last executing test programs: 7.782704255s ago: executing program 4 (id=9708): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020003000000000000000000010000008000000060ef8af1bcad8bca83ffeea1be75f0aeff67d364adf3b6360cf3fab7f436737da3c6bfe9e70b94ef83f546cc070e1c4bb8b8b54d0562f562b264642ce20000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB="65a7057cf2a2a9d09ad548347a026b4d97ae93eceeb8655154d952c608a36a90eb4df33ce4badb96707adb1b46517f3f38bf3a3f77c9e0a1fa142e4a9260844094225dc9edb5d7231b71e9b1e95bdda7f5ccbce08f43ed6c93501e05433cc9e9ea081947eef907ae3e9e21f5508fff2e45f9561ae31fd216a380974032b620e584f6a9ba14ac59a9fc1ec24c19c27061ee40887aebba6492a60755d01c9b042b5bdd280742d1c274a635", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000600)=""/235, 0xeb}, {&(0x7f0000000540)=""/167, 0xa7}], 0x3}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) perf_event_open(0x0, 0x0, 0x2, r5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 5.929030676s ago: executing program 3 (id=9730): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000001180), 0xfffffffffffffffe, 0x0) 5.907488797s ago: executing program 3 (id=9732): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='svcrdma_post_recv\x00', r0, 0x0, 0x1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_cancel(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x2200, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x3, 0x8000, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x4b68, 0x0) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 4.902548262s ago: executing program 3 (id=9743): syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.677411471s ago: executing program 4 (id=9710): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsmount(r3, 0x0, 0x0) 4.37251251s ago: executing program 4 (id=9747): timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 4.207875929s ago: executing program 3 (id=9748): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) 4.180064519s ago: executing program 3 (id=9749): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x4, 'H0I', "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"}}, 0x110) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r4, 0x18, 0x2, 0x1a5) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r6, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, r5, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r5}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r4, 0x0, 0x0, 0xffffffffffffffff}]) r7 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}}}, 0x24}}, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 4.028929928s ago: executing program 2 (id=9753): openat$tun(0xffffffffffffff9c, 0x0, 0xc0241, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x2e32, &(0x7f0000000180)={0x0, 0x0, 0x2}) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='numa_maps\x00') pread64(r0, &(0x7f0000002180)=""/4105, 0x1009, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, 0x0, 0x0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x800000000000000}, 0x18) shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.778279047s ago: executing program 3 (id=9755): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000080000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000340)=@gettaction={0xa8, 0x32, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x64, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9f78}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000020c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0xffffffff, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x0, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x407b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xf, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x807b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x1ff}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x3, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0xfff, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0xffffffff, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x3, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x4000006, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x5}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x9, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0x8, 0x101, 0xfffffffd, 0xc88}], [{}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x5}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socket$packet(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000010100)={&(0x7f00000100c0)='kmem_cache_free\x00', r7}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) listen(r2, 0x3) r8 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) 3.706376226s ago: executing program 2 (id=9757): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r1, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x4bd, 0x8) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 3.435637635s ago: executing program 4 (id=9761): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000037e735ad08e385252f10b92159bacae4c209258817d2ed1f0000000000000000000000000e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = syz_usb_connect$printer(0x2, 0x2d, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(r1) ioctl$EVIOCGBITSW(r0, 0x40095505, 0x0) r2 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mknodat(r2, &(0x7f0000000000)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x400) 2.744085052s ago: executing program 1 (id=9771): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8}, @GTPA_I_TEI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) lseek(r1, 0x0, 0x1) r4 = creat(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x1204c, 0x81, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) close(r4) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) semop(0x0, &(0x7f0000000380)=[{0x3, 0xffff}], 0x1) 2.453053661s ago: executing program 1 (id=9772): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0xffac, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x0) 2.42270703s ago: executing program 1 (id=9773): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.699925687s ago: executing program 0 (id=9776): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) syz_clone3(0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xa0480, 0x0) 1.622703487s ago: executing program 0 (id=9777): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r3}, 0x18) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.560992006s ago: executing program 0 (id=9778): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.346015936s ago: executing program 1 (id=9779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000000), 0x1, 0x457, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x0) finit_module(r6, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 692.361713ms ago: executing program 0 (id=9780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000004000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') 651.818592ms ago: executing program 0 (id=9781): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) syz_emit_ethernet(0x9e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0x600, 0x1ff0000aa}, @private1}}}}}}, 0x0) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x4622, 0x10100, 0x3}, &(0x7f0000000100), &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000180)=0x65, 0x4) r4 = fsmount(r2, 0x0, 0xf3) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') openat(r4, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6138, 0xffffffffffffffff, 0x0) 596.706952ms ago: executing program 0 (id=9782): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, 0x0, 0x24008000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x3050094, &(0x7f0000000340)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@abort}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x63b}}, {@errors_continue}, {@grpjquota}, {}]}, 0x48, 0x7ce, &(0x7f0000000500)="$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") syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x9, 0xffffffffffffffff}, 0x0, 0x0, 0xffff, 0x5, 0x7, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat(0xffffffffffffffff, 0x0, 0x50880, 0x0) lseek(r3, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0x503, 0x0, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) 412.987771ms ago: executing program 2 (id=9783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000001380)="17", &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f00000001c0), 0x0}, 0x20) 387.606801ms ago: executing program 2 (id=9784): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f00000006c0)={0x2, 0x4, 0x7fffffffffffffff, 0x80000000}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x6020400) r2 = epoll_create1(0x0) epoll_pwait(r2, &(0x7f0000000640)=[{}], 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x2c, 0x11, 0x1, 0x3, 0x25cedbf8, {0x0, 0x0, 0x0, r4, {0x8, 0xc}, {0x10}, {0x0, 0xfff2}}, [{0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c4}, 0x2040080) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000e92064980f00bf5d2a58dbe23e227b64d0ab4e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = syz_io_uring_setup(0x4175, &(0x7f0000000780)={0x0, 0x807e08, 0x20, 0x0, 0xffeffffc}, &(0x7f0000000500)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000a80)=[{0x0}, {0x0}], 0x2, 0xe}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000080)={0x0, @aes256, 0x0, @desc2}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) accept$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000005c0)=0x14) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000600)=@req={0xa, 0x9, 0x8001, 0x110}, 0x1f) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x2, 0x0}, 0x8) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r13}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r11}, &(0x7f0000000200), &(0x7f0000000340)}, 0x20) io_uring_enter(r8, 0x567, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00801900"/14], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) 287.478531ms ago: executing program 1 (id=9785): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x77f, &(0x7f00000007c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 137.06214ms ago: executing program 4 (id=9786): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) syz_clone3(0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0xa0480, 0x0) 136.60601ms ago: executing program 2 (id=9787): syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0xa, {"a2e3ad214fc752f91b2809094bf70e0dd038e7ff7fc6e5539b3266078b089b3b083867090890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b34390d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0xfffffffffffffdcd}}, 0x1006) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000214e00224e0000", 0x58}], 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) unshare(0x22020600) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)={[{0x2d, 'devices'}, {0x2d, 'cpuacct'}, {0x2d, 'cpu'}, {0x2b, 'hugetlb'}, {0x2d, 'pids'}, {0x2d, 'cpuset'}, {0x2d, 'devices'}, {0x2d, 'freezer'}, {0x2d, 'devices'}]}, 0x49) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x3, 0x2}]}}}}}}}}, 0x0) 109.40032ms ago: executing program 4 (id=9788): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x8, &(0x7f000010e000/0x3000)=nil, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 52.56609ms ago: executing program 1 (id=9789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x4, 'H0I', "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"}}, 0x110) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r4, 0x18, 0x2, 0x1a5) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r6, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, r5, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r5}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r4, 0x0, 0x0, 0xffffffffffffffff}]) r7 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}}}, 0x24}}, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 0s ago: executing program 2 (id=9790): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0xa, {"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", 0xfffffffffffffdcd}}, 0x1006) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000214e00224e0000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) unshare(0x22020600) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): sysadm_r:sysadm_t pid=27195 comm="syz.0.8952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f0456ca5d29 code=0x7ffc0000 [ 532.376247][ T29] audit: type=1326 audit(1734788216.052:96578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27195 comm="syz.0.8952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456ca5d29 code=0x7ffc0000 [ 532.399919][ T29] audit: type=1326 audit(1734788216.052:96579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27195 comm="syz.0.8952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456ca5d29 code=0x7ffc0000 [ 532.495692][T27211] loop4: detected capacity change from 0 to 2048 [ 532.518598][T27211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.698723][T27224] loop1: detected capacity change from 0 to 2048 [ 532.738143][T22116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.768814][T27224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.804060][T27224] __nla_validate_parse: 35 callbacks suppressed [ 532.804077][T27224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8961'. [ 532.832640][T27228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8963'. [ 532.858964][T27233] loop3: detected capacity change from 0 to 2048 [ 532.874581][T27235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8964'. [ 532.919063][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.940936][T27239] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8966'. [ 532.949931][T27239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8966'. [ 532.958957][T27239] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8966'. [ 532.967541][ T29] audit: type=1326 audit(1734788216.650:96580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27244 comm="syz.4.8969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 532.979418][T27239] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8966'. [ 533.019604][ T29] audit: type=1326 audit(1734788216.678:96581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27244 comm="syz.4.8969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 533.043458][ T29] audit: type=1326 audit(1734788216.678:96582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27244 comm="syz.4.8969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 533.067314][ T29] audit: type=1326 audit(1734788216.678:96583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27244 comm="syz.4.8969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 533.091122][ T29] audit: type=1326 audit(1734788216.678:96584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27244 comm="syz.4.8969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 533.114861][ T29] audit: type=1326 