dd521f4e57e4984fb90a4eb215bc77a8a6ffb15a5c4224ae1323b0e7e6965b213475788efb629eb094f1f1ac9cec21d1ff03012697e153cfcaf4c92"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xe4, 0x20, 0x0, 0x0, {{0xf}, {0x8c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x8, 0xffffffff, 0x6, 0x10000, 0x4}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x23}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x78a54e25, 0x0, 0x100, 0x4}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x2a, 0x6, "c33847b94af2099f3a324d3dbee5895e449721ae860e55c616964c2493a6ac343b5ef34967d7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x1218, 0x10, 0x0, 0x0, {{0xb}, {0x1108, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x81}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x3, 0x9, 0x0, 0xfffffffd, {0x5, 0x0, 0x0, 0x8, 0x7, 0x7}, {0x3, 0x1, 0xb, 0x9, 0x20, 0x400}, 0x5, 0x101, 0x9d8}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x8, 0x7f, 0xffff, 0x1000, {0x2, 0x2, 0x6, 0x3, 0xd3cd, 0x9}, {0x81, 0x0, 0x1, 0x1, 0xfc01, 0x6}, 0xcd56, 0x1, 0xff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x594, 0x200, 0xfff, 0x9, 0x7f, 0xb6, 0x5, 0x10001, 0xc0000000, 0xffffffff, 0xffffe716, 0xffffffff, 0x0, 0x9, 0x0, 0x86, 0x6, 0x9, 0x3, 0x4, 0x3, 0x4, 0x58a, 0x0, 0x3, 0x200, 0x80, 0x62, 0x7, 0x1, 0x8001, 0xd5, 0x401, 0x0, 0x7f, 0xfffffffe, 0x10001, 0xff, 0x5, 0x5, 0x1, 0x7, 0x9, 0x16, 0x100, 0x2, 0x5, 0x9, 0x4e, 0x2, 0x5ac, 0x1, 0x8, 0x5, 0x8, 0x4, 0x7, 0x3e59, 0x18, 0x4, 0x1, 0xffffffff, 0x7, 0x2, 0x7f, 0x10001, 0x5, 0x2, 0x9a3, 0x5, 0x5ef, 0x9, 0x7, 0x6, 0x400, 0x101, 0x9, 0x28f, 0x1, 0x5, 0x8, 0x7f, 0x5, 0x5, 0x0, 0x1a96, 0xf67d, 0x86e, 0x401, 0x0, 0x80000000, 0x7132, 0xb2d9, 0x2, 0x70, 0x0, 0x20, 0x7ff, 0x0, 0x1000, 0x3, 0x8001, 0x9, 0x80000000, 0x7, 0x5, 0x10000, 0x96a, 0x0, 0x6, 0x80, 0x2, 0xfff, 0x8000, 0x9f7, 0x4eb2, 0xb725, 0xfffffffe, 0x9, 0x2, 0x9, 0x7d, 0x0, 0x0, 0xfff, 0x4, 0x800, 0x0, 0x2, 0xfffffffb, 0x6, 0x5c8c, 0x400, 0x1f, 0xb1, 0x40, 0x3, 0xf919, 0xee, 0x5, 0x1ff, 0x40, 0xff, 0xef6, 0x6, 0x1000, 0xfffffffe, 0x40, 0x1000000, 0x4, 0x9, 0x7, 0x8001, 0x3, 0x800, 0x0, 0x5, 0x3d8, 0xd6b0, 0x8, 0x22d6, 0x8000, 0xf66, 0xd16, 0x7ff, 0x10001, 0x800, 0x1, 0x8, 0x3, 0x2, 0x1000, 0x5, 0x6, 0xf78, 0x10000, 0x9, 0x67, 0xdf69, 0x9, 0x3, 0x100, 0x3f7, 0x6, 0x1, 0x3, 0x6, 0x663, 0x0, 0x8000, 0x0, 0x7fffffff, 0x6, 0x4, 0x8001, 0x1, 0x6, 0x4, 0x6, 0xfff, 0x4, 0xffffffff, 0x200, 0x10001, 0x9, 0x9, 0xfffff801, 0xbf, 0x0, 0xb8, 0x5, 0x0, 0x3e6e, 0x100, 0x7, 0x0, 0x80000001, 0x4, 0x4, 0x7, 0x6, 0x10001, 0x2, 0xfd62, 0x7c6, 0x40, 0x80000, 0x42f, 0x7, 0x1, 0x8d, 0x902, 0x7f, 0x9, 0x2, 0x199a295d, 0x0, 0x3, 0x4, 0x3, 0x29, 0x9, 0x91, 0xffffff34, 0x2, 0x7ff, 0x401, 0x229, 0x3, 0x4, 0xfffffffb, 0x0, 0x5, 0x4, 0xfffffff6]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}, @TCA_POLICE_RATE64={0xc, 0x8, 0xc1e}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x24}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8b6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x3, 0xa0, 0x35, 0x8, 0x7fff, 0xfffffff9, 0x8001, 0x3, 0x6fa, 0xbdbe, 0x80000000, 0x1f, 0x8, 0x3f, 0x9, 0x101, 0x1f, 0x1, 0x7, 0x2c9, 0xffffffc0, 0x8, 0x80000001, 0x9d3b, 0x3ff, 0x2, 0x9, 0x0, 0x4, 0x10000, 0x7f, 0x18000, 0x5, 0x40000, 0x8, 0x1f, 0x3, 0xfffffeff, 0xfffff31b, 0x6, 0x6, 0xcb96, 0x100, 0x3ff, 0x10001, 0x4, 0x80, 0x1, 0x7, 0x4, 0x7, 0x3, 0x800, 0x7, 0x81, 0x84, 0x7, 0x8, 0x8, 0xc32c, 0xa, 0xf4b, 0x8, 0x9, 0x0, 0x3, 0x1000, 0x5, 0x8, 0x400, 0x4, 0x5, 0x2c59, 0x5, 0x3, 0x9, 0x4, 0x10000, 0x3, 0x800, 0x7, 0x100, 0x6, 0x27, 0x9, 0xb65, 0x6, 0x1000, 0x1, 0x4, 0x9, 0x1, 0x1, 0x8000, 0x8, 0x1, 0x7a, 0x81, 0x200, 0x81, 0x6, 0x7, 0x7, 0x1, 0x81, 0x4, 0x9, 0x1, 0x80, 0x0, 0x1, 0x0, 0x400, 0xfffffffc, 0x200, 0x0, 0x9, 0xff, 0x0, 0x6, 0x2, 0x83, 0x8, 0x3, 0x8, 0x4, 0x1, 0x8, 0x4af, 0x5, 0x804, 0x7142, 0x10000, 0x3, 0x4, 0x200, 0xc89, 0x8, 0xb645, 0x200, 0x80000001, 0x4, 0x0, 0xda4a, 0x8, 0xffff0001, 0x800, 0x8, 0x4, 0xfffffff8, 0x800, 0x1, 0x13f2, 0x4, 0x7, 0x8, 0x41, 0x8001, 0x6, 0x101, 0x1, 0x3d8, 0xc1, 0x200, 0x8000, 0x1, 0x0, 0x5, 0x3, 0xff1, 0x5, 0xfffffffc, 0x11, 0x3d6c, 0x80000001, 0x3, 0x101, 0x6, 0x5, 0x7ff, 0xffffffc0, 0x80000001, 0x6, 0x2, 0xb2, 0x1f8, 0xba, 0xfffffffc, 0x1f, 0x81, 0xfffffa8c, 0xffff, 0x8, 0x3, 0xe8, 0x1, 0x2, 0x2, 0x0, 0x3, 0x4b, 0xe24, 0x9, 0x1, 0x9, 0xff, 0x1ff, 0x5, 0x8, 0x2000, 0x86, 0x1, 0x3, 0x0, 0x7, 0x9, 0x3, 0x401, 0x101, 0x8000, 0x5, 0x8, 0xc2e, 0x2, 0xffffffff, 0x7, 0x0, 0x3, 0x1, 0x7ff, 0x3, 0x385a, 0xe449, 0x6, 0x2, 0x2000, 0x9, 0x6, 0x4, 0xff, 0xd4, 0x6, 0x4, 0x3, 0x2, 0x5, 0x1ff, 0x4, 0x13, 0x7f, 0x50, 0x7, 0x6, 0x6, 0x200]}, @TCA_POLICE_RATE={0x404, 0x2, [0xabff, 0x1ff, 0x401, 0x88, 0x5, 0x7, 0x6, 0x9, 0x83, 0x31a, 0x7, 0x7ff, 0x2a4, 0x66e, 0xfffffffe, 0xff, 0x5, 0x6, 0x3, 0x355, 0x6, 0x7fff, 0x7, 0x3, 0x8, 0x8000, 0x8, 0x10000, 0x400, 0x2, 0x2, 0x9, 0x8561, 0x1, 0x9, 0x3d, 0x7, 0x5, 0xf13, 0x4, 0x9, 0xea, 0x1, 0x62316b0f, 0x3f, 0x3, 0x0, 0x7a, 0x5, 0xee5, 0x7, 0x5, 0x400, 0x8, 0x9, 0x1f, 0x98, 0x4, 0x5, 0xb6b, 0x0, 0xffffffff, 0x5ad0ebaa, 0x6, 0xd5c, 0xffff, 0x6, 0x3, 0x40, 0xffffffff, 0x3, 0x401, 0x0, 0x8, 0xdc, 0x7, 0x5, 0x2, 0x3970, 0x3f, 0x81, 0xd63f, 0x8, 0xcce, 0x5, 0x2, 0x7, 0x3, 0x2805d99b, 0x401, 0x0, 0x3, 0x7, 0x7, 0xffff, 0x7ff, 0x20000138, 0x10001, 0xffff, 0x5, 0x2, 0x3, 0x1f, 0x6, 0x8, 0x61, 0x7fff, 0x0, 0x7, 0x10000, 0x3f6, 0x8001, 0x3959, 0x1, 0x2, 0x10000, 0x0, 0x21, 0x9, 0x8001, 0x3, 0x7, 0xfffffffb, 0x7, 0x80000000, 0xfffffff9, 0x100, 0x5, 0x40, 0x6, 0x100, 0xffffff86, 0x1f, 0xfff, 0x9, 0xcb3, 0x0, 0x3, 0x1f, 0x200, 0xffff, 0x7f, 0x3, 0x5, 0x2, 0x1000, 0x1, 0x3859c76c, 0xd8e, 0xbc, 0x7, 0x820, 0x800, 0x24, 0x4, 0x6, 0x300, 0x2, 0x80000000, 0xfffffffa, 0x200, 0x7000000, 0x6, 0xb6, 0x80000001, 0x3, 0x1, 0x6, 0x3, 0x5, 0x7, 0x9, 0x3, 0x9, 0x7fff, 0x0, 0x8, 0x2, 0x100, 0x4, 0x800, 0x1, 0x80000000, 0x4, 0x3ff, 0xc000000, 0x100, 0x1, 0x1, 0x51, 0xe8, 0x7, 0x6, 0x5, 0x3, 0xfffffffd, 0x5, 0x4, 0xfffffff7, 0x7, 0x0, 0xd6, 0x2, 0xbd21, 0x3, 0xa4e, 0x0, 0x3ff, 0x7, 0x400, 0x3, 0x5, 0x7fff, 0x1, 0x48, 0x9, 0x7f, 0x7, 0xa1, 0xffffffff, 0x7f, 0x3, 0x3, 0x56, 0x400, 0x7f, 0x0, 0xfffffff7, 0xffff0001, 0x7, 0xfb2, 0x1, 0x9b, 0x3, 0x400, 0x5, 0x10001, 0x3, 0x8, 0x400, 0x3, 0x7, 0x81, 0x3, 0x2, 0x2, 0xbdc4, 0x10000, 0x2, 0x7ff, 0x0, 0x20, 0xd00, 0x7f, 0x1ff, 0x10000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x101}, @TCA_POLICE_RATE64={0xc, 0x8, 0x80000001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x12b3, 0x40, 0x6, 0x6, 0x8000, 0x4, 0x5, 0x401, 0x5, 0x8, 0xff, 0x0, 0x8, 0x7, 0x20, 0x68, 0x9, 0x894e, 0x3, 0x5, 0x8, 0x1, 0xc4da, 0x6, 0xa68f, 0x8, 0x9, 0x1f, 0x80000, 0x6, 0x9, 0x20, 0x100, 0x0, 0x1f, 0x8, 0x2, 0xfa7, 0xea, 0x9, 0x100, 0x4, 0x1554, 0x3, 0x2, 0x9, 0x1, 0xfdf9, 0x23, 0xc7c, 0x3, 0x8, 0x4, 0xffffffff, 0x1f, 0x2, 0x2, 0x52, 0x6, 0x9, 0x10001, 0x94, 0x6, 0x17a7, 0x8, 0x10004, 0x0, 0x7, 0x0, 0x401, 0x8, 0x101, 0x4, 0x80, 0x27, 0x8, 0x4, 0xfffffff8, 0x4, 0x9, 0x2, 0x4, 0xe7, 0x200, 0x3, 0x1000, 0x0, 0x80000000, 0x8, 0x1ff, 0xc000000, 0x800, 0x6, 0x64ae, 0xf7, 0x1, 0xffff, 0x9, 0x7, 0x0, 0x101, 0x0, 0x7cd5, 0x3f, 0x4, 0x7f, 0x20, 0x2, 0x4, 0x3590b51b, 0x4, 0xac, 0xfff, 0x1ff, 0x5, 0x4, 0xfffffff7, 0x40f, 0x180, 0xfffffffd, 0x7, 0x6, 0x5ef, 0x20000020, 0x0, 0x5, 0x9f, 0x80000001, 0x8, 0x10000, 0x4, 0x7f, 0x7f, 0x1f, 0xc0, 0x6, 0x8000, 0x4, 0x4, 0x0, 0x5a, 0xb113, 0x4, 0x0, 0xdae, 0x2, 0x7f, 0x1, 0x4, 0xffffff7f, 0x1, 0x3, 0x1, 0x5, 0x460, 0xffffffe0, 0x8, 0x1, 0x1, 0x401, 0x8, 0x5c, 0x3, 0x1, 0x4, 0x0, 0x2, 0x3, 0x48, 0xffff, 0x10000, 0xffffffff, 0x1, 0x9, 0x9, 0x1f, 0x7, 0x3f, 0x3, 0x4, 0x7ff, 0x80, 0x52, 0x53d, 0x10000, 0x2, 0x2, 0x3, 0x3, 0x100, 0x299, 0x9, 0xff, 0x10001, 0x9, 0x5, 0x80000001, 0x6, 0x1f, 0x1, 0x8, 0x4, 0x80000000, 0x3, 0x8000, 0x0, 0xffff, 0x9, 0x5, 0x7000, 0xc9d, 0xa9, 0x0, 0x4, 0xb4, 0x100, 0x400, 0x7, 0x7, 0x2, 0x7, 0x2, 0x1ae, 0x1, 0x5, 0x5fc, 0x5, 0x80000001, 0x8, 0xd893, 0x0, 0x401, 0x5, 0xf1, 0x1b, 0x1, 0xe6, 0x7f, 0xfffffffa, 0x8, 0x65ba9ff9, 0x401, 0x7, 0x8000, 0x20, 0xb6, 0x10001, 0x6, 0x4, 0x7, 0x7, 0x0, 0x905, 0x10000, 0x6]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_RATE64={0xc, 0x8, 0x281f}]]}, {0xe6, 0x6, "9a46d730058ecafdab7694ce4d573236433bcb1216f80b21b9c7c93841769382068c7971c25edb12fe0e07ee3c39affce4df19c9f26ac66a5dff37ebea662a71017038af3f14603de9885a9cbc09959d90e875a98dce0968dc52dc92420f48b6cc6db99184f7b7676072cb4c1dd174029894996eb5f7a7a7d4de73ac63bda0a69b95369f31bf58eeae167ed8794111511f260ad5977226fa254cade257520895e0891af000dc79e4af2fe7962e99af75197500adff14eaae16e3d746d5bfd540f4599dd38db097244ae55bb6b00bbba2ec7a4863405b5b9a8b86d40c910b0aa8b4bd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x8c, 0x7, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x4, 0x6, 0x401, 0x8}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x8001, 0x10000000, 0x9, 0x8}, 0x35}}]}, {0x26, 0x6, "9fc5d11db514d6460d2120137c9fbc869a491bcba66fa82796f1a31d1d39549d080f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xa4, 0xf, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff9, 0x4, 0x20000006, 0x662288b3, 0x8}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x20, 0x7, 0x5}, 0x3}}]}, {0x36, 0x6, "43b277df3bbe9a28fc57faa37ce8a145a20d470ccfd6a107034d589affc52a01313a1e86c4b8e5d3e4ee6b821558ca14a839"}, {0xc, 0x7, {0xef2d1b9542f9235a}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x1510}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) 2.410708534s ago: executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r2, 0x0}]) dup3(r1, r0, 0x0) 2.301271811s ago: executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@bridge_delneigh={0x1c, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x8f}}, 0x1c}}, 0x0) 1.985344711s ago: executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x35, 0x0, 0x0, 0x101000}, {0x20}, {0x6}]}) fsopen(0x0, 0xd00) 1.712495823s ago: executing program 2: bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, &(0x7f0000000240)=0x7, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f00000000c0)=0xfffffc00, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@qipcrtr, 0x80, &(0x7f0000000340)=[{&(0x7f0000000500)=""/119, 0x77}, {&(0x7f0000000580)=""/166, 0xa6}], 0x2, &(0x7f0000000800)=""/168, 0xa8}, 0x9}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)=""/50, 0x32}], 0x1}, 0x7}], 0x3, 0x0, 0x0) (async) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "ce089b07d9a65f4ff4a0d03b3adf1468b4353f2f"}, 0x15, 0x1) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) io_setup(0x0, 0x0) (async) io_destroy(0x0) (async) poll(&(0x7f0000000180)=[{r2}], 0x1, 0x0) (async) sendto$packet(r0, &(0x7f0000000040)="00008100", 0x4, 0x0, &(0x7f0000000000)={0x11, 0x8100, r1, 0x1, 0x0, 0x6, @remote}, 0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0}]}, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x14, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) (async) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x8}}, @CGW_CS_CRC8={0x11e, 0x6, {0x2, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "dbf6ad242710a12236ec1625ac06613fc5f12f67"}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "2dc85f04a912dea2"}, 0x1}}]}, 0x154}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@getlink={0x28, 0x12, 0x221, 0x0, 0x0, {0x7}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x0, 0x0, 0x2, 0xc}, 0x48) 1.685107268s ago: executing program 2: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x52}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x5, 0x4, 0x4, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x3}, 0x48) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xc}, 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x93, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000200)='threaded\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffce3}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x12, &(0x7f0000000040), 0x4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000200)={0x71e5b314}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0x0, r3, 0x0, 0x1, &(0x7f00000002c0)='\x00'}, 0x30) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) move_pages(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil], 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r6 = dup(r5) ioctl$TIOCGSOFTCAR(r6, 0x4b48, &(0x7f0000001080)) 1.616659638s ago: executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) socket$netlink(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00005f3000/0x4000)=nil, 0x4000, 0x17) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000006910aa000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {0x22}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") chdir(&(0x7f00000001c0)='./file0\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@getqdisc={0x34, 0x26, 0x100, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x2, 0xffe0}, {0xb, 0xf}, {0x4, 0x8}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c085}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x5, '\x00', r5, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x11, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003000000000000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000800005509010000000000950000000000000018370000050000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x88c, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91101b0000ee34fae800000b2ba7789b"], &(0x7f0000000280)='GPL\x00'}, 0x90) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r9, 0x541c, &(0x7f00000001c0)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) 1.377812005s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00\x00\x00\x00\x00\b\x00)'], 0x30}}, 0x0) 1.359683109s ago: executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$rds(0x15, 0x5, 0x0) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000000)={0xfffd, 0xffff, 0x0, 0x5a01, 0x6f, 0x101}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18217115ea836d3f960000000100000085000072a9c88100000000000000000053f7c39a16f3a71c4fcdae5f8d4e4853554c8fd78397fd44fd3edae37cbc1754539e9274cf55fab80168b84db31271b175b80bdb04c84829c26106d2ddc5fe4405a314def4a8848876554240e62eff"], &(0x7f0000000040)='GPL\x00', 0x55, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) 1.339114761s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e20, 0x1, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) r3 = socket$inet(0x2, 0xa, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) listen(r3, 0x3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000240)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x14) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r8, &(0x7f0000000100)='reno\x00', 0x5) write$tcp_congestion(r8, 0x0, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) bind$xdp(r5, &(0x7f00000002c0)={0x2c, 0x0, r7}, 0x10) mount$9p_fd(0x2, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x10, &(0x7f0000000380), &(0x7f0000000100)=0x8) 1.130389704s ago: executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) dup3(0xffffffffffffffff, r0, 0x0) 875.001494ms ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = signalfd4(r0, &(0x7f0000000140)={[0x5]}, 0x8, 0x800) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="020000001000000000000000040400000000000000002f05000000002000000000000000"], 0x7f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900), 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@delchain={0x3c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xf}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x3c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x9, 0x8, 0x1010, r2, 0x1ff, '\x00', 0x0, r1, 0x4, 0x4, 0x8, 0xb}, 0x48) r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000380)='.pending_reads\x00', 0x8440, 0x100) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000004c0)={0xffffffffffffffff, 