audit(1734788216.678:96585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27244 comm="syz.4.8969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 533.141303][T27252] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8968'. [ 533.141817][T27218] loop3: detected capacity change from 0 to 512 [ 533.167568][T27249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8970'. [ 533.175511][T27218] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 533.196389][T27218] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 533.211634][T27218] EXT4-fs (loop3): 1 truncate cleaned up [ 533.367056][T27266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8975'. [ 533.385261][T27266] bond8: entered promiscuous mode [ 533.390427][T27266] bond8: entered allmulticast mode [ 533.394008][T27269] loop3: detected capacity change from 0 to 2048 [ 533.396321][T27266] 8021q: adding VLAN 0 to HW filter on device bond8 [ 533.489337][T27273] erspan0 speed is unknown, defaulting to 1000 [ 533.556693][T27273] lo speed is unknown, defaulting to 1000 [ 533.937988][T27278] loop1: detected capacity change from 0 to 2048 [ 534.105566][T27290] loop4: detected capacity change from 0 to 2048 [ 534.247190][T27280] loop4: detected capacity change from 0 to 512 [ 534.254927][T27280] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 534.273516][T27280] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 534.289213][T27280] EXT4-fs (loop4): 1 truncate cleaned up [ 534.710089][T27295] bond9: entered promiscuous mode [ 534.713757][T27306] loop4: detected capacity change from 0 to 2048 [ 534.715271][T27295] bond9: entered allmulticast mode [ 534.728184][T27295] 8021q: adding VLAN 0 to HW filter on device bond9 [ 534.876694][T27292] syz.1.8982 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 534.890948][T27292] CPU: 0 UID: 0 PID: 27292 Comm: syz.1.8982 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 534.901748][T27292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 534.911958][T27292] Call Trace: [ 534.915266][T27292] [ 534.918217][T27292] dump_stack_lvl+0xf2/0x150 [ 534.922985][T27292] dump_stack+0x15/0x1a [ 534.927185][T27292] dump_header+0x83/0x2d0 [ 534.931664][T27292] oom_kill_process+0x341/0x4c0 [ 534.936594][T27292] out_of_memory+0x9af/0xbe0 [ 534.941218][T27292] ? css_next_descendant_pre+0x11c/0x140 [ 534.946965][T27292] mem_cgroup_out_of_memory+0x13e/0x190 [ 534.952573][T27292] try_charge_memcg+0x508/0x7f0 [ 534.957497][T27292] obj_cgroup_charge_pages+0xbd/0x1a0 [ 534.962982][T27292] __memcg_kmem_charge_page+0x9d/0x170 [ 534.968503][T27292] __alloc_pages_noprof+0x1bc/0x340 [ 534.973747][T27292] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 534.979160][T27292] alloc_pages_noprof+0xe1/0x100 [ 534.984178][T27292] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 534.990062][T27292] __kvmalloc_node_noprof+0x121/0x170 [ 534.995573][T27292] ? ip_set_alloc+0x1f/0x30 [ 535.000126][T27292] ip_set_alloc+0x1f/0x30 [ 535.004557][T27292] hash_netiface_create+0x273/0x730 [ 535.009801][T27292] ? __nla_parse+0x40/0x60 [ 535.014289][T27292] ? __pfx_hash_netiface_create+0x10/0x10 [ 535.020070][T27292] ip_set_create+0x359/0x8a0 [ 535.024742][T27292] ? memchr+0x1/0x50 [ 535.028661][T27292] ? __nla_parse+0x40/0x60 [ 535.033499][T27292] nfnetlink_rcv_msg+0x4a9/0x570 [ 535.038606][T27292] netlink_rcv_skb+0x12c/0x230 [ 535.043713][T27292] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 535.049255][T27292] nfnetlink_rcv+0x16c/0x15d0 [ 535.053974][T27292] ? kmem_cache_free+0xdc/0x2d0 [ 535.058883][T27292] ? nlmon_xmit+0x51/0x60 [ 535.063251][T27292] ? __kfree_skb+0x102/0x150 [ 535.067887][T27292] ? consume_skb+0x49/0x160 [ 535.072536][T27292] ? nlmon_xmit+0x51/0x60 [ 535.076930][T27292] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 535.082232][T27292] ? __dev_queue_xmit+0xb6e/0x2090 [ 535.087366][T27292] ? ref_tracker_free+0x3a5/0x410 [ 535.092488][T27292] ? __dev_queue_xmit+0x186/0x2090 [ 535.097658][T27292] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 535.103160][T27292] netlink_unicast+0x599/0x670 [ 535.107939][T27292] netlink_sendmsg+0x5cc/0x6e0 [ 535.112801][T27292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 535.118201][T27292] __sock_sendmsg+0x140/0x180 [ 535.122938][T27292] ____sys_sendmsg+0x312/0x410 [ 535.127796][T27292] __sys_sendmsg+0x19d/0x230 [ 535.132430][T27292] __x64_sys_sendmsg+0x46/0x50 [ 535.137240][T27292] x64_sys_call+0x2734/0x2dc0 [ 535.142030][T27292] do_syscall_64+0xc9/0x1c0 [ 535.146543][T27292] ? clear_bhb_loop+0x55/0xb0 [ 535.151231][T27292] ? clear_bhb_loop+0x55/0xb0 [ 535.155918][T27292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.161961][T27292] RIP: 0033:0x7f6c0eb35d29 [ 535.166453][T27292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.186081][T27292] RSP: 002b:00007f6c0d1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.194610][T27292] RAX: ffffffffffffffda RBX: 00007f6c0ed25fa0 RCX: 00007f6c0eb35d29 [ 535.202622][T27292] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000a [ 535.210723][T27292] RBP: 00007f6c0ebb1aa8 R08: 0000000000000000 R09: 0000000000000000 [ 535.218703][T27292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.226779][T27292] R13: 0000000000000000 R14: 00007f6c0ed25fa0 R15: 00007ffcfda99748 [ 535.234805][T27292] [ 535.238071][T27292] memory: usage 307200kB, limit 307200kB, failcnt 2159 [ 535.245134][T27292] memory+swap: usage 307580kB, limit 9007199254740988kB, failcnt 0 [ 535.253156][T27292] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 535.260596][T27292] Memory cgroup stats for /syz1: [ 535.262346][T27292] cache 0 [ 535.265285][T27314] loop4: detected capacity change from 0 to 764 [ 535.267309][T27292] rss 0 [ 535.267320][T27292] shmem 0 [ 535.282544][T27292] mapped_file 0 [ 535.286011][T27292] dirty 0 [ 535.288969][T27292] writeback 0 [ 535.292405][T27292] workingset_refault_anon 347 [ 535.292549][T27314] iso9660: Unknown parameter 'ÿÿ01777777777777777777777ÿÿ000000000000000000000001844674407370955161501777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 535.297079][T27292] workingset_refault_file 1333 [ 535.297091][T27292] swap 389120 [ 535.297100][T27292] swapcached 0 [ 535.297109][T27292] pgpgin 468734 [ 535.326326][T27292] pgpgout 468734 [ 535.329937][T27292] pgfault 546686 [ 535.333546][T27292] pgmajfault 184 [ 535.337194][T27292] inactive_anon 0 [ 535.340992][T27292] active_anon 0 [ 535.344648][T27292] inactive_file 0 [ 535.348333][T27292] active_file 0 [ 535.351836][T27292] unevictable 0 [ 535.355304][T27292] hierarchical_memory_limit 314572800 [ 535.360735][T27292] hierarchical_memsw_limit 9223372036854771712 [ 535.367105][T27292] total_cache 0 [ 535.370577][T27292] total_rss 0 [ 535.373888][T27292] total_shmem 0 [ 535.377362][T27292] total_mapped_file 0 [ 535.381402][T27292] total_dirty 0 [ 535.384874][T27292] total_writeback 0 [ 535.388774][T27292] total_workingset_refault_anon 347 [ 535.394066][T27292] total_workingset_refault_file 1333 [ 535.399485][T27292] total_swap 389120 [ 535.403389][T27292] total_swapcached 0 [ 535.407293][T27292] total_pgpgin 468734 [ 535.411311][T27292] total_pgpgout 468734 [ 535.415392][T27292] total_pgfault 546686 [ 535.419527][T27292] total_pgmajfault 184 [ 535.423693][T27292] total_inactive_anon 0 [ 535.427915][T27292] total_active_anon 0 [ 535.431940][T27292] total_inactive_file 0 [ 535.436164][T27292] total_active_file 0 [ 535.440191][T27292] total_unevictable 0 [ 535.444223][T27292] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8982,pid=27291,uid=0 [ 535.459080][T27292] Memory cgroup out of memory: Killed process 27291 (syz.1.8982) total-vm:95432kB, anon-rss:788kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 535.991095][T27331] loop1: detected capacity change from 0 to 2048 [ 536.021384][T27341] erspan0 speed is unknown, defaulting to 1000 [ 536.076424][T27341] lo speed is unknown, defaulting to 1000 [ 536.264112][T27331] loop1: detected capacity change from 0 to 512 [ 536.282889][T27331] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 536.339001][T27331] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 536.356925][T27331] EXT4-fs (loop1): 1 truncate cleaned up [ 536.757759][T27359] bond10: entered promiscuous mode [ 536.763040][T27359] bond10: entered allmulticast mode [ 536.769532][T27359] 8021q: adding VLAN 0 to HW filter on device bond10 [ 536.785520][T27359] bond10 (unregistering): Released all slaves [ 537.182668][T27377] bond4: entered promiscuous mode [ 537.187831][T27377] bond4: entered allmulticast mode [ 537.193481][T27377] 8021q: adding VLAN 0 to HW filter on device bond4 [ 537.205027][T27377] bond4 (unregistering): Released all slaves [ 537.404302][T27384] bond4: entered promiscuous mode [ 537.409461][T27384] bond4: entered allmulticast mode [ 537.415015][T27384] 8021q: adding VLAN 0 to HW filter on device bond4 [ 537.433949][T27384] bond4 (unregistering): Released all slaves [ 537.686839][ T29] kauditd_printk_skb: 966 callbacks suppressed [ 537.686886][ T29] audit: type=1326 audit(1734788221.037:97552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27371 comm="syz.3.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e8291cce7 code=0x7ffc0000 [ 537.716664][ T29] audit: type=1326 audit(1734788221.037:97553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27371 comm="syz.3.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e828c1f29 code=0x7ffc0000 [ 537.740653][ T29] audit: type=1326 audit(1734788221.037:97554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27371 comm="syz.3.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f7e82925d29 code=0x7ffc0000 [ 537.764638][ T29] audit: type=1326 audit(1734788221.037:97555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27371 comm="syz.3.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e8291cce7 code=0x7ffc0000 [ 537.788253][ T29] audit: type=1326 audit(1734788221.037:97556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27371 comm="syz.3.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e828c1f29 code=0x7ffc0000 [ 537.811879][ T29] audit: type=1326 audit(1734788221.037:97557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27371 comm="syz.3.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f7e82925d29 code=0x7ffc0000 [ 537.835417][ T29] audit: type=1326 audit(1734788221.047:97558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27371 comm="syz.3.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e8291cce7 code=0x7ffc0000 [ 537.858933][ T29] audit: type=1326 audit(1734788221.047:97559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27371 comm="syz.3.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7e828c1f29 code=0x7ffc0000 [ 537.882535][ T29] audit: type=1326 audit(1734788221.047:97560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27371 comm="syz.3.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f7e82925d29 code=0x7ffc0000 [ 537.906151][ T29] audit: type=1326 audit(1734788221.056:97561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27371 comm="syz.3.9010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e8291cce7 code=0x7ffc0000 [ 538.166694][T27396] erspan0 speed is unknown, defaulting to 1000 [ 538.223615][T27396] lo speed is unknown, defaulting to 1000 [ 538.345631][T27398] __nla_validate_parse: 23 callbacks suppressed [ 538.345647][T27398] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9018'. [ 538.658926][T27407] loop3: detected capacity change from 0 to 2048 [ 538.742222][T27409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9023'. [ 538.754519][T27407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9022'. [ 538.778377][T27415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9024'. [ 538.829637][T27419] loop1: detected capacity change from 0 to 2048 [ 538.914384][T27419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9026'. [ 538.920398][T27425] loop4: detected capacity change from 0 to 2048 [ 539.076598][T27425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9029'. [ 539.230272][T27442] bond4: entered promiscuous mode [ 539.235360][T27442] bond4: entered allmulticast mode [ 539.256188][T27442] 8021q: adding VLAN 0 to HW filter on device bond4 [ 539.336735][T27445] loop4: detected capacity change from 0 to 2048 [ 539.481776][T27459] erspan0 speed is unknown, defaulting to 1000 [ 539.515981][T27459] lo speed is unknown, defaulting to 1000 [ 540.683684][T27445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9035'. [ 540.777850][T27461] erspan0 speed is unknown, defaulting to 1000 [ 540.818176][T27461] lo speed is unknown, defaulting to 1000 [ 541.444398][T27470] loop1: detected capacity change from 0 to 2048 [ 541.524159][T27472] bond4: entered promiscuous mode [ 541.529355][T27472] bond4: entered allmulticast mode [ 541.534855][T27472] 8021q: adding VLAN 0 to HW filter on device bond4 [ 541.557544][T27472] bond4 (unregistering): Released all slaves [ 541.572791][T27470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9044'. [ 541.600454][T27478] bond8: entered promiscuous mode [ 541.605574][T27478] bond8: entered allmulticast mode [ 541.611202][T27478] 8021q: adding VLAN 0 to HW filter on device bond8 [ 541.630412][T27478] bond8 (unregistering): Released all slaves [ 541.683859][T27483] 9pnet_fd: Insufficient options for proto=fd [ 541.759652][T27484] erspan0 speed is unknown, defaulting to 1000 [ 541.812775][T27484] lo speed is unknown, defaulting to 1000 [ 542.222434][T27493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.231713][T27493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.241313][T27493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.242114][T27495] bond4: entered promiscuous mode [ 542.254893][T27495] bond4: entered allmulticast mode [ 542.259165][T27493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.260308][T27495] 8021q: adding VLAN 0 to HW filter on device bond4 [ 542.369276][T27498] erspan0 speed is unknown, defaulting to 1000 [ 542.430184][T27498] lo speed is unknown, defaulting to 1000 [ 542.888763][T27509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9058'. [ 543.007762][T27517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9060'. [ 543.068639][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 543.068654][ T29] audit: type=1326 audit(1734788226.032:97777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6c0eb2cce7 code=0x7ffc0000 [ 543.098734][ T29] audit: type=1326 audit(1734788226.032:97778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c0ead1f29 code=0x7ffc0000 [ 543.122292][ T29] audit: type=1326 audit(1734788226.032:97779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 543.145927][ T29] audit: type=1326 audit(1734788226.051:97780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6c0eb2cce7 code=0x7ffc0000 [ 543.169520][ T29] audit: type=1326 audit(1734788226.051:97781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c0ead1f29 code=0x7ffc0000 [ 543.193435][ T29] audit: type=1326 audit(1734788226.051:97782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 543.216945][ T29] audit: type=1326 audit(1734788226.051:97783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6c0eb2cce7 code=0x7ffc0000 [ 543.240476][ T29] audit: type=1326 audit(1734788226.051:97784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c0ead1f29 code=0x7ffc0000 [ 543.264093][ T29] audit: type=1326 audit(1734788226.051:97785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 543.287650][ T29] audit: type=1326 audit(1734788226.051:97786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27502 comm="syz.1.9054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6c0eb2cce7 code=0x7ffc0000 [ 543.326104][T27519] erspan0 speed is unknown, defaulting to 1000 [ 543.386647][T27519] lo speed is unknown, defaulting to 1000 [ 543.543306][T27526] bond4: entered promiscuous mode [ 543.548484][T27526] bond4: entered allmulticast mode [ 543.553848][T27526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 543.572397][T27526] bond4 (unregistering): Released all slaves [ 543.697004][T27532] bond10: entered promiscuous mode [ 543.702264][T27532] bond10: entered allmulticast mode [ 543.707794][T27532] 8021q: adding VLAN 0 to HW filter on device bond10 [ 543.745158][T27522] bond5: entered promiscuous mode [ 543.750408][T27522] bond5: entered allmulticast mode [ 543.756315][T27522] 8021q: adding VLAN 0 to HW filter on device bond5 [ 543.851707][T27547] __nla_validate_parse: 4 callbacks suppressed [ 543.851725][T27547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9071'. [ 543.854815][T27544] bond11: entered promiscuous mode [ 543.858019][T27547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9071'. [ 543.866957][T27544] bond11: entered allmulticast mode [ 543.867617][T27544] 8021q: adding VLAN 0 to HW filter on device bond11 [ 543.872426][T27547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9071'. [ 543.887540][T27547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9071'. [ 543.898539][T27549] loop1: detected capacity change from 0 to 2048 [ 543.928102][T27544] bond11 (unregistering): Released all slaves [ 543.968185][T27549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9072'. [ 544.345148][T27551] bond6: entered promiscuous mode [ 544.350324][T27551] bond6: entered allmulticast mode [ 544.355774][T27551] 8021q: adding VLAN 0 to HW filter on device bond6 [ 545.044160][T27580] erspan0 speed is unknown, defaulting to 1000 [ 545.097494][T27580] lo speed is unknown, defaulting to 1000 [ 545.460789][T27588] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9083'. [ 545.469894][T27588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9083'. [ 545.478857][T27588] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9083'. [ 545.494358][T27588] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9083'. [ 545.525808][T27587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9084'. [ 545.591778][T27592] loop3: detected capacity change from 0 to 2048 [ 545.617054][T27592] EXT4-fs mount: 24 callbacks suppressed [ 545.617069][T27592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.711966][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.398976][T27620] loop1: detected capacity change from 0 to 2048 [ 546.424592][T27620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.538069][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.745733][T27638] program syz.3.9104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 547.495269][T27658] loop4: detected capacity change from 0 to 2048 [ 547.828778][T27653] loop4: detected capacity change from 0 to 512 [ 547.838690][T27664] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 547.885395][T27653] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 547.922607][T27653] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 547.938311][T27653] EXT4-fs (loop4): 1 truncate cleaned up [ 547.957749][T27653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.998041][T27672] loop1: detected capacity change from 0 to 2048 [ 548.037444][T27672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.197125][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.256356][T22116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.403250][T27688] loop4: detected capacity change from 0 to 1024 [ 548.418454][T27688] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 548.439624][T27688] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 548.470394][T27688] EXT4-fs (loop4): mount failed [ 548.502217][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 548.502236][ T29] audit: type=1326 audit(1734788231.168:98262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27687 comm="syz.4.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11fbac4690 code=0x7ffc0000 [ 548.532165][ T29] audit: type=1326 audit(1734788231.168:98263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27687 comm="syz.4.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f11fbac592b code=0x7ffc0000 [ 548.555754][ T29] audit: type=1326 audit(1734788231.168:98264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27687 comm="syz.4.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f11fbac498a code=0x7ffc0000 [ 548.579258][ T29] audit: type=1326 audit(1734788231.177:98265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27687 comm="syz.4.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 548.603035][ T29] audit: type=1326 audit(1734788231.177:98266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27687 comm="syz.4.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 548.626817][ T29] audit: type=1326 audit(1734788231.252:98267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27687 comm="syz.4.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 548.650502][ T29] audit: type=1326 audit(1734788231.252:98268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27687 comm="syz.4.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 548.674484][ T29] audit: type=1326 audit(1734788231.252:98269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27687 comm="syz.4.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 548.698251][ T29] audit: type=1326 audit(1734788231.252:98270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27687 comm="syz.4.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 548.721920][ T29] audit: type=1326 audit(1734788231.252:98271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27687 comm="syz.4.9120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 548.965812][T27709] netlink: 'syz.0.9127': attribute type 11 has an invalid length. [ 548.986405][T27709] tipc: Enabling of bearer rejected, failed to enable media [ 549.244654][T27719] __nla_validate_parse: 17 callbacks suppressed [ 549.244670][T27719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9130'. [ 549.485163][T27707] syz.2.9126 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), order=0, oom_score_adj=1000 [ 549.499425][T27707] CPU: 1 UID: 0 PID: 27707 Comm: syz.2.9126 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 549.510252][T27707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 549.520385][T27707] Call Trace: [ 549.523668][T27707] [ 549.526600][T27707] dump_stack_lvl+0xf2/0x150 [ 549.531216][T27707] dump_stack+0x15/0x1a [ 549.535441][T27707] dump_header+0x83/0x2d0 [ 549.539782][T27707] oom_kill_process+0x341/0x4c0 [ 549.544648][T27707] out_of_memory+0x9af/0xbe0 [ 549.549544][T27707] ? css_next_descendant_pre+0x11c/0x140 [ 549.555205][T27707] mem_cgroup_out_of_memory+0x13e/0x190 [ 549.560770][T27707] try_charge_memcg+0x508/0x7f0 [ 549.565659][T27707] obj_cgroup_charge_pages+0xbd/0x1a0 [ 549.571065][T27707] __memcg_kmem_charge_page+0x9d/0x170 [ 549.576719][T27707] __alloc_pages_noprof+0x1bc/0x340 [ 549.582002][T27707] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 549.587444][T27707] alloc_pages_noprof+0xe1/0x100 [ 549.592471][T27707] __vmalloc_node_range_noprof+0x6eb/0xe80 [ 549.598385][T27707] __kvmalloc_node_noprof+0x121/0x170 [ 549.603861][T27707] ? ip_set_alloc+0x1f/0x30 [ 549.608457][T27707] ip_set_alloc+0x1f/0x30 [ 549.612851][T27707] hash_netiface_create+0x273/0x730 [ 549.618096][T27707] ? __nla_parse+0x40/0x60 [ 549.622531][T27707] ? __pfx_hash_netiface_create+0x10/0x10 [ 549.628346][T27707] ip_set_create+0x359/0x8a0 [ 549.632964][T27707] ? memchr+0x1/0x50 [ 549.636876][T27707] ? __nla_parse+0x40/0x60 [ 549.641364][T27707] nfnetlink_rcv_msg+0x4a9/0x570 [ 549.646382][T27707] netlink_rcv_skb+0x12c/0x230 [ 549.651179][T27707] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 549.656683][T27707] nfnetlink_rcv+0x16c/0x15d0 [ 549.661385][T27707] ? kmem_cache_free+0xdc/0x2d0 [ 549.666267][T27707] ? nlmon_xmit+0x51/0x60 [ 549.670632][T27707] ? __kfree_skb+0x102/0x150 [ 549.675241][T27707] ? consume_skb+0x49/0x160 [ 549.679752][T27707] ? nlmon_xmit+0x51/0x60 [ 549.684165][T27707] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 549.689466][T27707] ? __dev_queue_xmit+0xb6e/0x2090 [ 549.694609][T27707] ? ref_tracker_free+0x3a5/0x410 [ 549.699642][T27707] ? __dev_queue_xmit+0x186/0x2090 [ 549.704771][T27707] ? __netlink_deliver_tap+0x4c6/0x4f0 [ 549.710273][T27707] netlink_unicast+0x599/0x670 [ 549.715048][T27707] netlink_sendmsg+0x5cc/0x6e0 [ 549.719870][T27707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.725222][T27707] __sock_sendmsg+0x140/0x180 [ 549.730050][T27707] ____sys_sendmsg+0x312/0x410 [ 549.734828][T27707] __sys_sendmsg+0x19d/0x230 [ 549.739441][T27707] __x64_sys_sendmsg+0x46/0x50 [ 549.744241][T27707] x64_sys_call+0x2734/0x2dc0 [ 549.748938][T27707] do_syscall_64+0xc9/0x1c0 [ 549.753486][T27707] ? clear_bhb_loop+0x55/0xb0 [ 549.758197][T27707] ? clear_bhb_loop+0x55/0xb0 [ 549.763008][T27707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.769006][T27707] RIP: 0033:0x7f1fd1b35d29 [ 549.773525][T27707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.793183][T27707] RSP: 002b:00007f1fd01a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.801680][T27707] RAX: ffffffffffffffda RBX: 00007f1fd1d25fa0 RCX: 00007f1fd1b35d29 [ 549.809737][T27707] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000a [ 549.817767][T27707] RBP: 00007f1fd1bb1aa8 R08: 0000000000000000 R09: 0000000000000000 [ 549.825926][T27707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.833921][T27707] R13: 0000000000000000 R14: 00007f1fd1d25fa0 R15: 00007ffc6b332cc8 [ 549.841938][T27707] [ 549.845142][T27707] memory: usage 307200kB, limit 307200kB, failcnt 2827 [ 549.852099][T27707] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 549.860023][T27707] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 549.867349][T27707] Memory cgroup stats for /syz2: [ 549.868960][T27733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9136'. [ 549.869840][T27707] cache 0 [ 549.885949][T27707] rss 0 [ 549.888716][T27707] shmem 0 [ 549.891675][T27707] mapped_file 0 [ 549.895152][T27707] dirty 0 [ 549.898114][T27707] writeback 8192 [ 549.901669][T27707] workingset_refault_anon 188 [ 549.906505][T27707] workingset_refault_file 1560 [ 549.911278][T27707] swap 192512 [ 549.914596][T27707] swapcached 12288 [ 549.918427][T27707] pgpgin 575512 [ 549.921954][T27707] pgpgout 575509 [ 549.925526][T27707] pgfault 726040 [ 549.929116][T27707] pgmajfault 146 [ 549.932702][T27707] inactive_anon 12288 [ 549.936783][T27707] active_anon 0 [ 549.938970][T27735] loop3: detected capacity change from 0 to 1024 [ 549.940303][T27707] inactive_file 0 [ 549.950329][T27707] active_file 0 [ 549.953809][T27707] unevictable 0 [ 549.957283][T27707] hierarchical_memory_limit 314572800 [ 549.957620][T27735] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 549.962692][T27707] hierarchical_memsw_limit 9223372036854771712 [ 549.962707][T27707] total_cache 0 [ 549.962716][T27707] total_rss 0 [ 549.962724][T27707] total_shmem 0 [ 549.962732][T27707] total_mapped_file 0 [ 549.962741][T27707] total_dirty 0 [ 549.962804][T27707] total_writeback 8192 [ 549.962814][T27707] total_workingset_refault_anon 188 [ 549.962824][T27707] total_workingset_refault_file 1560 [ 549.962834][T27707] total_swap 192512 [ 549.962843][T27707] total_swapcached 12288 [ 549.962852][T27707] total_pgpgin 575512 [ 549.962861][T27707] total_pgpgout 575509 [ 549.962869][T27707] total_pgfault 726040 [ 549.962877][T27707] total_pgmajfault 146 [ 549.962939][T27707] total_inactive_anon 12288 [ 549.962949][T27707] total_active_anon 0 [ 549.962957][T27707] total_inactive_file 0 [ 549.962965][T27707] total_active_file 0 [ 549.962972][T27707] total_unevictable 0 [ 549.962982][T27707] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.9126,pid=27706,uid=0 [ 549.963064][T27707] Memory cgroup out of memory: Killed process 27706 (syz.2.9126) total-vm:95432kB, anon-rss:788kB, file-rss:22336kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 549.997373][T27735] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 550.138504][T27735] EXT4-fs (loop3): mount failed [ 550.281078][T27744] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9139'. [ 550.313445][T27742] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.9139'. [ 550.329231][T27748] loop3: detected capacity change from 0 to 512 [ 550.348986][T27748] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 550.379046][T27748] EXT4-fs error (device loop3): ext4_orphan_get:1389: inode #15: comm syz.3.9141: iget: bad extended attribute block 512 [ 550.409340][T27748] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.9141: couldn't read orphan inode 15 (err -117) [ 550.431006][T27748] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.597219][T27766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9144'. [ 550.692374][T27769] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 550.829405][T27743] bond8: entered promiscuous mode [ 550.834502][T27743] bond8: entered allmulticast mode [ 550.847760][T27743] 8021q: adding VLAN 0 to HW filter on device bond8 [ 551.039052][T27784] bond9: entered promiscuous mode [ 551.044278][T27784] bond9: entered allmulticast mode [ 551.049682][T27784] 8021q: adding VLAN 0 to HW filter on device bond9 [ 551.070036][T27784] bond9 (unregistering): Released all slaves [ 551.099652][T27787] loop1: detected capacity change from 0 to 2048 [ 551.116720][T27787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.137598][T27787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9152'. [ 551.202808][T27795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9155'. [ 551.243619][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.302637][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.386472][T27805] bond4: entered promiscuous mode [ 551.391571][T27805] bond4: entered allmulticast mode [ 551.397066][T27805] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.419415][T27805] bond4 (unregistering): Released all slaves [ 551.441213][T27809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9161'. [ 551.452801][T27810] loop3: detected capacity change from 0 to 2048 [ 551.474290][T27801] loop3: detected capacity change from 0 to 512 [ 551.482409][T27801] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 551.493746][T27801] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 551.516285][T27801] EXT4-fs (loop3): 1 truncate cleaned up [ 551.522397][T27801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.639552][T27820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9165'. [ 551.661015][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.679625][T27822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9167'. [ 551.700223][T27824] loop4: detected capacity change from 0 to 512 [ 551.715019][T27824] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 551.750817][T27828] SELinux: syz.3.9169 (27828) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 551.772066][T27824] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.9168: iget: bad extended attribute block 512 [ 551.786383][T27824] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.9168: couldn't read orphan inode 15 (err -117) [ 551.803303][T27824] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.061311][T27851] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 552.613263][T27877] erspan0 speed is unknown, defaulting to 1000 [ 552.652332][T27877] lo speed is unknown, defaulting to 1000 [ 552.683423][T22116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.692876][T27898] netlink: 'syz.4.9198': attribute type 11 has an invalid length. [ 553.708956][T27898] tipc: Enabling of bearer rejected, failed to enable media [ 553.860808][ T29] kauditd_printk_skb: 1629 callbacks suppressed [ 553.860838][ T29] audit: type=1326 audit(1734788236.181:99901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6c0eb2cce7 code=0x7ffc0000 [ 553.891353][ T29] audit: type=1326 audit(1734788236.219:99902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c0ead1f29 code=0x7ffc0000 [ 553.914977][ T29] audit: type=1326 audit(1734788236.219:99903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6c0eb2cce7 code=0x7ffc0000 [ 553.938612][ T29] audit: type=1326 audit(1734788236.219:99904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c0ead1f29 code=0x7ffc0000 [ 553.962546][ T29] audit: type=1326 audit(1734788236.219:99905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 553.997993][ T29] audit: type=1326 audit(1734788236.303:99906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27903 comm="syz.4.9199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 554.021628][ T29] audit: type=1326 audit(1734788236.312:99907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6c0eb2cce7 code=0x7ffc0000 [ 554.045138][ T29] audit: type=1326 audit(1734788236.312:99908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6c0ead1f29 code=0x7ffc0000 [ 554.068656][ T29] audit: type=1326 audit(1734788236.312:99909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 554.094049][ T29] audit: type=1326 audit(1734788236.406:99910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27892 comm="syz.1.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6c0eb2cce7 code=0x7ffc0000 [ 554.386205][T27926] netlink: 'syz.2.9209': attribute type 11 has an invalid length. [ 554.402236][T27926] tipc: Enabling of bearer rejected, failed to enable media [ 554.438285][T27930] SELinux: syz.2.9210 (27930) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 554.792079][T27940] loop4: detected capacity change from 0 to 512 [ 554.798902][T27940] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 554.809980][T27940] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.9214: iget: bad extended attribute block 512 [ 554.823435][T27940] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.9214: couldn't read orphan inode 15 (err -117) [ 554.837669][T27940] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.006784][T27942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 555.100695][T27944] bond7: entered promiscuous mode [ 555.105882][T27944] bond7: entered allmulticast mode [ 555.111494][T27944] 8021q: adding VLAN 0 to HW filter on device bond7 [ 555.121950][T27944] bond7 (unregistering): Released all slaves [ 555.222623][T27953] __nla_validate_parse: 18 callbacks suppressed [ 555.222701][T27953] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9218'. [ 555.246762][T27955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9219'. [ 555.296091][T27964] program syz.3.9221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 555.335635][T27966] program syz.3.9223 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 555.549245][T27975] erspan0 speed is unknown, defaulting to 1000 [ 555.613721][T27975] lo speed is unknown, defaulting to 1000 [ 555.698843][T27977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9225'. [ 555.900344][T22116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.106797][T27987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9230'. [ 556.612219][T27997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9232'. [ 556.681269][T28002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9235'. [ 556.912623][T28020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9242'. [ 556.945558][T28011] loop1: detected capacity change from 0 to 2048 [ 556.992849][T28011] loop1: detected capacity change from 0 to 512 [ 557.000109][T28011] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 557.014145][T28024] loop4: detected capacity change from 0 to 512 [ 557.033418][T28029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9246'. [ 557.038853][T28011] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 557.057725][T28011] EXT4-fs (loop1): 1 truncate cleaned up [ 557.059385][T28024] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 557.063974][T28011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.071564][T28024] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 557.092623][T28024] System zones: 0-1, 15-15, 18-18, 34-34 [ 557.099187][T28024] EXT4-fs (loop4): orphan cleanup on readonly fs [ 557.106889][T28024] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 557.121560][T28024] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 557.128709][T28024] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.9244: bad orphan inode 16 [ 557.135841][T28035] tipc: Enabling of bearer rejected, failed to enable media [ 557.138840][T28024] ext4_test_bit(bit=15, block=18) = 1 [ 557.152601][T28024] is_bad_inode(inode)=0 [ 557.156811][T28024] NEXT_ORPHAN(inode)=0 [ 557.160943][T28024] max_ino=32 [ 557.164154][T28024] i_nlink=2 [ 557.167690][T28024] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 557.173388][T28037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9248'. [ 557.253170][T22116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.276684][T28041] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9250'. [ 557.277749][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.295382][T28041] program syz.4.9250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 557.346083][T28045] loop1: detected capacity change from 0 to 2048 [ 557.380319][T28045] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.390057][T28049] loop4: detected capacity change from 0 to 2048 [ 557.412385][T28049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.495538][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.525894][T22116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.565002][T28057] loop4: detected capacity change from 0 to 2048 [ 557.583667][T28057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.718622][T28065] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 557.787494][T22116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.875333][T28070] loop1: detected capacity change from 0 to 2048 [ 557.876634][T28077] bond7: entered promiscuous mode [ 557.886906][T28077] bond7: entered allmulticast mode [ 557.889061][T28070] loop1: detected capacity change from 0 to 512 [ 557.899706][T28070] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 557.924235][T28077] 8021q: adding VLAN 0 to HW filter on device bond7 [ 557.937481][T28077] bond7 (unregistering): Released all slaves [ 557.944630][T28070] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 557.963203][T28070] EXT4-fs (loop1): 1 truncate cleaned up [ 557.969328][T28070] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.059207][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.102065][T28090] loop3: detected capacity change from 0 to 764 [ 558.109478][T28090] iso9660: Unknown parameter 'ÿÿ01777777777777777777777ÿÿ000000000000000000000001844674407370955161501777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 558.214804][T28106] program syz.2.9277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.246950][T28110] loop3: detected capacity change from 0 to 2048 [ 558.280923][T28110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.428533][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.627701][T28138] loop3: detected capacity change from 0 to 764 [ 558.634704][T28138] iso9660: Unknown parameter 'ÿÿ01777777777777777777777ÿÿ000000000000000000000001844674407370955161501777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 559.098500][T28149] netlink: 'syz.1.9294': attribute type 11 has an invalid length. [ 559.115242][T28149] tipc: Enabling of bearer rejected, failed to enable media [ 559.215206][ T29] kauditd_printk_skb: 2312 callbacks suppressed [ 559.215224][ T29] audit: type=1326 audit(1734788241.195:102222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28141 comm="syz.3.9293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7e8291cce7 code=0x7ffc0000 [ 559.240221][T28165] loop1: detected capacity change from 0 to 1024 [ 559.249186][ T29] audit: type=1326 audit(1734788241.214:102223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28164 comm="syz.1.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 559.273422][T28165] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 559.275323][ T29] audit: type=1326 audit(1734788241.214:102224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28164 comm="syz.1.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 559.286339][T28165] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 559.307776][ T29] audit: type=1326 audit(1734788241.214:102225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28164 comm="syz.1.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 559.322729][T28165] EXT4-fs (loop1): mount failed [ 559.346288][ T29] audit: type=1326 audit(1734788241.214:102226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28164 comm="syz.1.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 559.375158][ T29] audit: type=1326 audit(1734788241.214:102227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28164 comm="syz.1.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 559.398906][ T29] audit: type=1326 audit(1734788241.214:102228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28164 comm="syz.1.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 559.422700][ T29] audit: type=1326 audit(1734788241.214:102229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28164 comm="syz.1.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 559.446518][ T29] audit: type=1326 audit(1734788241.214:102230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28164 comm="syz.1.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 559.470160][ T29] audit: type=1326 audit(1734788241.214:102231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28164 comm="syz.1.9300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 559.686653][T28180] bond7: entered promiscuous mode [ 559.691784][T28180] bond7: entered allmulticast mode [ 559.697319][T28180] 8021q: adding VLAN 0 to HW filter on device bond7 [ 559.708091][T28180] bond7 (unregistering): Released all slaves [ 559.732258][T28178] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 559.931396][T28185] loop3: detected capacity change from 0 to 2048 [ 559.946550][T28185] loop3: detected capacity change from 0 to 512 [ 559.954423][T28185] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 559.966511][T28185] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 559.981258][T28185] EXT4-fs (loop3): 1 truncate cleaned up [ 559.987454][T28185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.077184][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.120707][T28189] program syz.3.9309 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 560.301847][T28194] bond4: entered promiscuous mode [ 560.307060][T28194] bond4: entered allmulticast mode [ 560.312651][T28194] 8021q: adding VLAN 0 to HW filter on device bond4 [ 560.400729][T28201] loop4: detected capacity change from 0 to 2048 [ 560.418938][T28201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.468022][T28207] 9pnet_fd: Insufficient options for proto=fd [ 560.550513][T28215] bond11: entered promiscuous mode [ 560.555979][T28215] bond11: entered allmulticast mode [ 560.567513][T22116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.579958][T28215] 8021q: adding VLAN 0 to HW filter on device bond11 [ 560.610126][T28215] bond11 (unregistering): Released all slaves [ 560.738623][T28228] bond5: entered promiscuous mode [ 560.743842][T28228] bond5: entered allmulticast mode [ 560.749308][T28228] 8021q: adding VLAN 0 to HW filter on device bond5 [ 560.759209][T28228] bond5 (unregistering): Released all slaves [ 560.938625][T28235] __nla_validate_parse: 19 callbacks suppressed [ 560.938645][T28235] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9327'. [ 560.991993][T28234] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9327'. [ 561.227002][T28247] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9334'. [ 561.269136][T28247] loop3: detected capacity change from 0 to 1024 [ 561.306808][T28249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9333'. [ 561.316372][T28247] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 561.328817][T28247] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 561.343993][T28247] EXT4-fs (loop3): mount failed [ 561.397853][T28258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9336'. [ 561.449454][T28259] erspan0 speed is unknown, defaulting to 1000 [ 561.490899][T28259] lo speed is unknown, defaulting to 1000 [ 561.880294][T28265] loop1: detected capacity change from 0 to 2048 [ 561.911693][T28268] program syz.2.9340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 561.955714][T28265] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.982231][T28265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9339'. [ 562.012372][T28276] bond7: entered promiscuous mode [ 562.017475][T28276] bond7: entered allmulticast mode [ 562.029160][T28276] 8021q: adding VLAN 0 to HW filter on device bond7 [ 562.060478][T28276] bond7 (unregistering): Released all slaves [ 562.129043][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.169935][T28284] bond11: entered promiscuous mode [ 562.175112][T28284] bond11: entered allmulticast mode [ 562.195424][T28284] 8021q: adding VLAN 0 to HW filter on device bond11 [ 562.214200][T28284] bond11 (unregistering): Released all slaves [ 