0x4, 0x6, 0x7, @vifc_lcl_ifindex, @multicast1}, 0x10) openat$cgroup_pressure(r7, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'team0\x00'}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'vlan1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0xfffffe8f, &(0x7f0000000700)={&(0x7f0000000140)=ANY=[@ANYBLOB="04b5dd556b21294801f6c6e50efcf5b25ee7173ee40b7ab98d97c041e2d7d3edfae48dbf1938", @ANYRESHEX=r7], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10008001) connect$unix(0xffffffffffffffff, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) fchdir(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRES16], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x24040880) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0x38, "741c305bca3ab5eba3652cfa18e3ed274b0eb5d19b6294280afb7bf6036c3abd45125cfb8f9b569823ce1819d8f32461134741fe832bd841"}, &(0x7f0000000280)=0x40) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x83, &(0x7f00000003c0)={r9}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4000, r6}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 472.581816ms ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0x6438) copy_file_range(r3, &(0x7f00000001c0), r2, 0x0, 0xffffffffa003e45c, 0x700000000000000) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000340), &(0x7f0000000380)=0x4) setns(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0) 376.480401ms ago: executing program 0: stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000640)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000000140)={0x0, 0x0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) clock_settime(0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}]}, 0x34}}, 0x0) 349.055796ms ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00\x00\x00\x00\x00\b\x00)'], 0x30}}, 0x0) 343.729367ms ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) time(0xfffffffffffffffc) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x1403, 0x6c08c44bda12f87d, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000540)={0xfffffffffffffffc, 0x208000, 0x800}, 0x20) time(&(0x7f0000000080)) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}}}, 0x24}}, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{}, {0x5}, {0x6}]}) prlimit64(0x0, 0x30, 0x0, 0x0) iopl(0x3) syslog(0x4, &(0x7f0000000380), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_ext_remove_space\x00', r0}, 0x10) 324.775999ms ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x10) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000600)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x30) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$inet_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000300), 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040), 0x4) socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x200}, 0x4) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f0000000080)={0x1, 0x10, 0xfa00, {&(0x7f0000000000), r3}}, 0x18) 307.272112ms ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffbfffe}, 0x0, 0x1000000000000000, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000540)=""/2, 0x2}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000200), 0x4) 234.175744ms ago: executing program 1: socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x0) memfd_create(0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f00000000c0)={0x80, 0x7}) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x0, [0x0, 0xffff, 0x5]}, &(0x7f0000000540)=0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='9p_client_req\x00'}, 0x24) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={0x0, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d61637365630000140002800500060001000000050007000100000008000500", @ANYRES32=r3, @ANYBLOB="85a48eb8bd9424747d37389d878407d4a91ed3b84241c3127c", @ANYRES32=0x0, @ANYBLOB], 0x54}}, 0x0) 163.611345ms ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000000206070100000000000000000000000005000100070000000900020073797a300000000012000300686173683a6e65742c706f727400000005000500020000000500040006000000"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c08f2ff0206010800000000000000000000000005000100070000004223e8ac5a367a3db0ab18abd811217b5a5fdf0f6d3b4dd8"], 0x1c}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) pipe(&(0x7f0000000080)) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000540)=""/2, 0x2}}, 0x120) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) 112.534273ms ago: executing program 1: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0x5450, 0x0) 0s ago: executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x1a00001a}]) dup3(0xffffffffffffffff, r0, 0x0) kernel console output (not intermixed with test programs): 9][T15816] batadv0: entered promiscuous mode [ 242.661749][T15816] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 242.669679][T15816] Cannot create hsr debugfs directory [ 242.834786][T15831] loop2: detected capacity change from 0 to 8192 [ 242.843180][T15831] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 242.886562][T15781] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 242.897932][T15781] CPU: 0 PID: 15781 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00035-g3d54351c64e8 #0 [ 242.908435][T15781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 242.918575][T15781] Call Trace: [ 242.921871][T15781] [ 242.924795][T15781] dump_stack_lvl+0xf2/0x150 [ 242.929449][T15781] dump_stack+0x15/0x20 [ 242.933651][T15781] dump_header+0x83/0x2d0 [ 242.938035][T15781] oom_kill_process+0x33e/0x4c0 [ 242.942997][T15781] out_of_memory+0x9af/0xbe0 [ 242.947590][T15781] mem_cgroup_out_of_memory+0x13e/0x190 [ 242.953213][T15781] try_charge_memcg+0x745/0xcd0 [ 242.958107][T15781] ? _raw_spin_unlock+0x26/0x50 [ 242.963038][T15781] ? radix_tree_lookup+0xf9/0x150 [ 242.968069][T15781] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 242.974145][T15781] __read_swap_cache_async+0x2b9/0x520 [ 242.979620][T15781] swap_cluster_readahead+0x276/0x3f0 [ 242.985034][T15781] swapin_readahead+0xe2/0x7a0 [ 242.989806][T15781] ? __filemap_get_folio+0x420/0x5b0 [ 242.995099][T15781] ? swap_cache_get_folio+0x6e/0x210 [ 243.000395][T15781] do_swap_page+0x3bc/0x1840 [ 243.004987][T15781] ? probe_sched_wakeup+0x81/0xa0 [ 243.010024][T15781] ? __rcu_read_lock+0x36/0x50 [ 243.014807][T15781] handle_mm_fault+0x809/0x2a80 [ 243.019663][T15781] ? mas_walk+0x204/0x320 [ 243.024006][T15781] exc_page_fault+0x3b9/0x650 [ 243.028728][T15781] asm_exc_page_fault+0x26/0x30 [ 243.033579][T15781] RIP: 0033:0x7f1939efeb39 [ 243.037982][T15781] Code: 39 f0 73 46 49 89 34 24 48 89 ce 48 89 4f f8 49 8b 14 24 49 8b 4c 24 08 eb 85 0f 1f 80 00 00 00 00 48 89 fe 4c 89 ea 48 89 df f2 fe ff ff 48 89 d8 4c 29 e0 48 3d 80 00 00 00 7e 7f 4d 85 ed [ 243.057655][T15781] RSP: 002b:00007ffdc424a000 EFLAGS: 00010202 [ 243.063740][T15781] RAX: 00007f1939ac4ef0 RBX: 00007f1939ac4ef8 RCX: ffffffff84f7c7f4 [ 243.071799][T15781] RDX: 0000000000000017 RSI: 00007f1939ac5000 RDI: 00007f1939ac4ef8 [ 243.079766][T15781] RBP: 00007f1939ac4e40 R08: 00007f1939ac4f18 R09: 00000000815738ca [ 243.087771][T15781] R10: 00007f193a0500b8 R11: 00000000815738ca R12: 00007f1939ac4e38 [ 243.095925][T15781] R13: 0000000000000017 R14: 00000000001ffff8 R15: 00007f193a07a018 [ 243.103932][T15781] ? xa_load+0xb4/0xe0 [ 243.108069][T15781] [ 243.111524][T15781] memory: usage 307200kB, limit 307200kB, failcnt 2581 [ 243.118826][T15781] memory+swap: usage 307588kB, limit 9007199254740988kB, failcnt 0 [ 243.126760][T15781] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 243.134016][T15781] Memory cgroup stats for /syz1: [ 243.134141][T15781] cache 20480 [ 243.142501][T15781] rss 0 [ 243.145254][T15781] shmem 0 [ 243.148166][T15781] mapped_file 0 [ 243.151622][T15781] dirty 0 [ 243.154532][T15781] writeback 8192 [ 243.158142][T15781] workingset_refault_anon 963 [ 243.162797][T15781] workingset_refault_file 4402 [ 243.167698][T15781] swap 397312 [ 243.170969][T15781] swapcached 8192 [ 243.174591][T15781] pgpgin 260693 [ 243.178099][T15781] pgpgout 260686 [ 243.181660][T15781] pgfault 328775 [ 243.185216][T15781] pgmajfault 398 [ 243.188738][T15781] inactive_anon 0 [ 243.192386][T15781] active_anon 0 [ 243.195920][T15781] inactive_file 12288 [ 243.199885][T15781] active_file 8192 [ 243.203578][T15781] unevictable 0 [ 243.207055][T15781] hierarchical_memory_limit 314572800 [ 243.212412][T15781] hierarchical_memsw_limit 9223372036854771712 [ 243.218589][T15781] total_cache 20480 [ 243.222383][T15781] total_rss 0 [ 243.225849][T15781] total_shmem 0 [ 243.229300][T15781] total_mapped_file 0 [ 243.233268][T15781] total_dirty 0 [ 243.236850][T15781] total_writeback 8192 [ 243.240910][T15781] total_workingset_refault_anon 963 [ 243.246255][T15781] total_workingset_refault_file 4402 [ 243.251534][T15781] total_swap 397312 [ 243.255438][T15781] total_swapcached 8192 [ 243.259636][T15781] total_pgpgin 260693 [ 243.263687][T15781] total_pgpgout 260686 [ 243.267785][T15781] total_pgfault 328775 [ 243.271831][T15781] total_pgmajfault 398 [ 243.275932][T15781] total_inactive_anon 0 [ 243.280065][T15781] total_active_anon 0 [ 243.284032][T15781] total_inactive_file 12288 [ 243.288553][T15781] total_active_file 8192 [ 243.292792][T15781] total_unevictable 0 [ 243.296800][T15781] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=15781,uid=0 [ 243.312042][T15781] Memory cgroup out of memory: Killed process 15781 (syz-executor.1) total-vm:48752kB, anon-rss:420kB, file-rss:8980kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 243.416781][T15837] loop2: detected capacity change from 0 to 2048 [ 243.438561][T15837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.524967][ T5870] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:14: bg 0: block 234: padding at end of block bitmap is not set [ 243.541082][ T5870] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 243.553632][ T5870] EXT4-fs (loop2): This should not happen!! Data will be lost [ 243.553632][ T5870] [ 243.573921][ T5875] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 660 with error 28 [ 243.586880][ T5875] EXT4-fs (loop2): This should not happen!! Data will be lost [ 243.586880][ T5875] [ 243.596682][ T5875] EXT4-fs (loop2): Total free blocks count 0 [ 243.602654][ T5875] EXT4-fs (loop2): Free/Dirty block details [ 243.608561][ T5875] EXT4-fs (loop2): free_blocks=0 [ 243.613500][ T5875] EXT4-fs (loop2): dirty_blocks=672 [ 243.618744][ T5875] EXT4-fs (loop2): Block reservation details [ 243.660928][T15843] --map-set only usable from mangle table [ 243.711273][T15845] dummy0: entered promiscuous mode [ 243.723572][T15845] batadv0: entered promiscuous mode [ 243.729705][T15845] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 243.740108][T15845] Cannot create hsr debugfs directory [ 243.784231][T15860] bond_slave_0: entered promiscuous mode [ 243.789961][T15860] bond_slave_1: entered promiscuous mode [ 243.795629][T15860] bridge0: entered promiscuous mode [ 243.802216][T15860] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 243.810850][T15860] bond_slave_0: left promiscuous mode [ 243.816240][T15860] bond_slave_1: left promiscuous mode [ 243.821627][T15860] bridge0: left promiscuous mode [ 243.839794][T15865] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 243.853311][T15865] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 243.872277][T15868] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.884386][T15868] loop3: detected capacity change from 0 to 128 [ 243.962358][T15872] loop0: detected capacity change from 0 to 512 [ 243.974747][T15872] EXT4-fs (loop0): orphan cleanup on readonly fs [ 243.981599][T15872] EXT4-fs warning (device loop0): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 243.996195][T15872] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 244.004044][T15872] EXT4-fs (loop0): 1 truncate cleaned up [ 244.010020][T15872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 244.135046][T14121] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.670604][T15900] loop1: detected capacity change from 0 to 512 [ 244.673136][T15874] syz-executor.3 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 244.691412][T15874] CPU: 1 PID: 15874 Comm: syz-executor.3 Not tainted 6.10.0-rc4-syzkaller-00035-g3d54351c64e8 #0 [ 244.701892][T15874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 244.712018][T15874] Call Trace: [ 244.715372][T15874] [ 244.718388][T15874] dump_stack_lvl+0xf2/0x150 [ 244.723011][T15874] dump_stack+0x15/0x20 [ 244.727208][T15874] dump_header+0x83/0x2d0 [ 244.731520][T15874] oom_kill_process+0x33e/0x4c0 [ 244.736358][T15874] out_of_memory+0x9af/0xbe0 [ 244.741007][T15874] mem_cgroup_out_of_memory+0x13e/0x190 [ 244.746546][T15874] try_charge_memcg+0x745/0xcd0 [ 244.751399][T15874] ? get_page_from_freelist+0x1a2a/0x1a70 [ 244.757101][T15874] obj_cgroup_charge_pages+0xbd/0x1d0 [ 244.762545][T15874] __memcg_kmem_charge_page+0x9d/0x170 [ 244.768030][T15874] __alloc_pages_noprof+0x1bc/0x360 [ 244.773208][T15874] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 244.778619][T15874] alloc_pages_noprof+0xe1/0x100 [ 244.783543][T15874] __vmalloc_node_range_noprof+0x719/0xef0 [ 244.789398][T15874] kvmalloc_node_noprof+0x121/0x170 [ 244.794582][T15874] ? ip_set_alloc+0x1f/0x30 [ 244.799107][T15874] ip_set_alloc+0x1f/0x30 [ 244.803416][T15874] hash_netiface_create+0x273/0x730 [ 244.808703][T15874] ? __nla_parse+0x40/0x60 [ 244.813109][T15874] ? __pfx_hash_netiface_create+0x10/0x10 [ 244.818842][T15874] ip_set_create+0x359/0x8a0 [ 244.823413][T15874] ? memchr+0x1/0x50 [ 244.827379][T15874] ? __nla_parse+0x40/0x60 [ 244.831928][T15874] nfnetlink_rcv_msg+0x4a9/0x570 [ 244.836892][T15874] netlink_rcv_skb+0x12c/0x230 [ 244.841637][T15874] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 244.847142][T15874] nfnetlink_rcv+0x16c/0x15b0 [ 244.852012][T15874] ? kmem_cache_free+0xd8/0x280 [ 244.856851][T15874] ? nlmon_xmit+0x51/0x60 [ 244.861174][T15874] ? __kfree_skb+0x102/0x150 [ 244.865764][T15874] ? consume_skb+0x57/0x180 [ 244.870256][T15874] ? nlmon_xmit+0x51/0x60 [ 244.874566][T15874] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 244.879987][T15874] ? __dev_queue_xmit+0xb21/0x1e50 [ 244.885124][T15874] ? ref_tracker_free+0x3a5/0x410 [ 244.890165][T15874] ? __netlink_deliver_tap+0x495/0x4c0 [ 244.895631][T15874] netlink_unicast+0x58d/0x660 [ 244.900411][T15874] netlink_sendmsg+0x5ca/0x6e0 [ 244.905167][T15874] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.910527][T15874] __sock_sendmsg+0x140/0x180 [ 244.915200][T15874] ____sys_sendmsg+0x312/0x410 [ 244.919962][T15874] __sys_sendmsg+0x1e9/0x280 [ 244.924547][T15874] ? futex_wait+0x18e/0x1c0 [ 244.929101][T15874] __x64_sys_sendmsg+0x46/0x50 [ 244.933861][T15874] x64_sys_call+0xb25/0x2d70 [ 244.938496][T15874] do_syscall_64+0xc9/0x1c0 [ 244.943007][T15874] ? clear_bhb_loop+0x55/0xb0 [ 244.947686][T15874] ? clear_bhb_loop+0x55/0xb0 [ 244.952400][T15874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.958317][T15874] RIP: 0033:0x7fc2f28c1f29 [ 244.962752][T15874] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 244.982354][T15874] RSP: 002b:00007fc2f1c3c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.990755][T15874] RAX: ffffffffffffffda RBX: 00007fc2f29f8f80 RCX: 00007fc2f28c1f29 [ 244.998718][T15874] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 245.006766][T15874] RBP: 00007fc2f2931074 R08: 0000000000000000 R09: 0000000000000000 [ 245.014744][T15874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.022705][T15874] R13: 000000000000000b R14: 00007fc2f29f8f80 R15: 00007ffcd0058468 [ 245.030669][T15874] [ 245.033739][T15874] memory: usage 307200kB, limit 307200kB, failcnt 9022 [ 