562.241595][T28296] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9351'. [ 562.304270][T28300] loop1: detected capacity change from 0 to 2048 [ 562.321582][T28263] bond9: entered promiscuous mode [ 562.326680][T28263] bond9: entered allmulticast mode [ 562.332783][T28263] 8021q: adding VLAN 0 to HW filter on device bond9 [ 562.342333][T28300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 562.345194][T28298] erspan0 speed is unknown, defaulting to 1000 [ 562.406694][T28298] lo speed is unknown, defaulting to 1000 [ 562.460840][T28300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9352'. [ 562.471943][T28308] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9355'. [ 562.535423][T28313] SELinux: syz.0.9358 (28313) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 562.591055][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 562.684687][T28315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9357'. [ 562.751514][T28323] bridge0: port 1(veth0_to_bond) entered blocking state [ 562.758634][T28323] bridge0: port 1(veth0_to_bond) entered disabled state [ 562.766057][T28323] veth0_to_bond: entered allmulticast mode [ 562.773132][T28323] veth0_to_bond: entered promiscuous mode [ 562.827068][T28333] erspan0 speed is unknown, defaulting to 1000 [ 562.881520][T28333] lo speed is unknown, defaulting to 1000 [ 563.176034][T28343] loop4: detected capacity change from 0 to 2048 [ 563.192334][T28340] program syz.0.9369 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 563.204506][T28343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.335526][T22116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.490236][T28363] loop4: detected capacity change from 0 to 2048 [ 563.528278][T28348] bond10: entered promiscuous mode [ 563.533570][T28348] bond10: entered allmulticast mode [ 563.541012][T28363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.557348][T28369] loop3: detected capacity change from 0 to 2048 [ 563.560383][T28348] 8021q: adding VLAN 0 to HW filter on device bond10 [ 563.577471][T28363] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 563.617108][T22116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.633228][T28370] bridge0: port 1(veth0_to_bond) entered blocking state [ 563.640324][T28370] bridge0: port 1(veth0_to_bond) entered disabled state [ 563.648128][T28370] veth0_to_bond: entered allmulticast mode [ 563.654931][T28374] program syz.1.9380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 563.654982][T28370] veth0_to_bond: entered promiscuous mode [ 563.672814][T28375] SELinux: syz.0.9379 (28375) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 563.691399][T28369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.000821][T28387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 564.144677][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.361555][T28397] loop3: detected capacity change from 0 to 1024 [ 564.373165][T28394] bond5: entered promiscuous mode [ 564.378265][T28394] bond5: entered allmulticast mode [ 564.385202][T28394] 8021q: adding VLAN 0 to HW filter on device bond5 [ 564.392130][T28397] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 564.403833][T28397] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 564.418849][T28397] EXT4-fs (loop3): mount failed [ 564.420330][T28394] bond5 (unregistering): Released all slaves [ 564.451412][T28402] SELinux: syz.3.9389 (28402) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 564.580713][T28413] loop3: detected capacity change from 0 to 1024 [ 564.591267][ T29] kauditd_printk_skb: 934 callbacks suppressed [ 564.591284][ T29] audit: type=1326 audit(1734788246.209:103166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28412 comm="syz.3.9394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e82925d29 code=0x7ffc0000 [ 564.621446][ T29] audit: type=1326 audit(1734788246.209:103167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28412 comm="syz.3.9394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e82925d29 code=0x7ffc0000 [ 564.645250][ T29] audit: type=1326 audit(1734788246.209:103168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28412 comm="syz.3.9394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7e82925d29 code=0x7ffc0000 [ 564.669094][ T29] audit: type=1326 audit(1734788246.209:103169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28412 comm="syz.3.9394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e82925d29 code=0x7ffc0000 [ 564.692932][ T29] audit: type=1326 audit(1734788246.209:103170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28412 comm="syz.3.9394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7e82925d29 code=0x7ffc0000 [ 564.716781][ T29] audit: type=1326 audit(1734788246.209:103171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28412 comm="syz.3.9394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e82925d29 code=0x7ffc0000 [ 564.740504][ T29] audit: type=1326 audit(1734788246.209:103172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28412 comm="syz.3.9394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e82925d29 code=0x7ffc0000 [ 564.764257][ T29] audit: type=1326 audit(1734788246.218:103173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28412 comm="syz.3.9394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7e82925d29 code=0x7ffc0000 [ 564.787865][ T29] audit: type=1326 audit(1734788246.218:103174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28412 comm="syz.3.9394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e82925d29 code=0x7ffc0000 [ 564.811618][ T29] audit: type=1326 audit(1734788246.218:103175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28412 comm="syz.3.9394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7e82925d29 code=0x7ffc0000 [ 564.869960][T28413] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 564.884410][T28413] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 564.905145][T28413] EXT4-fs (loop3): mount failed [ 564.979345][T28425] loop3: detected capacity change from 0 to 764 [ 564.986223][T28425] iso9660: Unknown parameter 'ÿÿ01777777777777777777777ÿÿ000000000000000000000001844674407370955161501777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 565.031123][T28427] loop1: detected capacity change from 0 to 2048 [ 565.040499][T28435] SELinux: syz.3.9404 (28435) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 565.068644][T28431] loop4: detected capacity change from 0 to 1024 [ 565.083942][T28427] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.109791][T28431] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 565.163928][T28448] loop3: detected capacity change from 0 to 2048 [ 565.172773][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.177122][T28431] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 565.187024][T28448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.205382][T28431] EXT4-fs (loop4): mount failed [ 565.271423][T28458] loop4: detected capacity change from 0 to 2048 [ 565.291469][T28458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.346691][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.348322][T28463] loop1: detected capacity change from 0 to 512 [ 565.369804][T28463] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 565.393645][T28463] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.9411: iget: bad extended attribute block 512 [ 565.395031][T28466] loop3: detected capacity change from 0 to 2048 [ 565.412108][T28463] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.9411: couldn't read orphan inode 15 (err -117) [ 565.426398][T22116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.430753][T28463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.449034][T28466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 565.709101][T28472] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 565.736279][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.068712][T28476] SELinux: syz.2.9415 (28476) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 566.146480][T28482] program syz.2.9418 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.320168][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.359693][T28492] loop1: detected capacity change from 0 to 2048 [ 566.385932][T28490] netlink: 'syz.0.9423': attribute type 11 has an invalid length. [ 566.430750][T28492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.445550][T28494] __nla_validate_parse: 36 callbacks suppressed [ 566.445566][T28494] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9424'. [ 566.477895][T28490] tipc: Enabling of bearer rejected, failed to enable media [ 566.508183][T28501] SELinux: syz.0.9425 (28501) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 566.538896][T28502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9422'. [ 566.553830][T28504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9426'. [ 566.576161][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.593414][T28506] SELinux: syz.4.9427 (28506) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 566.615888][T28508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9428'. [ 566.667822][T28516] loop1: detected capacity change from 0 to 512 [ 566.695801][T28516] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 566.713776][T28512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9429'. [ 566.714119][T28516] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.9432: iget: bad extended attribute block 512 [ 566.738127][T28516] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.9432: couldn't read orphan inode 15 (err -117) [ 566.752603][T28516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.761463][T28510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9430'. [ 566.771717][T28521] loop4: detected capacity change from 0 to 2048 [ 566.801389][T28521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.817612][T28521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9434'. [ 566.892228][T28528] netlink: 'syz.0.9436': attribute type 11 has an invalid length. [ 566.911602][T28528] tipc: Enabling of bearer rejected, failed to enable media [ 567.000124][T22116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.010070][T28533] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 567.196906][T28538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9439'. [ 567.256285][T28536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9440'. [ 567.376768][T28541] SELinux: syz.0.9441 (28541) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 567.409607][T28543] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9442'. [ 567.511688][T28557] netlink: 'syz.2.9448': attribute type 11 has an invalid length. [ 567.528266][T28557] tipc: Enabling of bearer rejected, failed to enable media [ 567.540359][T28561] netlink: 'syz.4.9449': attribute type 11 has an invalid length. [ 567.556512][T28561] tipc: Enabling of bearer rejected, failed to enable media [ 567.593526][T28568] loop4: detected capacity change from 0 to 1024 [ 567.612417][T28568] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 567.623103][T28568] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 567.638084][T28568] EXT4-fs (loop4): mount failed [ 567.659743][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.732150][T28578] SELinux: syz.1.9452 (28578) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 567.886132][T28589] netlink: 'syz.2.9460': attribute type 11 has an invalid length. [ 567.911885][T28589] tipc: Enabling of bearer rejected, failed to enable media [ 567.942069][T28597] loop1: detected capacity change from 0 to 1024 [ 567.952748][T28597] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 567.967926][T28597] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 568.005531][T28597] EXT4-fs (loop1): mount failed [ 568.129822][T28594] bond5: entered promiscuous mode [ 568.134991][T28594] bond5: entered allmulticast mode [ 568.149103][T28594] 8021q: adding VLAN 0 to HW filter on device bond5 [ 568.407640][T28623] erspan0 speed is unknown, defaulting to 1000 [ 568.474660][T28623] lo speed is unknown, defaulting to 1000 [ 568.888547][T28641] 9pnet_fd: Insufficient options for proto=fd [ 568.955014][T28651] netlink: 'syz.2.9486': attribute type 11 has an invalid length. [ 568.984626][T28651] tipc: Enabling of bearer rejected, failed to enable media [ 569.031990][T28661] netlink: 'syz.0.9490': attribute type 11 has an invalid length. [ 569.070885][T28661] tipc: Enabling of bearer rejected, failed to enable media [ 569.142991][T28665] loop3: detected capacity change from 0 to 1024 [ 569.185896][T28665] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 569.225341][T28672] netlink: 'syz.1.9495': attribute type 11 has an invalid length. [ 569.256764][T28665] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 569.287698][T28672] tipc: Enabling of bearer rejected, failed to enable media [ 569.299543][T28665] EXT4-fs (loop3): mount failed [ 569.381812][T28694] netlink: 'syz.1.9503': attribute type 11 has an invalid length. [ 569.395009][T28691] loop4: detected capacity change from 0 to 2048 [ 569.398943][T28694] tipc: Enabling of bearer rejected, failed to enable media [ 569.419845][T28698] netlink: 'syz.2.9504': attribute type 11 has an invalid length. [ 569.429156][T28691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.436451][T28698] tipc: Enabling of bearer rejected, failed to enable media [ 569.475621][T28704] loop1: detected capacity change from 0 to 2048 [ 569.493301][T28704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.753775][T28720] erspan0 speed is unknown, defaulting to 1000 [ 569.820319][T28720] lo speed is unknown, defaulting to 1000 [ 569.834104][T28714] loop4: detected capacity change from 0 to 2048 [ 569.853041][T28714] loop4: detected capacity change from 0 to 512 [ 569.860640][T28714] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 569.872127][T28714] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 569.889826][T28714] EXT4-fs (loop4): 1 truncate cleaned up [ 569.954675][T28731] tipc: Enabling of bearer rejected, failed to enable media [ 570.020133][ T29] kauditd_printk_skb: 1069 callbacks suppressed [ 570.020152][ T29] audit: type=1326 audit(1734788251.307:104245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28736 comm="syz.4.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 570.056651][ T29] audit: type=1326 audit(1734788251.307:104246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28736 comm="syz.4.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 570.056729][ T29] audit: type=1326 audit(1734788251.307:104247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28736 comm="syz.4.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 570.056760][ T29] audit: type=1326 audit(1734788251.307:104248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28736 comm="syz.4.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 570.056905][ T29] audit: type=1326 audit(1734788251.307:104249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28736 comm="syz.4.9517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11fbac5d29 code=0x7ffc0000 [ 570.170970][T28741] tipc: Enabling of bearer rejected, failed to enable media [ 570.237194][T28749] bond11: entered promiscuous mode [ 570.237214][T28749] bond11: entered allmulticast mode [ 570.243354][T28749] 8021q: adding VLAN 0 to HW filter on device bond11 [ 570.254869][T28749] bond11 (unregistering): Released all slaves [ 570.259598][T28752] SELinux: syz.1.9522 (28752) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 570.323550][T28747] erspan0 speed is unknown, defaulting to 1000 [ 570.360364][T28747] lo speed is unknown, defaulting to 1000 [ 570.365359][T28756] 9pnet_fd: Insufficient options for proto=fd [ 570.409052][ T29] audit: type=1326 audit(1734788251.662:104250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28760 comm="syz.1.9525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 570.433037][ T29] audit: type=1326 audit(1734788251.700:104251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28760 comm="syz.1.9525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 570.467094][ T29] audit: type=1326 audit(1734788251.718:104252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28760 comm="syz.1.9525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 570.491027][ T29] audit: type=1326 audit(1734788251.718:104253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28760 comm="syz.1.9525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 570.514840][ T29] audit: type=1326 audit(1734788251.718:104254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28760 comm="syz.1.9525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c0eb35d29 code=0x7ffc0000 [ 570.543374][T28765] 9pnet_fd: Insufficient options for proto=fd [ 570.693519][T28776] 9pnet_fd: Insufficient options for proto=fd [ 570.888792][T28761] bond5: entered promiscuous mode [ 570.894035][T28761] bond5: entered allmulticast mode [ 570.899465][T28761] 8021q: adding VLAN 0 to HW filter on device bond5 [ 571.088888][T28783] bond6: entered promiscuous mode [ 571.094034][T28783] bond6: entered allmulticast mode [ 571.096461][T28802] loop1: detected capacity change from 0 to 2048 [ 571.099473][T28783] 8021q: adding VLAN 0 to HW filter on device bond6 [ 571.343916][T28819] tipc: Enabling of bearer rejected, failed to enable media [ 571.465432][T28820] bond7: entered promiscuous mode [ 571.470631][T28820] bond7: entered allmulticast mode [ 571.490638][T28820] 8021q: adding VLAN 0 to HW filter on device bond7 [ 571.562044][T28841] program syz.2.9555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 571.647325][T28843] erspan0 speed is unknown, defaulting to 1000 [ 571.701652][T28843] lo speed is unknown, defaulting to 1000 [ 571.874089][T28847] validate_nla: 3 callbacks suppressed [ 571.874106][T28847] netlink: 'syz.0.9558': attribute type 11 has an invalid length. [ 571.962621][T28849] loop4: detected capacity change from 0 to 2048 [ 571.973278][T28854] SELinux: syz.2.9559 (28854) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 572.002326][T28849] __nla_validate_parse: 43 callbacks suppressed [ 572.002342][T28849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9557'. [ 572.046915][T28861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9561'. [ 572.180442][T28872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9565'. [ 572.191742][T28874] program syz.4.9566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.223341][T28876] 9pnet_fd: Insufficient options for proto=fd [ 572.294822][T28886] netlink: 'syz.2.9571': attribute type 11 has an invalid length. [ 572.353371][T28891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9574'. [ 572.379257][T28894] loop4: detected capacity change from 0 to 2048 [ 572.421140][T28894] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 572.619979][T28918] 9pnet_fd: Insufficient options for proto=fd [ 572.623446][T28913] loop4: detected capacity change from 0 to 2048 [ 572.679106][ T5232] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.685267][T28924] loop3: detected capacity change from 0 to 2048 [ 572.697227][T28913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9581'. [ 572.714697][T28926] loop1: detected capacity change from 0 to 2048 [ 572.724704][T28924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9584'. [ 572.744711][T28906] erspan0 speed is unknown, defaulting to 1000 [ 572.749820][T28926] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9585'. [ 572.763784][ T5232] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.825936][ T5232] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.880699][ T5232] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.895958][T28906] lo speed is unknown, defaulting to 1000 [ 573.056736][T28906] chnl_net:caif_netlink_parms(): no params data found [ 573.075562][ T5232] veth0_to_bond: left allmulticast mode [ 573.081154][ T5232] veth0_to_bond: left promiscuous mode [ 573.086829][ T5232] bridge0: port 1(veth0_to_bond) entered disabled state [ 573.167375][T28953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9594'. [ 573.235633][ T5232] bond0 (unregistering): Released all slaves [ 573.244631][ T5232] bond1 (unregistering): Released all slaves [ 573.259461][ T5232] bond2 (unregistering): Released all slaves [ 573.268247][ T5232] bond3 (unregistering): Released all slaves [ 573.277203][ T5232] bond4 (unregistering): Released all slaves [ 573.285921][ T5232] bond5 (unregistering): Released all slaves [ 573.296352][ T5232] bond6 (unregistering): Released all slaves [ 573.305277][ T5232] bond7 (unregistering): Released all slaves [ 573.314214][ T5232] bond8 (unregistering): Released all slaves [ 573.324133][ T5232] bond9 (unregistering): Released all slaves [ 573.332967][ T5232] bond10 (unregistering): Released all slaves [ 573.356956][T28944] bond6: entered promiscuous mode [ 573.362096][T28944] bond6: entered allmulticast mode [ 573.367644][T28944] 8021q: adding VLAN 0 to HW filter on device bond6 [ 573.409121][T28959] loop4: detected capacity change from 0 to 2048 [ 573.432254][T28968] loop3: detected capacity change from 0 to 2048 [ 573.447626][T28959] loop4: detected capacity change from 0 to 512 [ 573.462154][T28959] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 573.488406][T28959] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 573.491289][T28970] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9597'. [ 573.524091][T28959] EXT4-fs (loop4): 1 truncate cleaned up [ 573.555885][T28968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9596'. [ 573.576019][T28976] bond7: entered promiscuous mode [ 573.581115][T28976] bond7: entered allmulticast mode [ 573.586978][T28987] SELinux: syz.0.9599 (28987) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 573.605890][T28976] 8021q: adding VLAN 0 to HW filter on device bond7 [ 573.629563][T28976] bond7 (unregistering): Released all slaves [ 573.660426][ T5232] hsr_slave_0: left promiscuous mode [ 573.666481][ T5232] hsr_slave_1: left promiscuous mode [ 573.675247][ T5232] veth1_vlan: left promiscuous mode [ 573.680690][ T5232] veth0_vlan: left promiscuous mode [ 573.877662][T29003] 9pnet_fd: Insufficient options for proto=fd [ 573.922951][T28906] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.930288][T28906] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.947516][T28906] bridge_slave_0: entered allmulticast mode [ 573.955637][T28906] bridge_slave_0: entered promiscuous mode [ 573.970301][T28906] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.977554][T28906] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.984901][T28906] bridge_slave_1: entered allmulticast mode [ 573.991552][T28906] bridge_slave_1: entered promiscuous mode [ 574.030847][T28906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.056303][T28906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.090283][T28906] team0: Port device team_slave_0 added [ 574.108515][T28906] team0: Port device team_slave_1 added [ 574.133302][T28906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.140278][T28906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.166321][T28906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.264651][T28906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.271658][T28906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.297746][T28906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.367400][T28906] hsr_slave_0: entered promiscuous mode [ 574.377690][T28906] hsr_slave_1: entered promiscuous mode [ 574.387776][T28906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 574.395414][T28906] Cannot create hsr debugfs directory [ 574.523225][T29049] bond11: entered promiscuous mode [ 574.528503][T29049] bond11: entered allmulticast mode [ 574.534135][T29049] 8021q: adding VLAN 0 to HW filter on device bond11 [ 574.561039][T29049] bond11 (unregistering): Released all slaves [ 574.601279][T29010] bond8: entered promiscuous mode [ 574.606932][T29010] bond8: entered allmulticast mode [ 574.614461][T29010] 8021q: adding VLAN 0 to HW filter on device bond8 [ 574.616262][T29060] loop3: detected capacity change from 0 to 2048 [ 574.655181][T29042] loop3: detected capacity change from 0 to 512 [ 574.663097][T29042] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 574.674962][T29042] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 574.690800][T29042] EXT4-fs (loop3): 1 truncate cleaned up [ 574.752509][T29067] loop4: detected capacity change from 0 to 2048 [ 574.958997][T29087] loop3: detected capacity change from 0 to 2048 [ 575.074130][T29099] erspan0 speed is unknown, defaulting to 1000 [ 575.129135][T29099] lo speed is unknown, defaulting to 1000 [ 575.219805][T28906] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 575.293051][T28906] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 575.356833][T28906] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 575.374307][ T29] kauditd_printk_skb: 645 callbacks suppressed [ 575.374325][ T29] audit: type=1326 audit(1734788256.311:104900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.0.9626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0456ca5d29 code=0x7ffc0000 [ 575.440911][T28906] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 575.527915][ T29] audit: type=1326 audit(1734788256.349:104901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.0.9626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456ca5d29 code=0x7ffc0000 [ 575.551726][ T29] audit: type=1326 audit(1734788256.349:104902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.0.9626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456ca5d29 code=0x7ffc0000 [ 575.557014][T28906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.575535][ T29] audit: type=1326 audit(1734788256.349:104903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.0.9626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0456ca5d29 code=0x7ffc0000 [ 575.575583][ T29] audit: type=1326 audit(1734788256.349:104904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.0.9626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456ca5d29 code=0x7ffc0000 [ 575.575611][ T29] audit: type=1326 audit(1734788256.349:104905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.0.9626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0456ca5d29 code=0x7ffc0000 [ 575.589258][T28906] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.605931][ T29] audit: type=1326 audit(1734788256.349:104906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.0.9626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0456ca7c47 code=0x7ffc0000 [ 575.606046][ T29] audit: type=1326 audit(1734788256.349:104907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.0.9626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f0456ca7bbc code=0x7ffc0000 [ 575.606078][ T29] audit: type=1326 audit(1734788256.349:104908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.0.9626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0456ca7af4 code=0x7ffc0000 [ 575.606164][ T29] audit: type=1326 audit(1734788256.349:104909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29106 comm="syz.0.9626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0456ca7af4 code=0x7ffc0000 [ 575.646565][T29087] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, [ 575.670152][T28906] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 575.684520][T29087] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 575.783307][T28906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 575.838190][T29108] loop4: detected capacity change from 0 to 1024 [ 575.849819][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.856964][ T5233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.866292][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.873417][ T5233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.881539][T29108] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 575.891668][T29108] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 575.912393][T29108] EXT4-fs (loop4): mount failed [ 576.123629][T28906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.202619][T29134] FAULT_INJECTION: forcing a failure. [ 576.202619][T29134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.215870][T29134] CPU: 1 UID: 0 PID: 29134 Comm: syz.3.9628 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 576.226680][T29134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 576.236763][T29134] Call Trace: [ 576.240065][T29134] [ 576.243011][T29134] dump_stack_lvl+0xf2/0x150 [ 576.247738][T29134] dump_stack+0x15/0x1a [ 576.252001][T29134] should_fail_ex+0x223/0x230 [ 576.256733][T29134] should_fail+0xb/0x10 [ 576.260914][T29134] should_fail_usercopy+0x1a/0x20 [ 576.265980][T29134] _copy_from_user+0x1e/0xb0 [ 576.270687][T29134] __sys_bpf+0x14e/0x7a0 [ 576.275046][T29134] __x64_sys_bpf+0x43/0x50 [ 576.279555][T29134] x64_sys_call+0x2914/0x2dc0 [ 576.284277][T29134] do_syscall_64+0xc9/0x1c0 [ 576.288893][T29134] ? clear_bhb_loop+0x55/0xb0 [ 576.293602][T29134] ? clear_bhb_loop+0x55/0xb0 [ 576.298329][T29134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.304358][T29134] RIP: 0033:0x7f7e82925d29 [ 576.308807][T29134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.328438][T29134] RSP: 002b:00007f7e80f4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 576.336942][T29134] RAX: ffffffffffffffda RBX: 00007f7e82b16160 RCX: 00007f7e82925d29 [ 576.344948][T29134] RDX: 0000000000000070 RSI: 0000000020000440 RDI: 0000000000000005 [ 576.348817][T29136] loop4: detected capacity change from 0 to 2048 [ 576.352930][T29134] RBP: 00007f7e80f4f090 R08: 0000000000000000 R09: 0000000000000000 [ 576.352950][T29134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.375331][T29134] R13: 0000000000000000 R14: 00007f7e82b16160 R15: 00007ffc6536ee08 [ 576.383326][T29134] [ 576.396259][T29107] bond11: entered promiscuous mode [ 576.401562][T29107] bond11: entered allmulticast mode [ 576.414872][T29107] 8021q: adding VLAN 0 to HW filter on device bond11 [ 576.475374][T28906] veth0_vlan: entered promiscuous mode [ 576.493553][T28906] veth1_vlan: entered promiscuous mode [ 576.536751][T28906] veth0_macvtap: entered promiscuous mode [ 576.545929][T28906] veth1_macvtap: entered promiscuous mode [ 576.560942][T28906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.570732][T28906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.590697][T28906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.599582][T28906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.608416][T28906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.617298][T28906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.673282][T29172] loop4: detected capacity change from 0 to 2048 [ 576.761468][T29181] bond12: entered promiscuous mode [ 576.766650][T29181] bond12: entered allmulticast mode [ 576.800465][T29181] 8021q: adding VLAN 0 to HW filter on device bond12 [ 576.882106][T29181] bond12 (unregistering): Released all slaves [ 576.950885][T29195] hub 9-0:1.0: USB hub found [ 576.961838][T29195] hub 9-0:1.0: 8 ports detected [ 577.142647][T29208] erspan0 speed is unknown, defaulting to 1000 [ 577.198174][T29208] lo speed is unknown, defaulting to 1000 [ 577.459320][T29214] __nla_validate_parse: 6 callbacks suppressed [ 577.459350][T29214] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9640'. [ 577.555262][T29226] loop3: detected capacity change from 0 to 2048 [ 577.583373][T29212] loop3: detected capacity change from 0 to 512 [ 577.632308][T29241] loop4: detected capacity change from 0 to 2048 [ 577.636344][T29212] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 577.652002][T29212] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 577.670727][T29212] EXT4-fs (loop3): 1 truncate cleaned up [ 577.677515][T29241] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9647'. [ 577.823852][T22116] EXT4-fs unmount: 32 callbacks suppressed [ 577.823941][T22116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.879703][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.935909][T29254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9650'. [ 577.977948][T29254] loop3: detected capacity change from 0 to 1024 [ 577.990121][T29254] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 578.018354][T29254] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 578.054808][T29254] EXT4-fs (loop3): mount failed [ 578.134487][T29249] bond7: entered promiscuous mode [ 578.139574][T29249] bond7: entered allmulticast mode [ 578.145295][T29249] 8021q: adding VLAN 0 to HW filter on device bond7 [ 578.157175][T29260] 9pnet_fd: Insufficient options for proto=fd [ 578.222914][T29265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9654'. [ 578.306468][T29272] loop3: detected capacity change from 0 to 2048 [ 578.350626][T29272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.364844][T29272] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9656'. [ 578.401099][T29280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9659'. [ 578.424277][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.494961][T29286] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9661'. [ 578.560685][T29297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9663'. [ 578.582061][T29295] loop3: detected capacity change from 0 to 2048 [ 578.606340][T29293] loop3: detected capacity change from 0 to 512 [ 578.614227][T29293] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 578.628566][T29293] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 578.644257][T29293] EXT4-fs (loop3): 1 truncate cleaned up [ 578.650661][T29293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 578.671716][T29303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9665'. [ 578.730981][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.791023][T29307] loop3: detected capacity change from 0 to 2048 [ 578.814482][T29309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9668'. [ 578.815433][T29307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 578.952582][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 578.988677][T29315] loop3: detected capacity change from 0 to 2048 [ 579.008276][T29315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.032776][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.085519][T29322] loop3: detected capacity change from 0 to 764 [ 579.092709][T29322] iso9660: Unknown parameter 'ÿÿ01777777777777777777777ÿÿ000000000000000000000001844674407370955161501777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 579.183578][T29328] program syz.3.9675 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 579.296745][T29330] loop3: detected capacity change from 0 to 2048 [ 579.312168][T29330] loop3: detected capacity change from 0 to 512 [ 579.324587][T29330] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 579.346336][T29330] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 579.361525][T29330] EXT4-fs (loop3): 1 truncate cleaned up [ 579.367460][T29330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.486744][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.527711][T29339] hub 9-0:1.0: USB hub found [ 579.532511][T29339] hub 9-0:1.0: 8 ports detected [ 579.560737][T29341] hub 9-0:1.0: USB hub found [ 579.565504][T29341] hub 9-0:1.0: 8 ports detected [ 579.817167][T29348] erspan0 speed is unknown, defaulting to 1000 [ 579.873171][T29348] lo speed is unknown, defaulting to 1000 [ 580.627720][T29364] 9pnet_fd: Insufficient options for proto=fd [ 580.741817][ T29] kauditd_printk_skb: 1177 callbacks suppressed [ 580.741836][ T29] audit: type=1326 audit(1734788261.334:106087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29355 comm="syz.2.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b9a44cce7 code=0x7ffc0000 [ 580.772063][ T29] audit: type=1326 audit(1734788261.334:106088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29355 comm="syz.2.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b9a3f1f29 code=0x7ffc0000 [ 580.795795][ T29] audit: type=1326 audit(1734788261.334:106089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29355 comm="syz.2.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5b9a455d29 code=0x7ffc0000 [ 580.819685][ T29] audit: type=1326 audit(1734788261.344:106090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29355 comm="syz.2.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b9a44cce7 code=0x7ffc0000 [ 580.843582][ T29] audit: type=1326 audit(1734788261.344:106091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29355 comm="syz.2.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b9a3f1f29 code=0x7ffc0000 [ 580.867257][ T29] audit: type=1326 audit(1734788261.344:106092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29355 comm="syz.2.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5b9a455d29 code=0x7ffc0000 [ 580.890917][ T29] audit: type=1326 audit(1734788261.344:106093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29355 comm="syz.2.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b9a44cce7 code=0x7ffc0000 [ 580.914659][ T29] audit: type=1326 audit(1734788261.344:106094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29355 comm="syz.2.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b9a3f1f29 code=0x7ffc0000 [ 580.938232][ T29] audit: type=1326 audit(1734788261.344:106095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29355 comm="syz.2.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f5b9a455d29 code=0x7ffc0000 [ 580.961893][ T29] audit: type=1326 audit(1734788261.353:106096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29355 comm="syz.2.9686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b9a44cce7 code=0x7ffc0000 [ 582.030382][T29379] hub 9-0:1.0: USB hub found [ 582.035201][T29379] hub 9-0:1.0: 8 ports detected [ 582.569224][T29405] erspan0 speed is unknown, defaulting to 1000 [ 582.626389][T29405] lo speed is unknown, defaulting to 1000 [ 582.887248][T29408] netlink: 'syz.1.9707': attribute type 11 has an invalid length. [ 582.932449][T29413] loop3: detected capacity change from 0 to 2048 [ 582.956316][T29413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.020560][T29413] __nla_validate_parse: 17 callbacks suppressed [ 583.020584][T29413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9709'. [ 583.079980][T29427] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 583.128269][T29432] hub 9-0:1.0: USB hub found [ 583.136869][T29432] hub 9-0:1.0: 8 ports detected [ 583.167733][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.199538][T29419] erspan0 speed is unknown, defaulting to 1000 [ 583.245791][T29441] loop1: detected capacity change from 0 to 2048 [ 583.267795][T29443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9717'. [ 583.276827][T29443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9717'. [ 583.339004][T29443] bond7: entered promiscuous mode [ 583.344099][T29443] bond7: entered allmulticast mode [ 583.365416][T29443] 8021q: adding VLAN 0 to HW filter on device bond7 [ 583.381384][T29425] loop1: detected capacity change from 0 to 512 [ 583.388240][T29419] lo speed is unknown, defaulting to 1000 [ 583.391080][T29425] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 583.479023][T29451] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9720'. [ 583.489783][T29425] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 583.522486][T29425] EXT4-fs (loop1): 1 truncate cleaned up [ 583.529076][T29425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.697270][T29463] loop3: detected capacity change from 0 to 2048 [ 583.779138][T29463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.829790][T29463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9724'. [ 583.881426][T29465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 583.926935][T29419] chnl_net:caif_netlink_parms(): no params data found [ 584.009789][T29419] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.016915][T29419] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.024313][T29419] bridge_slave_0: entered allmulticast mode [ 584.025287][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.031008][T29419] bridge_slave_0: entered promiscuous mode [ 584.045983][T29419] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.053136][T29419] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.060388][T29419] bridge_slave_1: entered allmulticast mode [ 584.067013][T29419] bridge_slave_1: entered promiscuous mode [ 584.086961][T29419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.096982][T29472] FAULT_INJECTION: forcing a failure. [ 584.096982][T29472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.110102][T29472] CPU: 1 UID: 0 PID: 29472 Comm: syz.1.9725 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 584.112546][T29419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.120963][T29472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 584.121060][T29472] Call Trace: [ 584.121068][T29472] [ 584.121077][T29472] dump_stack_lvl+0xf2/0x150 [ 584.151193][T29472] dump_stack+0x15/0x1a [ 584.155377][T29472] should_fail_ex+0x223/0x230 [ 584.160115][T29472] should_fail+0xb/0x10 [ 584.164379][T29472] should_fail_usercopy+0x1a/0x20 [ 584.169497][T29472] _copy_from_user+0x1e/0xb0 [ 584.174171][T29472] move_addr_to_kernel+0x82/0x120 [ 584.179304][T29472] __sys_sendto+0x12e/0x230 [ 584.183886][T29472] __x64_sys_sendto+0x78/0x90 [ 584.188587][T29472] x64_sys_call+0x29fa/0x2dc0 [ 584.193266][T29472] do_syscall_64+0xc9/0x1c0 [ 584.197822][T29472] ? clear_bhb_loop+0x55/0xb0 [ 584.202579][T29472] ? clear_bhb_loop+0x55/0xb0 [ 584.207305][T29472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.213287][T29472] RIP: 0033:0x7f6c0eb35d29 [ 584.217772][T29472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.237397][T29472] RSP: 002b:00007f6c0d1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 584.245868][T29472] RAX: ffffffffffffffda RBX: 00007f6c0ed25fa0 RCX: 00007f6c0eb35d29 [ 584.253844][T29472] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000006 [ 584.261845][T29472] RBP: 00007f6c0d1a7090 R08: 0000000020000100 R09: 000000000000001c [ 584.269914][T29472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.278067][T29472] R13: 0000000000000000 R14: 00007f6c0ed25fa0 R15: 00007ffcfda99748 [ 584.286051][T29472] [ 584.297161][T29419] team0: Port device team_slave_0 added [ 584.304169][T29419] team0: Port device team_slave_1 added [ 584.354542][T29419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.361638][T29419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.387615][T29419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.401353][T29419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.405109][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.408400][T29419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.443986][T29419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.454764][T29476] erspan0 speed is unknown, defaulting to 1000 [ 584.513158][T29419] hsr_slave_0: entered promiscuous mode [ 584.536185][T29419] hsr_slave_1: entered promiscuous mode [ 584.538043][T29478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9728'. [ 584.551023][T29419] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 584.560592][T29419] Cannot create hsr debugfs directory [ 584.566137][T29476] lo speed is unknown, defaulting to 1000 [ 584.579832][T29482] veth0_to_bond: left allmulticast mode [ 584.585430][T29482] veth0_to_bond: left promiscuous mode [ 584.591188][T29482] bridge0: port 1(veth0_to_bond) entered disabled state [ 584.774251][T29419] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.840752][T29496] netlink: 'syz.1.9734': attribute type 11 has an invalid length. [ 584.864202][T29419] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.912407][T29502] loop1: detected capacity change from 0 to 2048 [ 584.931991][T29419] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.966722][T29502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.992410][T29502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9735'. [ 585.006150][T29419] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.117874][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.130424][T29419] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 585.156861][T29419] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 585.167337][T29419] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 585.177180][T29419] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 585.180836][T29508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9736'. [ 585.211122][T29508] bond8: entered promiscuous mode [ 585.216215][T29508] bond8: entered allmulticast mode [ 585.222284][T29508] 8021q: adding VLAN 0 to HW filter on device bond8 [ 585.282381][T29419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.293226][T29511] loop1: detected capacity change from 0 to 2048 [ 585.321579][T29419] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.332769][T29511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.354390][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.361507][ T5219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.376736][T29511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9737'. [ 585.384981][ T5284] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.392801][ T5284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.467262][T29419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 585.485823][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.518055][T29523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9738'. [ 585.561793][T29527] loop1: detected capacity change from 0 to 1024 [ 585.576305][T29527] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 585.586453][T29527] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 585.602329][T29527] EXT4-fs (loop1): mount failed [ 585.642054][T29419] veth0_vlan: entered promiscuous mode [ 585.652715][T29419] veth1_vlan: entered promiscuous mode [ 585.688355][T29419] veth0_macvtap: entered promiscuous mode [ 585.703084][T29419] veth1_macvtap: entered promiscuous mode [ 585.718696][T29419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.729348][T29419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.742046][T29419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.751355][T29419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 585.761914][T29419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.773441][T29419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.782473][T29538] hub 9-0:1.0: USB hub found [ 585.787546][T29538] hub 9-0:1.0: 8 ports detected [ 585.793784][T29419] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.802572][T29419] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.811337][T29419] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.820201][T29419] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.854837][T29542] erspan0 speed is unknown, defaulting to 1000 [ 585.984127][T29542] lo speed is unknown, defaulting to 1000 [ 586.083145][T29554] erspan0 speed is unknown, defaulting to 1000 [ 586.140669][T29554] lo speed is unknown, defaulting to 1000 [ 586.432247][T29552] futex_wake_op: syz.0.9746 tries to shift op by 144; fix this program [ 586.494662][T29563] loop3: detected capacity change from 0 to 2048 [ 586.509677][T29565] hub 9-0:1.0: USB hub found [ 586.515040][T29565] hub 9-0:1.0: 8 ports detected [ 586.525876][T29563] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 586.585094][ T29] kauditd_printk_skb: 859 callbacks suppressed [ 586.585111][ T29] audit: type=1326 audit(1734788266.797:106956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.2.9753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9a455d29 code=0x7ffc0000 [ 586.615259][ T29] audit: type=1326 audit(1734788266.797:106957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.2.9753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5b9a455d29 code=0x7ffc0000 [ 586.639145][ T29] audit: type=1326 audit(1734788266.797:106958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.2.9753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9a455d29 code=0x7ffc0000 [ 586.663012][ T29] audit: type=1326 audit(1734788266.797:106959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.2.9753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b9a455d29 code=0x7ffc0000 [ 586.686745][ T29] audit: type=1326 audit(1734788266.797:106960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.2.9753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9a455d29 code=0x7ffc0000 [ 586.710542][ T29] audit: type=1326 audit(1734788266.797:106961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.2.9753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b9a455d29 code=0x7ffc0000 [ 586.734702][ T29] audit: type=1326 audit(1734788266.797:106962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.2.9753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9a455d29 code=0x7ffc0000 [ 586.758475][ T29] audit: type=1326 audit(1734788266.797:106963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.2.9753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b9a455d29 code=0x7ffc0000 [ 586.782498][ T29] audit: type=1326 audit(1734788266.872:106964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.2.9753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9a455d29 code=0x7ffc0000 [ 586.806188][ T29] audit: type=1326 audit(1734788266.872:106965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29572 comm="syz.2.9753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b9a455d29 code=0x7ffc0000 [ 586.866287][T29578] hub 9-0:1.0: USB hub found [ 586.871435][T29578] hub 9-0:1.0: 8 ports detected [ 586.890910][T22294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.440328][T29584] bond8: entered promiscuous mode [ 587.445526][T29584] bond8: entered allmulticast mode [ 587.451724][T29584] 8021q: adding VLAN 0 to HW filter on device bond8 [ 587.478571][T29596] bond9: entered promiscuous mode [ 587.483739][T29596] bond9: entered allmulticast mode [ 587.489180][T29596] 8021q: adding VLAN 0 to HW filter on device bond9 [ 587.741381][T29616] erspan0 speed is unknown, defaulting to 1000 [ 587.779442][T29616] lo speed is unknown, defaulting to 1000 [ 587.858748][ T5284] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.915055][T29608] erspan0 speed is unknown, defaulting to 1000 [ 587.926206][ T5284] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.966875][T29608] lo speed is unknown, defaulting to 1000 [ 587.997708][T29629] erspan0 speed is unknown, defaulting to 1000 [ 588.053073][T29629] lo speed is unknown, defaulting to 1000 [ 588.096988][ T5284] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.351560][ T5284] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.461369][T29608] chnl_net:caif_netlink_parms(): no params data found [ 588.586831][ T5284] bond0 (unregistering): Released all slaves [ 588.595650][ T5284] bond1 (unregistering): Released all slaves [ 588.608845][ T5284] bond2 (unregistering): Released all slaves [ 588.620159][ T5284] bond3 (unregistering): Released all slaves [ 588.629666][ T5284] bond4 (unregistering): Released all slaves [ 588.672095][ T5284] bond5 (unregistering): Released all slaves [ 588.680892][ T5284] bond6 (unregistering): Released all slaves [ 588.689376][ T5284] bond7 (unregistering): Released all slaves [ 588.697878][ T5284] bond8 (unregistering): Released all slaves [ 588.731198][T29654] __nla_validate_parse: 7 callbacks suppressed [ 588.731269][T29654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9774'. [ 588.786094][ T5284] tipc: Disabling bearer [ 588.791493][ T5284] tipc: Left network mode [ 588.819406][T29608] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.827285][T29608] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.834795][T29608] bridge_slave_0: entered allmulticast mode [ 588.842107][T29608] bridge_slave_0: entered promiscuous mode [ 588.849167][T29608] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.856305][T29608] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.863740][T29608] bridge_slave_1: entered allmulticast mode [ 588.875872][T29608] bridge_slave_1: entered promiscuous mode [ 588.919929][T29608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.964184][T29608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.977377][ T5284] hsr_slave_0: left promiscuous mode [ 588.984641][ T5284] hsr_slave_1: left promiscuous mode [ 588.994399][ T5284] veth1_vlan: left promiscuous mode [ 588.999801][ T5284] veth0_vlan: left promiscuous mode [ 589.153670][T29608] team0: Port device team_slave_0 added [ 589.160474][T29608] team0: Port device team_slave_1 added [ 589.182462][T29608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.189542][T29608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.216159][T29608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.234027][T29608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.241067][T29608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.267017][T29608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.308553][T29608] hsr_slave_0: entered promiscuous mode [ 589.310368][T29681] loop1: detected capacity change from 0 to 512 [ 589.320808][T29608] hsr_slave_1: entered promiscuous mode [ 589.326315][T29681] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 589.336342][T29608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.337423][T29681] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.9779: iget: bad extended attribute block 512 [ 589.344298][T29608] Cannot create hsr debugfs directory [ 589.358325][T29681] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.9779: couldn't read orphan inode 15 (err -117) [ 589.374662][T29681] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.653918][T29699] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.932103][T29608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 589.962428][T29608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 589.979709][T29608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 590.001503][T29608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 590.012775][T29713] netlink: 'syz.0.9781': attribute type 11 has an invalid length. [ 590.102424][T29608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 590.118444][T29608] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.129269][T29284] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.136401][T29284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.159193][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.166331][ T5232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.207330][T29608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 590.282344][T29730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9784'. [ 590.300931][T29608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 590.308657][T29730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.316135][T29730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.324865][T29730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 590.332481][T29730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.350441][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.419325][T29742] loop1: detected capacity change from 0 to 2048 [ 590.451952][T29742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.507002][T29742] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 590.583801][T29759] bridge_slave_0: left allmulticast mode [ 590.589837][T29759] bridge_slave_0: left promiscuous mode [ 590.595917][T29759] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.604406][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.617797][T29759] bridge_slave_1: left allmulticast mode [ 590.623481][T29759] bridge_slave_1: left promiscuous mode [ 590.629410][T29759] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.659597][T29759] bond0: (slave bond_slave_0): Releasing backup interface [ 590.671399][T29759] bond0: (slave bond_slave_1): Releasing backup interface [ 590.671473][T29763] ================================================================== [ 590.686658][T29763] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 590.693731][T29763] [ 590.696066][T29763] write to 0xffffffff8671f2b8 of 8 bytes by task 29759 on cpu 1: [ 590.698821][T29765] loop1: detected capacity change from 0 to 2048 [ 590.703790][T29763] prb_reserve+0x740/0xb60 [ 590.703822][T29763] vprintk_store+0x558/0x870 [ 590.719503][T29763] vprintk_emit+0x15e/0x680 [ 590.724050][T29763] vprintk_default+0x26/0x30 [ 590.728665][T29763] vprintk+0x75/0x80 [ 590.732589][T29763] _printk+0x7a/0xa0 [ 590.736517][T29763] __netdev_printk+0x2d1/0x3e0 [ 590.741301][T29763] netdev_info+0x99/0xc0 [ 590.745568][T29763] __bond_release_one+0x345/0xa10 [ 590.750627][T29763] bond_release+0x21/0x30 [ 590.754989][T29763] do_setlink+0x852/0x22c0 [ 590.759423][T29763] rtnl_newlink+0xcf9/0x1250 [ 590.764029][T29763] rtnetlink_rcv_msg+0x651/0x710 [ 590.768986][T29763] netlink_rcv_skb+0x12c/0x230 [ 590.773764][T29763] rtnetlink_rcv+0x1c/0x30 [ 590.778195][T29763] netlink_unicast+0x599/0x670 [ 590.782975][T29763] netlink_sendmsg+0x5cc/0x6e0 [ 590.787753][T29763] __sock_sendmsg+0x140/0x180 [ 590.792447][T29763] ____sys_sendmsg+0x312/0x410 [ 590.797225][T29763] __sys_sendmsg+0x19d/0x230 [ 590.801823][T29763] __x64_sys_sendmsg+0x46/0x50 [ 590.806596][T29763] x64_sys_call+0x2734/0x2dc0 [ 590.811280][T29763] do_syscall_64+0xc9/0x1c0 [ 590.815788][T29763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.821703][T29763] [ 590.824029][T29763] read to 0xffffffff8671f2b8 of 8 bytes by task 29763 on cpu 0: [ 590.831665][T29763] _prb_read_valid+0x1ec/0xba0 [ 590.836444][T29763] prb_read_valid+0x3d/0x60 [ 590.840958][T29763] console_unlock+0x175/0x330 [ 590.845651][T29763] con_flush_chars+0xb0/0x1b0 [ 590.850332][T29763] con_write+0x30/0x40 [ 590.854405][T29763] n_tty_write+0x843/0xb80 [ 590.858828][T29763] file_tty_write+0x37a/0x680 [ 590.863520][T29763] tty_write+0x28/0x30 [ 590.867602][T29763] vfs_write+0x77f/0x920 [ 590.871856][T29763] ksys_write+0xe8/0x1b0 [ 590.876113][T29763] __x64_sys_write+0x42/0x50 [ 590.880716][T29763] x64_sys_call+0x287e/0x2dc0 [ 590.885401][T29763] do_syscall_64+0xc9/0x1c0 [ 590.889942][T29763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.895881][T29763] [ 590.898203][T29763] value changed: 0x000000000000194d -> 0x0000000000000000 [ 590.905310][T29763] [ 590.907635][T29763] Reported by Kernel Concurrency Sanitizer on: [ 590.913781][T29763] CPU: 0 UID: 0 PID: 29763 Comm: syz.2.9790 Not tainted 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 [ 590.924554][T29763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 590.934614][T29763] ================================================================== [ 590.954639][T29759] team0: Port device team_slave_0 removed [ 590.965947][T29759] team0: Port device team_slave_1 removed [ 590.972804][T29759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.974189][T29765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.980310][T29759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.001844][T29759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.009326][T29759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.031775][T29765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9789'. [ 591.061945][T29767] netlink: 'syz.0.9791': attribute type 11 has an invalid length. [ 591.088862][T29608] veth0_vlan: entered promiscuous mode [ 591.107620][T29608] veth1_vlan: entered promiscuous mode [ 591.144293][T29608] veth0_macvtap: entered promiscuous mode [ 591.160804][T29608] veth1_macvtap: entered promiscuous mode [ 591.179120][T21804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.182089][T29608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.205073][T29608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.213698][T29608] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.222541][T29608] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.231293][T29608] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.240060][T29608] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0