245.040711][T15874] memory+swap: usage 307648kB, limit 9007199254740988kB, failcnt 0 [ 245.048651][T15874] kmem: usage 307168kB, limit 9007199254740988kB, failcnt 0 [ 245.052925][T15902] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.055939][T15874] Memory cgroup stats for /syz3: [ 245.056145][T15874] cache 28672 [ 245.073506][T15874] rss 0 [ 245.076385][T15874] shmem 0 [ 245.076601][T15902] loop4: detected capacity change from 0 to 128 [ 245.079332][T15874] mapped_file 0 [ 245.079344][T15874] dirty 0 [ 245.092247][T15874] writeback 0 [ 245.095565][T15874] workingset_refault_anon 1448 [ 245.100325][T15874] workingset_refault_file 9129 [ 245.105171][T15874] swap 458752 [ 245.108466][T15874] swapcached 4096 [ 245.112072][T15874] pgpgin 220484 [ 245.115522][T15874] pgpgout 220476 [ 245.119050][T15874] pgfault 260353 [ 245.122568][T15874] pgmajfault 764 [ 245.126156][T15874] inactive_anon 4096 [ 245.130022][T15874] active_anon 0 [ 245.133450][T15874] inactive_file 12288 [ 245.137417][T15874] active_file 16384 [ 245.141196][T15874] unevictable 0 [ 245.144687][T15874] hierarchical_memory_limit 314572800 [ 245.150044][T15874] hierarchical_memsw_limit 9223372036854771712 [ 245.156188][T15874] total_cache 28672 [ 245.159968][T15874] total_rss 0 [ 245.163302][T15874] total_shmem 0 [ 245.166832][T15874] total_mapped_file 0 [ 245.170834][T15874] total_dirty 0 [ 245.174268][T15874] total_writeback 0 [ 245.178105][T15874] total_workingset_refault_anon 1448 [ 245.183377][T15874] total_workingset_refault_file 9129 [ 245.188681][T15874] total_swap 458752 [ 245.192467][T15874] total_swapcached 4096 [ 245.196695][T15874] total_pgpgin 220484 [ 245.200648][T15874] total_pgpgout 220476 [ 245.204790][T15874] total_pgfault 260354 [ 245.208917][T15874] total_pgmajfault 764 [ 245.212955][T15874] total_inactive_anon 4096 [ 245.217371][T15874] total_active_anon 0 [ 245.221393][T15874] total_inactive_file 12288 [ 245.225881][T15874] total_active_file 16384 [ 245.230281][T15874] total_unevictable 0 [ 245.234245][T15874] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=15873,uid=0 [ 245.249681][T15874] Memory cgroup out of memory: Killed process 15873 (syz-executor.3) total-vm:46704kB, anon-rss:548kB, file-rss:9032kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 245.379575][T15908] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 245.408521][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 245.408533][ T29] audit: type=1326 audit(1718740284.633:20186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15907 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1939f42f29 code=0x0 [ 245.510781][ T29] audit: type=1326 audit(1718740284.733:20187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660be69f29 code=0x7ffc0000 [ 245.537257][ T29] audit: type=1326 audit(1718740284.743:20188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660be69f29 code=0x7ffc0000 [ 245.561583][ T29] audit: type=1326 audit(1718740284.763:20189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f660be69f29 code=0x7ffc0000 [ 245.585798][T15879] --map-set only usable from mangle table [ 245.591704][ T29] audit: type=1326 audit(1718740284.763:20190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660be69f29 code=0x7ffc0000 [ 245.615804][ T29] audit: type=1326 audit(1718740284.763:20191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660be69f29 code=0x7ffc0000 [ 245.644218][ T29] audit: type=1326 audit(1718740284.763:20192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f660be69f29 code=0x7ffc0000 [ 245.668273][ T29] audit: type=1326 audit(1718740284.763:20193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660be69f29 code=0x7ffc0000 [ 245.692399][ T29] audit: type=1326 audit(1718740284.763:20194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660be69f29 code=0x7ffc0000 [ 245.716670][ T29] audit: type=1326 audit(1718740284.773:20195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15912 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f660be69f29 code=0x7ffc0000 [ 245.791151][T15919] dummy0: entered promiscuous mode [ 245.797896][T15919] batadv0: entered promiscuous mode [ 245.803575][T15919] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 245.811259][T15919] Cannot create hsr debugfs directory [ 245.935219][T15937] loop3: detected capacity change from 0 to 512 [ 245.947248][T15937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.959982][T15937] ext4 filesystem being mounted at /root/syzkaller-testdir440381391/syzkaller.iu2RWL/140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 246.010946][T13675] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.062300][T15948] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.134095][ T3177] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 246.141605][ T3177] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 246.149350][ T3177] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 246.248699][T15963] loop0: detected capacity change from 0 to 512 [ 246.256173][T15963] EXT4-fs: Ignoring removed oldalloc option [ 246.263921][T15963] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz-executor.0: Parent and EA inode have the same ino 15 [ 246.277423][T15963] EXT4-fs (loop0): Remounting filesystem read-only [ 246.283950][T15963] EXT4-fs warning (device loop0): ext4_evict_inode:254: couldn't mark inode dirty (err -5) [ 246.294245][T15963] EXT4-fs (loop0): 1 orphan inode deleted [ 246.302523][T15963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.314711][T15963] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 246.322052][T15963] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.398480][T15973] --map-set only usable from mangle table [ 246.451818][T15977] loop0: detected capacity change from 0 to 1024 [ 246.459448][T15977] EXT4-fs: Ignoring removed i_version option [ 246.466649][T15977] EXT4-fs (loop0): stripe (255) is not aligned with cluster size (16), stripe is disabled [ 246.487088][T15977] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.520709][T14121] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.600396][ T3177] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 246.607897][ T3177] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 246.616338][ T3177] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 246.627136][T15993] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 246.716941][T15997] loop0: detected capacity change from 0 to 512 [ 246.726276][T15997] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 5: invalid block bitmap [ 246.740644][T15997] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 246.749700][T15997] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 3 (level 2) [ 246.763611][T15997] EXT4-fs (loop0): 1 orphan inode deleted [ 246.769462][T15997] EXT4-fs (loop0): 1 truncate cleaned up [ 246.775807][T15997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.795921][T14121] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.841736][ T9] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 246.849261][ T9] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 246.857782][ T9] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 246.914213][T16012] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 246.915977][T16011] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.020282][ T3179] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 247.027740][ T3179] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 247.045774][ T3179] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 247.111830][T16023] warn_alloc: 6 callbacks suppressed [ 247.111843][T16023] syz-executor.2: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 247.114629][T16026] loop0: detected capacity change from 0 to 512 [ 247.117271][T16023] ,cpuset=syz2,mems_allowed=0 [ 247.117295][T16023] CPU: 1 PID: 16023 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00035-g3d54351c64e8 #0 [ 247.151418][T16023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 247.161512][T16023] Call Trace: [ 247.164776][T16023] [ 247.167693][T16023] dump_stack_lvl+0xf2/0x150 [ 247.172285][T16023] dump_stack+0x15/0x20 [ 247.176534][T16023] warn_alloc+0x145/0x1b0 [ 247.180961][T16023] ? __schedule+0x5e8/0x940 [ 247.185459][T16023] ? __vmalloc_node_range_noprof+0x8c/0xef0 [ 247.191390][T16023] __vmalloc_node_range_noprof+0xac/0xef0 [ 247.197206][T16023] ? __pfx_futex_wake_mark+0x10/0x10 [ 247.202518][T16023] ? avc_has_perm_noaudit+0x1cc/0x210 [ 247.207892][T16023] ? xskq_create+0x36/0xd0 [ 247.212340][T16023] vmalloc_user_noprof+0x59/0x70 [ 247.217298][T16023] ? xskq_create+0x79/0xd0 [ 247.221710][T16023] xskq_create+0x79/0xd0 [ 247.225970][T16023] xsk_init_queue+0x82/0xd0 [ 247.230573][T16023] xsk_setsockopt+0x388/0x520 [ 247.235241][T16023] ? __pfx_xsk_setsockopt+0x10/0x10 [ 247.240432][T16023] __sys_setsockopt+0x1d8/0x250 [ 247.245281][T16023] __x64_sys_setsockopt+0x66/0x80 [ 247.250314][T16023] x64_sys_call+0x1183/0x2d70 [ 247.254980][T16023] do_syscall_64+0xc9/0x1c0 [ 247.259564][T16023] ? clear_bhb_loop+0x55/0xb0 [ 247.264238][T16023] ? clear_bhb_loop+0x55/0xb0 [ 247.268954][T16023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.274888][T16023] RIP: 0033:0x7f129d345f29 [ 247.279331][T16023] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 247.299055][T16023] RSP: 002b:00007f129c6c00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 247.307530][T16023] RAX: ffffffffffffffda RBX: 00007f129d47cf80 RCX: 00007f129d345f29 [ 247.315516][T16023] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000006 [ 247.323800][T16023] RBP: 00007f129d3b5074 R08: 0000000000000004 R09: 0000000000000000 [ 247.331929][T16023] R10: 00000000200013c0 R11: 0000000000000246 R12: 0000000000000000 [ 247.339950][T16023] R13: 000000000000000b R14: 00007f129d47cf80 R15: 00007ffea1c18448 [ 247.347918][T16023] [ 247.351529][T16023] Mem-Info: [ 247.354688][T16023] active_anon:2350 inactive_anon:18912 isolated_anon:0 [ 247.354688][T16023] active_file:3480 inactive_file:10491 isolated_file:0 [ 247.354688][T16023] unevictable:0 dirty:25 writeback:0 [ 247.354688][T16023] slab_reclaimable:2920 slab_unreclaimable:17182 [ 247.354688][T16023] mapped:20056 shmem:4371 pagetables:581 [ 247.354688][T16023] sec_pagetables:0 bounce:0 [ 247.354688][T16023] kernel_misc_reclaimable:0 [ 247.354688][T16023] free:1805166 free_pcp:103829 free_cma:0 [ 247.400018][T16023] Node 0 active_anon:9400kB inactive_anon:75532kB active_file:13920kB inactive_file:41964kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:78368kB dirty:100kB writeback:0kB shmem:15628kB writeback_tmp:0kB kernel_stack:3920kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no [ 247.400783][T16026] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz-executor.0: bg 0: block 5: invalid block bitmap [ 247.428162][T16023] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 247.443357][T16026] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 247.467532][T16023] lowmem_reserve[]: 0 2874 7852 0 [ 247.481384][T16023] Node 0 DMA32 free:2957056kB boost:0kB min:4144kB low:7084kB high:10024kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2960692kB mlocked:0kB bounce:0kB free_pcp:3636kB local_pcp:3540kB free_cma:0kB [ 247.510151][T16023] lowmem_reserve[]: 0 0 4978 0 [ 247.514954][T16023] Node 0 Normal free:4248248kB boost:0kB min:7180kB low:12276kB high:17372kB reserved_highatomic:0KB active_anon:9400kB inactive_anon:75532kB active_file:13920kB inactive_file:41964kB unevictable:0kB writepending:100kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:413796kB local_pcp:230700kB free_cma:0kB [ 247.545586][T16023] lowmem_reserve[]: 0 0 0 0 [ 247.550190][T16023] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 247.561193][T16026] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 3 (level 2) [ 247.562987][T16023] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 720*4096kB (M) = 2957056kB [ 247.592566][T16023] Node 0 Normal: 3926*4kB (UME) 1899*8kB (UME) 375*16kB (UME) 152*32kB (UME) 34*64kB (UM) 23*128kB (UM) 34*256kB (UME) 368*512kB (UM) 440*1024kB (UME) 97*2048kB (UME) 822*4096kB (UME) = 4260128kB [ 247.592891][T16026] EXT4-fs (loop0): 1 orphan inode deleted [ 247.611928][T16023] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 247.611945][T16023] 16389 total pagecache pages [ 247.611952][T16023] 18 pages in swap cache [ 247.611958][T16023] Free swap = 123900kB [ 247.611964][T16023] Total swap = 124996kB [ 247.611970][T16023] 2097051 pages RAM [ 247.611975][T16023] 0 pages HighMem/MovableOnly [ 247.611980][T16023] 78486 pages reserved [ 247.657120][T16026] EXT4-fs (loop0): 1 truncate cleaned up [ 247.670191][T16026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.672955][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 247.690176][ T35] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 247.694566][T16040] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.699825][ T35] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 247.745297][T14121] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.774520][T16041] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 247.805598][T16040] x_tables: duplicate underflow at hook 2 [ 247.876650][T16055] loop2: detected capacity change from 0 to 128 [ 247.885327][T16054] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 248.053953][ T8] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 248.061486][ T8] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 248.074774][ T8] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz1 [ 248.131666][T16077] loop3: detected capacity change from 0 to 512 [ 248.141679][T16077] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 5: invalid block bitmap [ 248.154493][T16077] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 248.164539][T16077] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 3 (level 2) [ 248.180033][T16077] EXT4-fs (loop3): 1 orphan inode deleted [ 248.185831][T16077] EXT4-fs (loop3): 1 truncate cleaned up [ 248.191880][T16077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.214056][T13675] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.298185][T16088] loop3: detected capacity change from 0 to 512 [ 248.317477][T16088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.342030][T16088] ext4 filesystem being mounted at /root/syzkaller-testdir440381391/syzkaller.iu2RWL/149/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.381817][T13675] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.476683][T16097] dummy0: entered promiscuous mode [ 248.482657][T16097] batadv0: entered promiscuous mode [ 248.488311][T16097] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 248.495962][T16097] Cannot create hsr debugfs directory [ 248.541755][T16106] loop4: detected capacity change from 0 to 512 [ 248.550647][T16106] EXT4-fs error (device loop4): __ext4_fill_super:5447: inode #2: comm syz-executor.4: casefold flag without casefold feature [ 248.564313][T16106] EXT4-fs (loop4): get root inode failed [ 248.570052][T16106] EXT4-fs (loop4): mount failed [ 248.580389][ T8] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 248.587829][ T8] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 248.595701][ T8] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz0] on syz1 [ 248.618458][T16106] loop4: detected capacity change from 0 to 512 [ 248.624883][T16106] ext2: Unknown parameter 'mask' [ 248.642511][T16112] loop3: detected capacity change from 0 to 512 [ 248.651575][T16112] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 5: invalid block bitmap [ 248.664456][T16112] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 248.673430][T16112] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 3 (level 2) [ 248.688923][T16112] EXT4-fs (loop3): 1 orphan inode deleted [ 248.694700][T16112] EXT4-fs (loop3): 1 truncate cleaned up [ 248.701027][T16112] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.728969][T13675] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.780050][T16130] --map-set only usable from mangle table [ 248.793417][T16132] loop3: detected capacity change from 0 to 512 [ 248.803193][T16132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.818715][T16132] ext4 filesystem being mounted at /root/syzkaller-testdir440381391/syzkaller.iu2RWL/156/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.859586][T13675] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.865730][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x7 [ 248.875962][ T3179] hid-generic 0000:0000:0000.0022: ignoring exceeding usage max [ 248.886560][T16144] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 248.887161][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 248.909116][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 248.914668][T16147] loop1: detected capacity change from 0 to 512 [ 248.916577][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 248.930166][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 248.931069][T16147] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz-executor.1: bg 0: block 5: invalid block bitmap [ 248.937626][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 248.953846][T16147] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 248.957716][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 248.967672][T16147] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 3 (level 2) [ 248.973726][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 248.988264][T16147] EXT4-fs (loop1): 1 orphan inode deleted [ 248.994587][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 249.000248][T16147] EXT4-fs (loop1): 1 truncate cleaned up [ 249.007617][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 249.007641][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 249.028248][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 249.035959][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 249.043361][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 249.050796][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 249.058171][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 249.065757][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 249.073168][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 249.080555][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 249.088034][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 249.095408][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 249.102841][ T3179] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 249.111792][ T3179] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 249.139366][T16151] loop0: detected capacity change from 0 to 2048 [ 249.173877][T16157] loop1: detected capacity change from 0 to 2048 [ 249.225248][T16157] loop1: p2 < > [ 249.242120][T16164] loop2: detected capacity change from 0 to 128 [ 249.252045][T16164] FAT-fs (loop2): Unrecognized mount option "ªªªªªª" or missing value [ 249.407198][T16169] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 249.492380][T16172] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 249.658789][T16177] loop1: detected capacity change from 0 to 512 [ 249.668938][T16177] ext4 filesystem being mounted at /root/syzkaller-testdir1960325178/syzkaller.VYwLP4/248/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.752854][T16187] loop4: detected capacity change from 0 to 512 [ 249.772888][T16187] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz-executor.4: bg 0: block 5: invalid block bitmap [ 249.794404][T16187] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 249.803531][T16187] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 3 (level 2) [ 249.818409][T16187] EXT4-fs (loop4): 1 orphan inode deleted [ 249.824134][T16187] EXT4-fs (loop4): 1 truncate cleaned up [ 249.932064][T16198] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.941408][T16198] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.022760][T16170] chnl_net:caif_netlink_parms(): no params data found [ 250.038468][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x7 [ 250.046012][ T35] hid-generic 0000:0000:0000.0023: ignoring exceeding usage max [ 250.057765][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.065677][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.073242][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.080668][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.088081][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.095495][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.102993][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.110430][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.117850][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.125316][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.132734][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.140234][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.142590][T16211] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 250.147731][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.165652][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.173133][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.180552][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.187976][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.195395][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.202828][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.210297][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.217710][ T35] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 250.226076][ T35] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 250.226547][T16211] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.259948][T16220] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 250.278780][T16170] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.286074][T16170] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.295109][T16170] bridge_slave_0: entered allmulticast mode [ 250.301765][T16170] bridge_slave_0: entered promiscuous mode [ 250.310025][T16222] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.319697][T16170] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.326837][T16170] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.336400][T16170] bridge_slave_1: entered allmulticast mode [ 250.336870][ T3178] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 250.342869][T16170] bridge_slave_1: entered promiscuous mode [ 250.349731][ T3178] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 250.366507][T16222] loop4: detected capacity change from 0 to 128 [ 250.376917][T16170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.377126][ T3178] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz0] on syz1 [ 250.387859][T16170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.414158][T16170] team0: Port device team_slave_0 added [ 250.420830][T16170] team0: Port device team_slave_1 added [ 250.440396][T16170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.447464][T16170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.473402][T16170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.485223][T16170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.492247][T16170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.518257][T16170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.551274][T16170] hsr_slave_0: entered promiscuous mode [ 250.562749][T16170] hsr_slave_1: entered promiscuous mode [ 250.569232][T16170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.577562][T16170] Cannot create hsr debugfs directory [ 250.662521][T16170] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.677895][T16237] loop4: detected capacity change from 0 to 512 [ 250.699764][T16237] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 250.708247][T16237] System zones: 0-2, 18-18, 34-35 [ 250.715565][T16237] EXT4-fs mount: 6 callbacks suppressed [ 250.715581][T16237] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.733666][T16237] ext4 filesystem being mounted at /root/syzkaller-testdir1596585687/syzkaller.Co09ap/55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.750988][T16170] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.790760][T15395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.800283][T16253] loop2: detected capacity change from 0 to 2048 [ 250.810020][T16253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.823423][T16253] ext4 filesystem being mounted at /root/syzkaller-testdir658967317/syzkaller.aFdQJy/181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.823911][T16170] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.854433][T13629] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor.2: path /root/syzkaller-testdir658967317/syzkaller.aFdQJy/181/bus: bad entry in directory: rec_len is smaller than minimal - offset=108, inode=646161, rec_len=0, size=4096 fake=0 [ 250.881172][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 250.881180][ T29] audit: type=1400 audit(1718740290.103:20696): avc: denied { unlink } for pid=13629 comm="syz-executor.2" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.911166][ T29] audit: type=1400 audit(1718740290.133:20697): avc: denied { unlink } for pid=13629 comm="syz-executor.2" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 250.915092][T16257] --map-set only usable from mangle table [ 250.935370][T13629] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #16: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 250.958200][T13629] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #16: comm syz-executor.2: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 250.958315][T16170] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.987637][T16259] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.009339][T16259] loop4: detected capacity change from 0 to 128 [ 251.063616][T16170] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 251.073219][T16170] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 251.082680][T16170] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 251.091408][T16170] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 251.159787][T16170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.162534][T16267] loop4: detected capacity change from 0 to 8192 [ 251.174282][T16170] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.184589][ T3182] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.191684][ T3182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.204739][ T3177] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.211820][ T3177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.220319][T13629] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.229490][T16267] loop4: p2 [ 251.234139][T16267] loop4: p2 start 4278194190 is beyond EOD, truncated [ 251.239847][T16170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 251.291031][T16275] loop1: detected capacity change from 0 to 512 [ 251.305041][T16275] EXT4-fs: dax option not supported [ 251.313586][T16170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.396509][T16170] veth0_vlan: entered promiscuous mode [ 251.405711][T16170] veth1_vlan: entered promiscuous mode [ 251.422515][T16170] veth0_macvtap: entered promiscuous mode [ 251.441155][T16170] veth1_macvtap: entered promiscuous mode [ 251.463309][ T29] audit: type=1326 audit(1718740290.683:20698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dd056f29 code=0x7ffc0000 [ 251.487589][ T29] audit: type=1326 audit(1718740290.683:20699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dd056f29 code=0x7ffc0000 [ 251.511876][ T29] audit: type=1326 audit(1718740290.683:20700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08dd056f29 code=0x7ffc0000 [ 251.528010][T16292] loop4: detected capacity change from 0 to 1024 [ 251.536106][ T29] audit: type=1326 audit(1718740290.683:20701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dd056f29 code=0x7ffc0000 [ 251.552360][T16170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.566634][ T29] audit: type=1326 audit(1718740290.683:20702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f08dd056f29 code=0x7ffc0000 [ 251.577013][T16170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.600949][ T29] audit: type=1326 audit(1718740290.683:20703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dd056f29 code=0x7ffc0000 [ 251.610823][T16170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.634821][ T29] audit: type=1326 audit(1718740290.683:20704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08dd056f29 code=0x7ffc0000 [ 251.645237][T16170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.645254][T16170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.645317][T16170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.645333][T16170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.669519][ T29] audit: type=1326 audit(1718740290.683:20705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f08dd056f29 code=0x7ffc0000 [ 251.679307][T16170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.726825][T16292] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.734232][T16170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.767053][T16170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.779586][T16170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.788162][T16170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.798639][T16170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.809090][T16170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.819753][T16170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.829582][T16170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.840086][T16170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.849919][T16170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.860366][T16170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.870189][T16170] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.880779][T16170] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.894366][T16170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.912573][T16170] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.921361][T16170] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.930225][T16170] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.938957][T16170] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.982744][T16303] --map-set only usable from mangle table [ 251.993282][T15395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.063043][ T3178] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 252.070539][ T3178] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 252.082152][ T3178] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz0] on syz1 [ 252.162522][T16288] chnl_net:caif_netlink_parms(): no params data found [ 252.236067][T16288] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.243236][T16288] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.281021][T16288] bridge_slave_0: entered allmulticast mode [ 252.291122][T16288] bridge_slave_0: entered promiscuous mode [ 252.304292][T16322] erspan0: entered promiscuous mode [ 252.317944][T16322] team0: entered promiscuous mode [ 252.323012][T16322] team_slave_0: entered promiscuous mode [ 252.328795][T16322] team_slave_1: entered promiscuous mode [ 252.350523][T16335] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.360159][T16288] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.367350][T16288] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.376061][T16288] bridge_slave_1: entered allmulticast mode [ 252.394515][T16288] bridge_slave_1: entered promiscuous mode [ 252.419346][T16341] loop0: detected capacity change from 0 to 1024 [ 252.428302][T16288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.443526][T16288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.458775][T16341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.490127][T16288] team0: Port device team_slave_0 added [ 252.496986][T16288] team0: Port device team_slave_1 added [ 252.534300][T16288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.541365][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.567429][T16288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.579742][T16288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.586747][T16288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.612759][T16288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.643898][T16288] hsr_slave_0: entered promiscuous mode [ 252.653217][T16288] hsr_slave_1: entered promiscuous mode [ 252.659155][T16288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.668321][T16288] Cannot create hsr debugfs directory [ 252.762794][T16288] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.824920][T16288] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.847030][T16358] loop4: detected capacity change from 0 to 2048 [ 252.876993][T16288] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.890785][T16358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.907322][T16358] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 252.922527][T16358] EXT4-fs (loop4): Remounting filesystem read-only [ 252.956252][T16288] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.032712][T16288] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 253.041694][T16288] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.053116][T16288] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.062424][T16288] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.144468][T16288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.156976][T16366] loop1: detected capacity change from 0 to 512 [ 253.173889][T16288] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.181006][T16366] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 253.203623][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.210717][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.220804][T16366] EXT4-fs (loop1): 1 truncate cleaned up [ 253.227646][T16366] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.243888][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.251196][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.270467][T16170] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.293707][ T3177] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 253.294723][T16366] loop1: detected capacity change from 512 to 0 [ 253.301256][ T3177] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 253.308530][T16288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.325275][T16288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.337581][ T3177] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz0] on syz1 [ 253.344352][T16370] EXT4-fs warning (device loop1): ext4_group_extend:1885: will only finish group (8193 blocks, 7937 new) [ 253.363927][T16370] bio_check_eod: 16 callbacks suppressed [ 253.363941][T16370] syz-executor.1: attempt to access beyond end of device [ 253.363941][T16370] loop1: rw=4096, sector=16384, nr_sectors = 2 limit=0 [ 253.392012][T16366] syz-executor.1: attempt to access beyond end of device [ 253.392012][T16366] loop1: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 253.416432][T16288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.436647][T16370] EXT4-fs warning (device loop1): ext4_group_extend:1890: can't read last block, resize aborted [ 253.442887][ T3177] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 253.454728][ T3177] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 253.457491][T16366] EXT4-fs error (device loop1): __ext4_find_entry:1684: inode #2: comm syz-executor.1: reading directory lblock 0 [ 253.472370][ T3177] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz0] on syz1 [ 253.508285][T16366] syz-executor.1: attempt to access beyond end of device [ 253.508285][T16366] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 253.522036][T16366] buffer_io_error: 2 callbacks suppressed [ 253.522049][T16366] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 253.539087][T16366] EXT4-fs (loop1): I/O error while writing superblock [ 253.546735][ T5870] bridge_slave_0: left allmulticast mode [ 253.552382][ T5870] bridge_slave_0: left promiscuous mode [ 253.558164][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.575871][T15395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.610684][T12288] syz-executor.1: attempt to access beyond end of device [ 253.610684][T12288] loop1: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 253.643150][T12288] syz-executor.1: attempt to access beyond end of device [ 253.643150][T12288] loop1: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 253.662491][T12288] syz-executor.1: attempt to access beyond end of device [ 253.662491][T12288] loop1: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 253.677246][T12288] syz-executor.1: attempt to access beyond end of device [ 253.677246][T12288] loop1: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 253.694888][T12288] syz-executor.1: attempt to access beyond end of device [ 253.694888][T12288] loop1: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 253.710492][T12288] syz-executor.1: attempt to access beyond end of device [ 253.710492][T12288] loop1: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 253.724257][T12288] EXT4-fs error (device loop1): ext4_get_inode_loc:4495: inode #2: block 5: comm syz-executor.1: unable to read itable block [ 253.737665][T12288] syz-executor.1: attempt to access beyond end of device [ 253.737665][T12288] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 253.751316][T12288] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 253.805099][T12288] EXT4-fs (loop1): I/O error while writing superblock [ 253.811888][T12288] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5731: IO failure [ 253.825455][ T5870] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 253.864745][ T3179] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 253.894158][T12288] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 253.899171][T16401] loop0: detected capacity change from 0 to 1024 [ 253.902631][T12288] EXT4-fs (loop1): I/O error while writing superblock [ 253.915674][T12288] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor.1: mark_inode_dirty error [ 253.922095][T16404] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.928505][T12288] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 253.945520][T12288] EXT4-fs (loop1): I/O error while writing superblock [ 253.945562][ T5870] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.952457][ T5881] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4480: inode #18: block 9: comm kworker/u8:25: unable to read itable block [ 253.969584][T16401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.979672][ T5881] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 254.001217][ T5870] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.009811][ T5881] EXT4-fs (loop1): I/O error while writing superblock [ 254.016694][ T5881] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4480: inode #19: block 9: comm kworker/u8:25: unable to read itable block [ 254.033974][ T5870] bond0 (unregistering): Released all slaves [ 254.036721][ T5881] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 254.043076][ T5870] bond1 (unregistering): Released all slaves [ 254.058715][ T5881] EXT4-fs (loop1): I/O error while writing superblock [ 254.072841][ T5881] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4480: inode #2: block 5: comm kworker/u8:25: unable to read itable block [ 254.086871][ T5881] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 254.095596][ T5881] EXT4-fs (loop1): I/O error while writing superblock [ 254.111458][T12288] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.123852][T16288] veth0_vlan: entered promiscuous mode [ 254.132066][T12288] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 254.147292][T12288] EXT4-fs (loop1): I/O error while writing superblock [ 254.155408][T16170] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.161790][T16288] veth1_vlan: entered promiscuous mode [ 254.176297][ T3178] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 254.183782][ T3178] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 254.202098][T16288] veth0_macvtap: entered promiscuous mode [ 254.202944][ T3178] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz0] on syz1 [ 254.247259][T16288] veth1_macvtap: entered promiscuous mode [ 254.266088][ T5870] dummy0: left promiscuous mode [ 254.276144][ T5870] batadv0: left promiscuous mode [ 254.303863][ T5870] hsr_slave_0: left promiscuous mode [ 254.310172][ T5870] hsr_slave_1: left promiscuous mode [ 254.323631][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.331262][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.360126][ T5870] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.367774][ T5870] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.391801][ T5870] veth1_macvtap: left promiscuous mode [ 254.397453][ T5870] veth0_macvtap: left promiscuous mode [ 254.403016][ T5870] veth1_vlan: left promiscuous mode [ 254.408402][ T5870] veth0_vlan: left promiscuous mode [ 254.651431][T16435] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 254.868243][T16435] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 254.912780][ T5870] team0 (unregistering): Port device team_slave_1 removed [ 254.938997][ T5870] team0 (unregistering): Port device team_slave_0 removed [ 254.952981][T16445] loop4: detected capacity change from 0 to 1024 [ 254.991818][T16445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.007324][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.017856][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.027711][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.038200][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.048082][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.058769][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.068613][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.079109][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.089212][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.099965][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.131083][T16288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.169161][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.179767][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.189599][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.200280][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.210289][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.221050][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.230976][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.241542][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.251475][T16288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.261966][T16288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.274081][T16288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.286102][T15395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.296420][T16288] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.305228][T16288] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.314057][T16288] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.322757][T16288] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.407675][ T3177] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 255.415160][ T3177] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 255.422323][T16440] chnl_net:caif_netlink_parms(): no params data found [ 255.423348][T16465] Cannot find add_set index 0 as target [ 255.436125][ T3177] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz1 [ 255.462278][T16440] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.469384][T16440] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.476905][T16440] bridge_slave_0: entered allmulticast mode [ 255.483437][T16440] bridge_slave_0: entered promiscuous mode [ 255.492311][T16440] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.499533][T16440] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.507118][T16440] bridge_slave_1: entered allmulticast mode [ 255.513630][T16440] bridge_slave_1: entered promiscuous mode [ 255.546764][T16440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.566499][T16440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.585579][T16440] team0: Port device team_slave_0 added [ 255.592104][T16440] team0: Port device team_slave_1 added [ 255.608098][T16440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.615351][T16440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.641338][T16440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.653433][T16440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.660481][T16440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.686498][T16440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.730347][ T5870] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.743543][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.757098][T16440] hsr_slave_0: entered promiscuous mode [ 255.763584][T16440] hsr_slave_1: entered promiscuous mode [ 255.780117][T16483] netlink: 'syz-executor.4': attribute type 298 has an invalid length. [ 255.817560][ T5870] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.868371][ T5870] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.902340][T16486] loop0: detected capacity change from 0 to 1764 [ 255.946513][ T5870] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.962867][T16490] loop4: detected capacity change from 0 to 1024 [ 255.970793][T16490] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 255.986589][T16490] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 255.998318][T16490] EXT4-fs (loop4): orphan cleanup on readonly fs [ 256.006854][T16490] __quota_error: 416 callbacks suppressed [ 256.006867][T16490] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=2 [ 256.022304][T16490] EXT4-fs warning (device loop4): ext4_enable_quotas:7078: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 256.037058][T16490] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 256.044287][T16490] EXT4-fs (loop4): 1 truncate cleaned up [ 256.064537][T16490] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 256.119380][T15395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.150731][ T29] audit: type=1326 audit(1718740295.373:21122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16499 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723306df29 code=0x7ffc0000 [ 256.175372][ T29] audit: type=1326 audit(1718740295.373:21123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16499 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723306df29 code=0x7ffc0000 [ 256.199611][ T29] audit: type=1326 audit(1718740295.373:21124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16499 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f723306df29 code=0x7ffc0000 [ 256.223786][ T29] audit: type=1326 audit(1718740295.373:21125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16499 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723306df29 code=0x7ffc0000 [ 256.248110][ T29] audit: type=1326 audit(1718740295.373:21126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16499 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f723306df29 code=0x7ffc0000 [ 256.272333][ T29] audit: type=1326 audit(1718740295.373:21127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16499 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723306df29 code=0x7ffc0000 [ 256.277204][ T3178] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 256.296741][ T29] audit: type=1326 audit(1718740295.373:21128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16499 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f723306df29 code=0x7ffc0000 [ 256.303981][ T3178] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 256.328051][ T29] audit: type=1326 audit(1718740295.373:21129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16499 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723306df29 code=0x7ffc0000 [ 256.361372][ T29] audit: type=1326 audit(1718740295.373:21130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16499 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723306df29 code=0x7ffc0000 [ 256.364755][ T3178] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 256.437029][ T5870] bond0 (unregistering): Released all slaves [ 256.562528][T16516] loop2: detected capacity change from 0 to 128 [ 256.655752][ T5870] dummy0: left promiscuous mode [ 256.661098][ T5870] batadv0: left promiscuous mode [ 256.668175][ T5870] hsr_slave_0: left promiscuous mode [ 256.673775][ T5870] hsr_slave_1: left promiscuous mode [ 256.681245][ T5870] veth1_macvtap: left promiscuous mode [ 256.686837][ T5870] veth0_macvtap: left promiscuous mode [ 256.692371][ T5870] veth1_vlan: left promiscuous mode [ 256.697583][ T5870] veth0_vlan: left promiscuous mode [ 256.837783][ T24] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 256.845419][ T24] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 256.858376][ T24] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 256.887040][T16531] loop0: detected capacity change from 0 to 512 [ 256.894519][T16531] EXT4-fs: dax option not supported [ 256.909477][T16440] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 256.919425][T16440] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 256.932361][T16440] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 256.942199][T16440] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 256.985779][T16440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.008206][T16440] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.027574][ T3177] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.034700][ T3177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.053713][ T3177] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.060862][ T3177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.078404][T16440] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 257.139249][T16440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.235174][T16440] veth0_vlan: entered promiscuous mode [ 257.244110][T16440] veth1_vlan: entered promiscuous mode [ 257.263382][T16440] veth0_macvtap: entered promiscuous mode [ 257.274337][T16440] veth1_macvtap: entered promiscuous mode [ 257.285333][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.295874][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.305752][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.316206][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.326219][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.336650][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.346492][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.357037][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.367016][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.377489][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.387318][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.397840][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.410137][T16440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.421272][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.431842][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.441806][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.452366][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.462385][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.472882][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.482697][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.493244][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.503188][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.513638][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.523572][T16440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.534009][T16440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.545341][T16440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.557347][T16440] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.564351][ T3160] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 257.566224][T16440] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.566257][T16440] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.566286][T16440] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.573706][ T3160] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 257.609090][ T3160] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 257.779925][ T8] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 257.787582][ T8] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 257.801301][ T8] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 257.895143][T16579] loop2: detected capacity change from 0 to 2048 [ 257.943024][T16579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.001380][T16288] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.010840][T16588] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 258.156150][T16592] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 258.637937][ T5875] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 258.651011][T16595] vlan2: entered allmulticast mode [ 258.658134][T16595] bond0: entered allmulticast mode [ 258.663282][T16595] bond_slave_0: entered allmulticast mode [ 258.669233][T16595] bond_slave_1: entered allmulticast mode [ 258.677423][T16595] bond0: left allmulticast mode [ 258.682314][T16595] bond_slave_0: left allmulticast mode [ 258.687944][T16595] bond_slave_1: left allmulticast mode [ 258.790421][ T9] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 258.797976][ T9] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 258.806097][ T9] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 258.819101][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 258.854297][T16613] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.867480][T16613] loop1: detected capacity change from 0 to 128 [ 258.908490][T16617] bio_check_eod: 21 callbacks suppressed [ 258.908500][T16617] syz-executor.0: attempt to access beyond end of device [ 258.908500][T16617] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 258.968919][T16623] loop0: detected capacity change from 0 to 1764 [ 259.107640][ T35] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 259.115120][ T35] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 259.122816][ T35] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz1 [ 259.207232][T16642] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.220611][T16642] loop2: detected capacity change from 0 to 128 [ 259.297874][T16649] loop2: detected capacity change from 0 to 1764 [ 259.355322][T16654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.375581][T16656] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 259.409709][ T3160] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.417219][ T3160] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 259.425716][ T3160] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz0] on syz1 [ 259.572293][T16674] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.614099][T16678] loop1: detected capacity change from 0 to 1764 [ 259.914154][T16689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.970281][T16691] SELinux: Context system_u:object_r:crack_exec_t:s0 is not valid (left unmapped). [ 259.997330][T16693] loop0: detected capacity change from 0 to 128 [ 260.015094][T16693] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 260.027638][T16693] ext4 filesystem being mounted at /root/syzkaller-testdir1381175234/syzkaller.Np5POh/24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 260.092216][T16170] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 260.298466][T16715] bridge0: entered allmulticast mode [ 260.303939][T16715] bridge0: left allmulticast mode [ 260.321914][T16717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.627797][T16728] loop1: detected capacity change from 0 to 1024 [ 260.635531][T16728] EXT4-fs (loop1): blocks per group (131072) and clusters per group (8192) inconsistent [ 260.688005][T16728] loop1: detected capacity change from 0 to 512 [ 260.762375][T16735] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 261.104376][T16742] loop0: detected capacity change from 0 to 512 [ 261.115980][T16742] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.128611][T16742] ext4 filesystem being mounted at /root/syzkaller-testdir1381175234/syzkaller.Np5POh/34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.152184][T16170] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.268860][T16748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.316995][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 261.342398][T16756] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 261.374797][T16761] warn_alloc: 7 callbacks suppressed [ 261.374834][T16761] syz-executor.2: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 261.395311][T16761] CPU: 1 PID: 16761 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00035-g3d54351c64e8 #0 [ 261.405838][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 261.415890][T16761] Call Trace: [ 261.419156][T16761] [ 261.422094][T16761] dump_stack_lvl+0xf2/0x150 [ 261.426689][T16761] dump_stack+0x15/0x20 [ 261.430919][T16761] warn_alloc+0x145/0x1b0 [ 261.435313][T16761] ? __schedule+0x5e8/0x940 [ 261.439822][T16761] ? __vmalloc_node_range_noprof+0x8c/0xef0 [ 261.445712][T16761] __vmalloc_node_range_noprof+0xac/0xef0 [ 261.451450][T16761] ? __pfx_futex_wake_mark+0x10/0x10 [ 261.456739][T16761] ? avc_has_perm_noaudit+0x1cc/0x210 [ 261.462155][T16761] ? xskq_create+0x36/0xd0 [ 261.466685][T16761] vmalloc_user_noprof+0x59/0x70 [ 261.471702][T16761] ? xskq_create+0x79/0xd0 [ 261.476111][T16761] xskq_create+0x79/0xd0 [ 261.480347][T16761] xsk_init_queue+0x82/0xd0 [ 261.484979][T16761] xsk_setsockopt+0x388/0x520 [ 261.489709][T16761] ? __pfx_xsk_setsockopt+0x10/0x10 [ 261.494939][T16761] __sys_setsockopt+0x1d8/0x250 [ 261.499879][T16761] __x64_sys_setsockopt+0x66/0x80 [ 261.504905][T16761] x64_sys_call+0x1183/0x2d70 [ 261.509588][T16761] do_syscall_64+0xc9/0x1c0 [ 261.514083][T16761] ? clear_bhb_loop+0x55/0xb0 [ 261.518817][T16761] ? clear_bhb_loop+0x55/0xb0 [ 261.523492][T16761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.529408][T16761] RIP: 0033:0x7f723306df29 [ 261.533811][T16761] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 261.553454][T16761] RSP: 002b:00007f72323e80c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 261.561857][T16761] RAX: ffffffffffffffda RBX: 00007f72331a4f80 RCX: 00007f723306df29 [ 261.569980][T16761] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000006 [ 261.577944][T16761] RBP: 00007f72330dd074 R08: 0000000000000004 R09: 0000000000000000 [ 261.585904][T16761] R10: 00000000200013c0 R11: 0000000000000246 R12: 0000000000000000 [ 261.593864][T16761] R13: 000000000000000b R14: 00007f72331a4f80 R15: 00007ffe334f49b8 [ 261.601875][T16761] [ 261.604934][T16761] Mem-Info: [ 261.610862][T16761] active_anon:4404 inactive_anon:19400 isolated_anon:0 [ 261.610862][T16761] active_file:3560 inactive_file:10493 isolated_file:0 [ 261.610862][T16761] unevictable:3 dirty:40 writeback:0 [ 261.610862][T16761] slab_reclaimable:2994 slab_unreclaimable:18227 [ 261.610862][T16761] mapped:18288 shmem:6518 pagetables:581 [ 261.610862][T16761] sec_pagetables:0 bounce:0 [ 261.610862][T16761] kernel_misc_reclaimable:0 [ 261.610862][T16761] free:1897086 free_pcp:8594 free_cma:0 [ 261.656062][T16761] Node 0 active_anon:17616kB inactive_anon:81660kB active_file:14240kB inactive_file:41972kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:77212kB dirty:160kB writeback:0kB shmem:30132kB writeback_tmp:0kB kernel_stack:3920kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no [ 261.684345][T16761] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 261.711174][T16761] lowmem_reserve[]: 0 2874 7852 0 [ 261.716266][T16761] Node 0 DMA32 free:2957056kB boost:0kB min:4144kB low:7084kB high:10024kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2960692kB mlocked:0kB bounce:0kB free_pcp:3636kB local_pcp:3540kB free_cma:0kB [ 261.744951][T16761] lowmem_reserve[]: 0 0 4978 0 [ 261.749725][T16761] Node 0 Normal free:4612216kB boost:0kB min:7180kB low:12276kB high:17372kB reserved_highatomic:0KB active_anon:17616kB inactive_anon:86068kB active_file:14240kB inactive_file:41972kB unevictable:12kB writepending:160kB present:5242880kB managed:5098208kB mlocked:12kB bounce:0kB free_pcp:25052kB local_pcp:13684kB free_cma:0kB [ 261.780554][T16761] lowmem_reserve[]: 0 0 0 0 [ 261.785158][T16761] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 261.797932][T16761] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 1*2048kB (M) 720*4096kB (M) = 2957056kB [ 261.814231][T16761] Node 0 Normal: 1661*4kB (UME) 1868*8kB (UME) 1598*16kB (UME) 974*32kB (UME) 399*64kB (UME) 539*128kB (UME) 413*256kB (UME) 492*512kB (UME) 440*1024kB (UME) 105*2048kB (UME) 834*4096kB (UM) = 4612148kB [ 261.834381][T16761] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 261.843812][T16761] 20387 total pagecache pages [ 261.848518][T16761] 11 pages in swap cache [ 261.853100][T16761] Free swap = 124156kB [ 261.857426][T16761] Total swap = 124996kB [ 261.861874][T16761] 2097051 pages RAM [ 261.865731][T16761] 0 pages HighMem/MovableOnly [ 261.870486][T16761] 78486 pages reserved [ 261.877317][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 261.877329][ T29] audit: type=1326 audit(1718740301.103:21247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16764 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37077e1f29 code=0x0 [ 261.920373][ T9] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 261.927937][ T9] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 261.936790][ T9] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz0] on syz1 [ 261.940753][T16779] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.987967][T16786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 261.990224][T16787] loop1: detected capacity change from 0 to 512 [ 262.004960][T16787] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.014171][T16787] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 262.022411][T16787] EXT4-fs (loop1): fragment/cluster size (4096) != block size (1024) [ 262.148314][T16795] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 262.310208][T16804] syzkaller0: entered promiscuous mode [ 262.315925][T16804] syzkaller0: entered allmulticast mode [ 262.611571][ T3160] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 262.619050][ T3160] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 262.628798][ T3160] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz1 [ 262.683692][T16819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.761299][T16831] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.999484][T16842] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16842 comm=syz-executor.4 [ 263.061088][ T3178] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 263.064440][T16801] syz-executor.1 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 263.068529][ T3178] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 263.079790][T16801] CPU: 1 PID: 16801 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00035-g3d54351c64e8 #0 [ 263.079872][T16801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 263.079883][T16801] Call Trace: [ 263.079890][T16801] [ 263.079897][T16801] dump_stack_lvl+0xf2/0x150 [ 263.079929][T16801] dump_stack+0x15/0x20 [ 263.095135][ T3178] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz1 [ 263.097797][T16801] dump_header+0x83/0x2d0 [ 263.136832][T16801] oom_kill_process+0x33e/0x4c0 [ 263.141722][T16801] out_of_memory+0x9af/0xbe0 [ 263.146454][T16801] mem_cgroup_out_of_memory+0x13e/0x190 [ 263.151993][T16801] try_charge_memcg+0x745/0xcd0 [ 263.156834][T16801] ? _raw_spin_unlock+0x26/0x50 [ 263.161731][T16801] ? radix_tree_lookup+0xf9/0x150 [ 263.166837][T16801] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 263.172899][T16801] __read_swap_cache_async+0x2b9/0x520 [ 263.178354][T16801] swap_cluster_readahead+0x276/0x3f0 [ 263.183771][T16801] swapin_readahead+0xe2/0x7a0 [ 263.188536][T16801] ? __filemap_get_folio+0x420/0x5b0 [ 263.193876][T16801] ? swap_cache_get_folio+0x6e/0x210 [ 263.199219][T16801] do_swap_page+0x3bc/0x1840 [ 263.203812][T16801] ? cgroup_rstat_updated+0x99/0x550 [ 263.209153][T16801] ? __rcu_read_lock+0x36/0x50 [ 263.213954][T16801] handle_mm_fault+0x809/0x2a80 [ 263.218855][T16801] ? mas_walk+0x204/0x320 [ 263.223176][T16801] exc_page_fault+0x3b9/0x650 [ 263.227849][T16801] asm_exc_page_fault+0x26/0x30 [ 263.232690][T16801] RIP: 0033:0x7f4102ff30b4 [ 263.237090][T16801] Code: 01 00 00 69 3d 01 e6 ca 00 e8 03 00 00 48 8d 1d e2 ce 17 00 e8 0d 5e 04 00 eb 0f 0f 1f 00 48 81 c3 d0 00 00 00 48 39 eb 74 be <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 77 f0 ff ff eb [ 263.256839][T16801] RSP: 002b:00007ffd0abc0fe0 EFLAGS: 00010206 [ 263.262945][T16801] RAX: 0000000000000000 RBX: 00007f410316ff80 RCX: 0000000000000000 [ 263.270909][T16801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555822d788 [ 263.278866][T16801] RBP: 00007f4103171980 R08: 0000000000000000 R09: 7fffffffffffffff [ 263.286836][T16801] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000403c4 [ 263.294819][T16801] R13: 00007f410317005c R14: 0000000000000032 R15: 00007f4103171980 [ 263.302794][T16801] [ 263.306489][T16801] memory: usage 307200kB, limit 307200kB, failcnt 3387 [ 263.313368][T16801] memory+swap: usage 307632kB, limit 9007199254740988kB, failcnt 0 [ 263.321498][T16801] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 263.329034][T16801] Memory cgroup stats for /syz1: [ 263.329178][T16801] cache 12288 [ 263.337668][T16801] rss 0 [ 263.340415][T16801] shmem 0 [ 263.343327][T16801] mapped_file 0 [ 263.346802][T16801] dirty 12288 [ 263.350110][T16801] writeback 0 [ 263.353440][T16801] workingset_refault_anon 1049 [ 263.358245][T16801] workingset_refault_file 4414 [ 263.363005][T16801] swap 442368 [ 263.366445][T16801] swapcached 8192 [ 263.370087][T16801] pgpgin 283228 [ 263.373561][T16801] pgpgout 283223 [ 263.377130][T16801] pgfault 356939 [ 263.380689][T16801] pgmajfault 423 [ 263.384256][T16801] inactive_anon 8192 [ 263.388178][T16801] active_anon 0 [ 263.391620][T16801] inactive_file 0 [ 263.395306][T16801] active_file 12288 [ 263.399130][T16801] unevictable 0 [ 263.402629][T16801] hierarchical_memory_limit 314572800 [ 263.408060][T16801] hierarchical_memsw_limit 9223372036854771712 [ 263.414204][T16801] total_cache 12288 [ 263.418038][T16801] total_rss 0 [ 263.421342][T16801] total_shmem 0 [ 263.424847][T16801] total_mapped_file 0 [ 263.428928][T16801] total_dirty 12288 [ 263.432722][T16801] total_writeback 0 [ 263.436544][T16801] total_workingset_refault_anon 1049 [ 263.441877][T16801] total_workingset_refault_file 4414 [ 263.447232][T16801] total_swap 442368 [ 263.451054][T16801] total_swapcached 8192 [ 263.455256][T16801] total_pgpgin 283228 [ 263.459258][T16801] total_pgpgout 283223 [ 263.463342][T16801] total_pgfault 356939 [ 263.467501][T16801] total_pgmajfault 423 [ 263.471591][T16801] total_inactive_anon 8192 [ 263.476055][T16801] total_active_anon 0 [ 263.480153][T16801] total_inactive_file 0 [ 263.484284][T16801] total_active_file 12288 [ 263.488681][T16801] total_unevictable 0 [ 263.492751][T16801] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=16801,uid=0 [ 263.508086][T16801] Memory cgroup out of memory: Killed process 16801 (syz-executor.1) total-vm:46572kB, anon-rss:420kB, file-rss:8964kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 263.609954][T16831] Direct I/O collision with buffered writes! File: syzkaller-testdir1566216947/syzkaller.QP15LC/52/cgroup.controllers Comm: syz-executor.2 [ 263.691837][T16854] loop2: detected capacity change from 0 to 256 [ 263.709370][T16854] FAT-fs (loop2): Unrecognized mount option "0xffffffffffffffff" or missing value [ 263.986915][T16866] loop4: detected capacity change from 0 to 1024 [ 264.007735][T16866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.020062][T16866] ext4 filesystem being mounted at /root/syzkaller-testdir1596585687/syzkaller.Co09ap/105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.036924][ T29] audit: type=1400 audit(1718740303.261:21248): avc: denied { write } for pid=16864 comm="syz-executor.4" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 264.082755][T15395] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.135245][T16860] loop0: detected capacity change from 0 to 65536 [ 264.176348][T16882] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 264.371682][T16902] 9pnet_fd: p9_fd_create_tcp (16902): problem connecting socket to 127.0.0.1 [ 264.568656][ T29] audit: type=1326 audit(1718740303.791:21249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16908 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37077e1f29 code=0x7ffc0000 [ 264.592925][ T29] audit: type=1326 audit(1718740303.791:21250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16908 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37077e1f29 code=0x7ffc0000 [ 264.629618][T16916] loop1: detected capacity change from 0 to 1024 [ 264.636944][ T29] audit: type=1326 audit(1718740303.811:21251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 264.646702][T16916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.661121][ T29] audit: type=1326 audit(1718740303.811:21252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 264.697595][ T29] audit: type=1326 audit(1718740303.821:21253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 264.721693][ T29] audit: type=1326 audit(1718740303.821:21254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 264.745799][ T29] audit: type=1326 audit(1718740303.821:21255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 264.769978][ T29] audit: type=1326 audit(1718740303.821:21256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16915 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 264.810875][T16440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.868921][T16929] loop1: detected capacity change from 0 to 512 [ 264.876653][T16929] EXT4-fs: dax option not supported [ 264.951523][T16882] Direct I/O collision with buffered writes! File: syzkaller-testdir1596585687/syzkaller.Co09ap/108/cgroup.controllers Comm: syz-executor.4 [ 265.243529][T16953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.264116][T15395] cgroup: fork rejected by pids controller in /syz4 [ 265.495703][ T5907] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.709393][ T5907] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.748100][T16972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.798277][ T5907] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.871225][ T5907] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.895769][T16981] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.939269][T16963] chnl_net:caif_netlink_parms(): no params data found [ 265.976372][ T5907] bridge_slave_1: left allmulticast mode [ 265.982073][ T5907] bridge_slave_1: left promiscuous mode [ 265.987790][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.012442][ T5907] bridge_slave_0: left allmulticast mode [ 266.018150][ T5907] bridge_slave_0: left promiscuous mode [ 266.023838][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.106124][T16989] loop1: detected capacity change from 0 to 1024 [ 266.131048][ T5907] erspan0 (unregistering): left promiscuous mode [ 266.140321][T16989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.257748][ T5907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.269511][ T5907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.280072][ T5907] bond0 (unregistering): Released all slaves [ 266.319523][T16963] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.326820][T16963] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.334139][T16963] bridge_slave_0: entered allmulticast mode [ 266.341570][T16963] bridge_slave_0: entered promiscuous mode [ 266.348681][T16963] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.356017][T16963] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.363314][T16963] bridge_slave_1: entered allmulticast mode [ 266.369826][T16963] bridge_slave_1: entered promiscuous mode [ 266.395566][T16963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.409243][T16963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.444365][T16963] team0: Port device team_slave_0 added [ 266.453840][T16963] team0: Port device team_slave_1 added [ 266.484076][T16981] Direct I/O collision with buffered writes! File: syzkaller-testdir1381175234/syzkaller.Np5POh/52/cgroup.controllers Comm: syz-executor.0 [ 266.501016][ T5907] team0: left promiscuous mode [ 266.505838][ T5907] team_slave_0: left promiscuous mode [ 266.511339][ T5907] team_slave_1: left promiscuous mode [ 266.528254][ T5907] dummy0: left promiscuous mode [ 266.533590][ T5907] batadv0: left promiscuous mode [ 266.542377][ T5907] hsr_slave_0: left promiscuous mode [ 266.551789][ T5907] hsr_slave_1: left promiscuous mode [ 266.559908][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.567512][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.577148][ T5907] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.584612][ T5907] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.594307][ T5907] veth1_macvtap: left promiscuous mode [ 266.599928][ T5907] veth0_macvtap: left promiscuous mode [ 266.605518][ T5907] veth1_vlan: left promiscuous mode [ 266.610743][ T5907] veth0_vlan: left promiscuous mode [ 266.709355][ T5907] team0 (unregistering): Port device team_slave_1 removed [ 266.720348][ T5907] team0 (unregistering): Port device team_slave_0 removed [ 266.767437][T16963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.774412][T16963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.800404][T16963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.812720][T16963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.819822][T16963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.846019][T16963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.883284][T16963] hsr_slave_0: entered promiscuous mode [ 266.897034][T16963] hsr_slave_1: entered promiscuous mode [ 266.915598][T16963] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.924924][T16963] Cannot create hsr debugfs directory [ 266.959399][T16986] syz-executor.2 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 266.973920][T16986] CPU: 0 PID: 16986 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00035-g3d54351c64e8 #0 [ 266.984426][T16986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 266.988140][T17007] loop0: detected capacity change from 0 to 512 [ 266.994496][T16986] Call Trace: [ 266.994507][T16986] [ 266.994515][T16986] dump_stack_lvl+0xf2/0x150 [ 267.008279][T17007] EXT4-fs: dax option not supported [ 267.011529][T16986] dump_stack+0x15/0x20 [ 267.020887][T16986] dump_header+0x83/0x2d0 [ 267.025218][T16986] oom_kill_process+0x33e/0x4c0 [ 267.030062][T16986] out_of_memory+0x9af/0xbe0 [ 267.034633][T16986] mem_cgroup_out_of_memory+0x13e/0x190 [ 267.040240][T16986] try_charge_memcg+0x745/0xcd0 [ 267.045135][T16986] ? get_page_from_freelist+0x1a2a/0x1a70 [ 267.050946][T16986] obj_cgroup_charge_pages+0xbd/0x1d0 [ 267.056313][T16986] __memcg_kmem_charge_page+0x9d/0x170 [ 267.061867][T16986] __alloc_pages_noprof+0x1bc/0x360 [ 267.067051][T16986] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 267.072475][T16986] alloc_pages_noprof+0xe1/0x100 [ 267.077413][T16986] __vmalloc_node_range_noprof+0x719/0xef0 [ 267.083212][T16986] kvmalloc_node_noprof+0x121/0x170 [ 267.088486][T16986] ? ip_set_alloc+0x1f/0x30 [ 267.093027][T16986] ip_set_alloc+0x1f/0x30 [ 267.097340][T16986] hash_netiface_create+0x273/0x730 [ 267.102521][T16986] ? __nla_parse+0x40/0x60 [ 267.106926][T16986] ? __pfx_hash_netiface_create+0x10/0x10 [ 267.112708][T16986] ip_set_create+0x359/0x8a0 [ 267.117296][T16986] ? memchr+0x1/0x50 [ 267.121175][T16986] ? __nla_parse+0x40/0x60 [ 267.125633][T16986] nfnetlink_rcv_msg+0x4a9/0x570 [ 267.130561][T16986] netlink_rcv_skb+0x12c/0x230 [ 267.135314][T16986] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 267.141045][T16986] nfnetlink_rcv+0x16c/0x15b0 [ 267.145707][T16986] ? kmem_cache_free+0xd8/0x280 [ 267.150591][T16986] ? nlmon_xmit+0x51/0x60 [ 267.154910][T16986] ? __kfree_skb+0x102/0x150 [ 267.159532][T16986] ? consume_skb+0x57/0x180 [ 267.164022][T16986] ? nlmon_xmit+0x51/0x60 [ 267.168348][T16986] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 267.173787][T16986] ? __dev_queue_xmit+0xb21/0x1e50 [ 267.179031][T16986] ? ref_tracker_free+0x3a5/0x410 [ 267.184046][T16986] ? __netlink_deliver_tap+0x495/0x4c0 [ 267.189561][T16986] netlink_unicast+0x58d/0x660 [ 267.194330][T16986] netlink_sendmsg+0x5ca/0x6e0 [ 267.199152][T16986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.204438][T16986] __sock_sendmsg+0x140/0x180 [ 267.209139][T16986] ____sys_sendmsg+0x312/0x410 [ 267.213948][T16986] __sys_sendmsg+0x1e9/0x280 [ 267.218566][T16986] ? futex_wait+0x18e/0x1c0 [ 267.223175][T16986] __x64_sys_sendmsg+0x46/0x50 [ 267.227922][T16986] x64_sys_call+0xb25/0x2d70 [ 267.232672][T16986] do_syscall_64+0xc9/0x1c0 [ 267.237214][T16986] ? clear_bhb_loop+0x55/0xb0 [ 267.241939][T16986] ? clear_bhb_loop+0x55/0xb0 [ 267.246658][T16986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.252618][T16986] RIP: 0033:0x7f723306df29 [ 267.257042][T16986] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 267.276683][T16986] RSP: 002b:00007f72323e80c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.285077][T16986] RAX: ffffffffffffffda RBX: 00007f72331a4f80 RCX: 00007f723306df29 [ 267.293094][T16986] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 267.301065][T16986] RBP: 00007f72330dd074 R08: 0000000000000000 R09: 0000000000000000 [ 267.309053][T16986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.317112][T16986] R13: 000000000000000b R14: 00007f72331a4f80 R15: 00007ffe334f49b8 [ 267.325076][T16986] [ 267.328139][T16986] memory: usage 307192kB, limit 307200kB, failcnt 3419 [ 267.336920][T16986] memory+swap: usage 307568kB, limit 9007199254740988kB, failcnt 0 [ 267.344851][T16986] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 267.352117][T16986] Memory cgroup stats for /syz2: [ 267.352197][T16986] cache 16384 [ 267.360381][T16986] rss 0 [ 267.363117][T16986] shmem 0 [ 267.366039][T16986] mapped_file 0 [ 267.369471][T16986] dirty 0 [ 267.372380][T16986] writeback 0 [ 267.375667][T16986] workingset_refault_anon 629 [ 267.380322][T16986] workingset_refault_file 2923 [ 267.385071][T16986] swap 385024 [ 267.388381][T16986] swapcached 4096 [ 267.392029][T16986] pgpgin 295390 [ 267.395537][T16986] pgpgout 295385 [ 267.399064][T16986] pgfault 338349 [ 267.402583][T16986] pgmajfault 297 [ 267.406117][T16986] inactive_anon 4096 [ 267.410056][T16986] active_anon 0 [ 267.413487][T16986] inactive_file 8192 [ 267.417369][T16986] active_file 8192 [ 267.421060][T16986] unevictable 0 [ 267.424521][T16986] hierarchical_memory_limit 314572800 [ 267.429895][T16986] hierarchical_memsw_limit 9223372036854771712 [ 267.436042][T16986] total_cache 16384 [ 267.439831][T16986] total_rss 0 [ 267.443091][T16986] total_shmem 0 [ 267.446532][T16986] total_mapped_file 0 [ 267.450486][T16986] total_dirty 0 [ 267.453917][T16986] total_writeback 0 [ 267.457732][T16986] total_workingset_refault_anon 629 [ 267.462901][T16986] total_workingset_refault_file 2923 [ 267.468172][T16986] total_swap 385024 [ 267.471973][T16986] total_swapcached 4096 [ 267.476112][T16986] total_pgpgin 295390 [ 267.480149][T16986] total_pgpgout 295385 [ 267.484272][T16986] total_pgfault 338349 [ 267.488425][T16986] total_pgmajfault 297 [ 267.492503][T16986] total_inactive_anon 4096 [ 267.496936][T16986] total_active_anon 0 [ 267.500892][T16986] total_inactive_file 8192 [ 267.505334][T16986] total_active_file 8192 [ 267.509547][T16986] total_unevictable 0 [ 267.513499][T16986] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=16985,uid=0 [ 267.528842][T16986] Memory cgroup out of memory: Killed process 16985 (syz-executor.2) total-vm:48752kB, anon-rss:420kB, file-rss:9172kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 267.741801][T16440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.792987][T17016] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.851488][T16963] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 267.861718][T16963] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 267.870575][T16963] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 267.883666][T16963] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 267.932291][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 267.932304][ T29] audit: type=1326 audit(1718740307.151:21360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 267.962804][ T29] audit: type=1326 audit(1718740307.151:21361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 267.987220][ T29] audit: type=1326 audit(1718740307.151:21362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 268.011559][ T29] audit: type=1326 audit(1718740307.151:21363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 268.035726][ T29] audit: type=1326 audit(1718740307.151:21364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 268.043049][T17039] loop1: detected capacity change from 0 to 1024 [ 268.060033][ T29] audit: type=1326 audit(1718740307.151:21365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 268.090412][ T29] audit: type=1326 audit(1718740307.151:21366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 268.099461][T16963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.114562][ T29] audit: type=1326 audit(1718740307.151:21367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 268.126578][T16963] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.145128][ T29] audit: type=1326 audit(1718740307.151:21368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 268.175911][ T29] audit: type=1326 audit(1718740307.151:21369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17026 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f4103038f29 code=0x7ffc0000 [ 268.203436][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.210522][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.220218][T17039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.234050][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.241147][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.259638][T16963] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 268.357469][T16963] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.515695][T16963] veth0_vlan: entered promiscuous mode [ 268.529513][T16963] veth1_vlan: entered promiscuous mode [ 268.552748][T16963] veth0_macvtap: entered promiscuous mode [ 268.560488][T16963] veth1_macvtap: entered promiscuous mode [ 268.572524][T16963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.583114][T16963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.593048][T16963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.603474][T16963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.613351][T16963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.623885][T16963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.634146][T16963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.644718][T16963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.654751][T16963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.665234][T16963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.675054][T16963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.685490][T16963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.698174][T16963] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.706027][T17066] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.718239][T16963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.728728][T16963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.738687][T16963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.749178][T16963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.759305][T16963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.769887][T16963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.779251][T17068] loop2: detected capacity change from 0 to 512 [ 268.779806][T16963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.796460][T16963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.806291][T16963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.806979][T17068] EXT4-fs: dax option not supported [ 268.816707][T16963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.816730][T16963] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.842149][T16963] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.854476][T16963] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.864478][T16963] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.873292][T16963] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.882023][T16963] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.890790][T16963] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.080984][T17040] syz-executor.0 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 269.093092][T17040] CPU: 0 PID: 17040 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00035-g3d54351c64e8 #0 [ 269.103650][T17040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 269.113702][T17040] Call Trace: [ 269.116990][T17040] [ 269.119919][T17040] dump_stack_lvl+0xf2/0x150 [ 269.124513][T17040] dump_stack+0x15/0x20 [ 269.128698][T17040] dump_header+0x83/0x2d0 [ 269.133014][T17040] oom_kill_process+0x33e/0x4c0 [ 269.137920][T17040] out_of_memory+0x9af/0xbe0 [ 269.142505][T17040] mem_cgroup_out_of_memory+0x13e/0x190 [ 269.148060][T17040] try_charge_memcg+0x745/0xcd0 [ 269.152902][T17040] ? _raw_spin_unlock+0x26/0x50 [ 269.158156][T17040] ? radix_tree_lookup+0xf9/0x150 [ 269.163167][T17040] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 269.169220][T17040] __read_swap_cache_async+0x2b9/0x520 [ 269.174689][T17040] swap_cluster_readahead+0x380/0x3f0 [ 269.180063][T17040] swapin_readahead+0xe2/0x7a0 [ 269.184892][T17040] ? __filemap_get_folio+0x420/0x5b0 [ 269.190171][T17040] ? swap_cache_get_folio+0x6e/0x210 [ 269.195516][T17040] do_swap_page+0x3bc/0x1840 [ 269.200092][T17040] ? __rcu_read_lock+0x36/0x50 [ 269.204971][T17040] handle_mm_fault+0x809/0x2a80 [ 269.209904][T17040] exc_page_fault+0x296/0x650 [ 269.214587][T17040] asm_exc_page_fault+0x26/0x30 [ 269.219510][T17040] RIP: 0010:__get_user_8+0x11/0x20 [ 269.224611][T17040] Code: ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 c2 48 c1 fa 3f 48 09 d0 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 [ 269.244211][T17040] RSP: 0018:ffffc90001687e58 EFLAGS: 00050202 [ 269.250281][T17040] RAX: 000055558ad70da8 RBX: ffffc90001687e60 RCX: ffffffff814b1b04 [ 269.258246][T17040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888143b21a70 [ 269.266269][T17040] RBP: ffffc90001687f20 R08: 0001888143b21a77 R09: 0000000000000000 [ 269.274259][T17040] R10: 0001ffffffffffff R11: 0001888143b21738 R12: ffff888143b21080 [ 269.282212][T17040] R13: ffff888143b21a70 R14: ffffc90001687f58 R15: ffffc90001687fd8 [ 269.290189][T17040] ? __rseq_handle_notify_resume+0xb4/0xc00 [ 269.296159][T17040] __rseq_handle_notify_resume+0xc8/0xc00 [ 269.301928][T17040] ? blkcg_maybe_throttle_current+0xa2/0x7e0 [ 269.307926][T17040] ? mem_cgroup_handle_over_high+0x2d/0x1d0 [ 269.313931][T17040] irqentry_exit_to_user_mode+0xcb/0x130 [ 269.319549][T17040] irqentry_exit+0x12/0x50 [ 269.323961][T17040] asm_exc_page_fault+0x26/0x30 [ 269.328812][T17040] RIP: 0033:0x7f370779dd88 [ 269.333211][T17040] Code: 48 89 d0 48 8d 52 08 49 39 d4 75 e6 49 29 dc 49 c1 fc 03 0f 1f 80 00 00 00 00 44 89 e0 4c 8d 34 c3 45 85 e4 74 1a 0f 1f 40 00 <48> 8b 7d 28 48 83 c3 08 48 03 7b f8 e8 27 22 ff ff 49 39 de 75 ea [ 269.352808][T17040] RSP: 002b:00007ffe641abfb0 EFLAGS: 00010202 [ 269.358965][T17040] RAX: 000000000000076b RBX: 00007f3707164008 RCX: ffffffff84fbd58f [ 269.366986][T17040] RDX: 00007f3707364000 RSI: 00007f3707363fe8 RDI: 00007f3707164010 [ 269.374983][T17040] RBP: 00007f3707919018 R08: 00007f3707164070 R09: 000000008114f7d4 [ 269.382967][T17040] R10: 00007f37078ef0b8 R11: 000000008114f7d4 R12: 000000000000076b [ 269.390974][T17040] R13: 0000001b2e34b10c R14: 00007f3707167b60 R15: 00007f3707919018 [ 269.398991][T17040] ? schedule_timeout+0x15f/0x2c0 [ 269.404036][T17040] [ 269.407784][T17040] memory: usage 307200kB, limit 307200kB, failcnt 7230 [ 269.415084][T17040] memory+swap: usage 307588kB, limit 9007199254740988kB, failcnt 0 [ 269.423008][T17040] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 269.430326][T17040] Memory cgroup stats for /syz0: [ 269.430454][T17040] cache 16384 [ 269.438677][T17040] rss 0 [ 269.441457][T17040] shmem 0 [ 269.444399][T17040] mapped_file 0 [ 269.447870][T17040] dirty 0 [ 269.450793][T17040] writeback 0 [ 269.454058][T17040] workingset_refault_anon 2019 [ 269.458834][T17040] workingset_refault_file 11917 [ 269.463682][T17040] swap 397312 [ 269.466957][T17040] swapcached 0 [ 269.470314][T17040] pgpgin 376660 [ 269.473774][T17040] pgpgout 376656 [ 269.477326][T17040] pgfault 409823 [ 269.480860][T17040] pgmajfault 823 [ 269.484377][T17040] inactive_anon 0 [ 269.488057][T17040] active_anon 0 [ 269.491572][T17040] inactive_file 4096 [ 269.495509][T17040] active_file 12288 [ 269.499315][T17040] unevictable 0 [ 269.502831][T17040] hierarchical_memory_limit 314572800 [ 269.508189][T17040] hierarchical_memsw_limit 9223372036854771712 [ 269.514340][T17040] total_cache 16384 [ 269.518134][T17040] total_rss 0 [ 269.521391][T17040] total_shmem 0 [ 269.524838][T17040] total_mapped_file 0 [ 269.528876][T17040] total_dirty 0 [ 269.532309][T17040] total_writeback 0 [ 269.536108][T17040] total_workingset_refault_anon 2019 [ 269.541365][T17040] total_workingset_refault_file 11917 [ 269.546752][T17040] total_swap 397312 [ 269.550557][T17040] total_swapcached 0 [ 269.554422][T17040] total_pgpgin 376660 [ 269.558431][T17040] total_pgpgout 376656 [ 269.562476][T17040] total_pgfault 409823 [ 269.566664][T17040] total_pgmajfault 823 [ 269.570761][T17040] total_inactive_anon 0 [ 269.574965][T17040] total_active_anon 0 [ 269.578921][T17040] total_inactive_file 4096 [ 269.583361][T17040] total_active_file 12288 [ 269.587720][T17040] total_unevictable 0 [ 269.591680][T17040] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=17040,uid=0 [ 269.607009][T17040] Memory cgroup out of memory: Killed process 17040 (syz-executor.0) total-vm:48752kB, anon-rss:420kB, file-rss:9032kB, shmem-rss:128kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 269.941227][T16440] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.067531][T17099] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.101584][T17103] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.112885][T17103] loop1: detected capacity change from 0 to 128 [ 270.200320][T17107] sctp: [Deprecated]: syz-executor.0 (pid 17107) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.200320][T17107] Use struct sctp_sack_info instead [ 270.219811][T17109] loop1: detected capacity change from 0 to 512 [ 270.227914][T17109] EXT4-fs: dax option not supported [ 270.986050][T17120] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.993603][T17120] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.000682][T17120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.063392][T17126] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 271.109330][ T3160] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 271.116837][ T3160] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 271.124968][ T3160] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz0] on syz1 [ 271.171344][T17132] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 271.245072][ T3160] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 271.252537][ T3160] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 271.263202][ T3160] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz0] on syz1 [ 271.564887][ T5865] ================================================================== [ 271.572982][ T5865] BUG: KCSAN: data-race in __wb_writeout_add / writeout_period [ 271.580533][ T5865] [ 271.582847][ T5865] write to 0xffffffff8841f118 of 8 bytes by interrupt on cpu 0: [ 271.590642][ T5865] writeout_period+0xa6/0xe0 [ 271.595249][ T5865] call_timer_fn+0x3a/0x300 [ 271.599752][ T5865] __run_timer_base+0x417/0x640 [ 271.604607][ T5865] run_timer_softirq+0x45/0x70 [ 271.609370][ T5865] handle_softirqs+0xc3/0x280 [ 271.614054][ T5865] irq_exit_rcu+0x3e/0x90 [ 271.618388][ T5865] sysvec_apic_timer_interrupt+0x73/0x80 [ 271.624025][ T5865] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 271.630020][ T5865] kcsan_setup_watchpoint+0x404/0x410 [ 271.635397][ T5865] __d_lookup_rcu+0x2a/0x290 [ 271.639976][ T5865] lookup_fast+0x8e/0x2a0 [ 271.644308][ T5865] link_path_walk+0x403/0x810 [ 271.648985][ T5865] __filename_parentat+0x13c/0x3c0 [ 271.654096][ T5865] do_unlinkat+0x9b/0x4c0 [ 271.658433][ T5865] __x64_sys_unlink+0x30/0x40 [ 271.663110][ T5865] x64_sys_call+0x28a3/0x2d70 [ 271.667797][ T5865] do_syscall_64+0xc9/0x1c0 [ 271.672315][ T5865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.678220][ T5865] [ 271.680543][ T5865] read to 0xffffffff8841f118 of 8 bytes by task 5865 on cpu 1: [ 271.688087][ T5865] __wb_writeout_add+0x83/0x1d0 [ 271.692948][ T5865] __folio_end_writeback+0x215/0x4a0 [ 271.698249][ T5865] folio_end_writeback+0x74/0x1f0 [ 271.703275][ T5865] ext4_finish_bio+0x476/0x8e0 [ 271.708131][ T5865] ext4_release_io_end+0x8c/0x1f0 [ 271.713158][ T5865] ext4_end_io_rsv_work+0x2d3/0x370 [ 271.718364][ T5865] process_scheduled_works+0x483/0x9a0 [ 271.723828][ T5865] worker_thread+0x526/0x730 [ 271.728426][ T5865] kthread+0x1d1/0x210 [ 271.732499][ T5865] ret_from_fork+0x4b/0x60 [ 271.736917][ T5865] ret_from_fork_asm+0x1a/0x30 [ 271.741676][ T5865] [ 271.743985][ T5865] value changed: 0x00000000fffff4b4 -> 0x00000000fffff5e0 [ 271.751080][ T5865] [ 271.753397][ T5865] Reported by Kernel Concurrency Sanitizer on: 2024/06/18 19:51:50 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 271.759548][ T5865] CPU: 1 PID: 5865 Comm: kworker/u8:9 Not tainted 6.10.0-rc4-syzkaller-00035-g3d54351c64e8 #0 [ 271.769801][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 271.779855][ T5865] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work [ 271.786626][ T5865] ==================================================================