last executing test programs: 2.571619803s ago: executing program 0 (id=2668): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1002430, &(0x7f0000000440)={[{@quota}, {@noquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) rmdir(0x0) 2.528013623s ago: executing program 0 (id=2669): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_disconnect(0xffffffffffffffff) 1.806295298s ago: executing program 0 (id=2684): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000001380)=@sr0, 0x0, &(0x7f0000001680)='./file1\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x3920e, r3, 0x10004, 0x4, 0x3, 0x86}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x60263, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb07000000000000000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$netlink(0x10, 0x3, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x4, &(0x7f0000000000)=[{0x7, 0x9, 0x5, 0x28a}, {0x3, 0x2, 0x84, 0x197df479}, {0x5, 0x5, 0x87, 0x5}, {0x4, 0x9, 0x3f}]}) close_range(r8, 0xffffffffffffffff, 0x0) sendmsg$inet(r5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.715064349s ago: executing program 1 (id=2686): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000a00)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022dbd7000ffdb652520e7000109001f00706879"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.680420249s ago: executing program 1 (id=2687): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) unshare(0x2c020400) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000c602c1e5f05f92c13ca1b3cf3db1123d802a21e6754b"]}, 0x11e) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000bc0), 0x101e40) sendmsg$netlink(r5, &(0x7f0000002780)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002700)=[{&(0x7f00000027c0)={0x384, 0x33, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@generic="642bae7d9523d0173d67f628b84b8d4cc6273ed275dd96333b63ad0d5a2fe482a602b034618ad1c5a01a4abd0b81f0108f9dd7dca28cc2ee48e678547832571949d6f2e847b709938923c0abb13c160f57c88c84856c703b7032eb55272825eb9fb6093681a95eda1f8b0a4e816cd87aaf99bdec3c4045028276dcfe8ba9dac3", @typed={0x4, 0x63}, @nested={0x8, 0x13d, 0x0, 0x1, [@nested={0x4, 0x3a}]}, @generic="d76d0ec562fe1a04e0962e47b40132edd77bd13e90074e67afaa9a4b853a43c8af9e4fd09dec17ce24e05e93a2246dd799624e", @nested={0x1a1, 0x8, 0x0, 0x1, [@typed={0xc, 0x6a, 0x0, 0x0, @u64=0x200}, @nested={0x4, 0x11b}, @typed={0x8, 0xaa, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0xcd}, @nested={0x4, 0xbe}, @typed={0x83, 0x148, 0x0, 0x0, @binary="091e27b81aacf36cc281b9b11e0155b82f47697f6099fbeac153b3cf3cd0a5a43f9f5612120122d6a14c29ad4f2b5c5ec11d0534f540f0d081ea8a745be46702a77d5a3e1304d26863cc6f381b69565957d8f4bccd63a76c6184b782cb07340ca9bfd6196f74ffe467c5ca6520b31328724e1b36e44537e4f7de4e86062325"}, @typed={0x8, 0xfc, 0x0, 0x0, @fd=r5}, @generic="8ad75fdc5a5d834aef6159194c4000aaaf922480d6a32f1f547183e2424439fc928d618fc25fc6e6bdf8ed519d713eb553acf07adb7e8c8d4a25ae92a8347d979ad137f17e0fccafabaca8619f1b7fdc563438fee2aafc292026fd4cb3b227d1b115ad6b7285c226e0ff3790bf8fd49340f134f4d74e05301f3edee7d42a031b3f4b1235c6902a7421c7f509c8c647de598844446a1d737ff635dfd77a691bc713807f99098b8af4623d93bd839cb505fd73ba549fc40270c8822ae752e70cd8f70ee367fecbc071dc5183559df2ded58847b95e268b3986b8d781ebb9a20202e3c45a106108961669585db817", @typed={0x4, 0x4f, 0x0, 0x0, @binary}]}, @generic="6633176018e5f6d3634d537cf43d46e5ca2f11b5723c992a9d6941809f9eb817561af2ce1cd7ad25e8e64d2f68a59074bf1d2d857956e014658842e7000fbf9500f5d3baad48290218568ec406", @nested={0xbc, 0x67, 0x0, 0x1, [@generic="4d65ce14a2afac942dde2e1fbbd8901bc66489f0318b667e50e477ff6cd4878d5a5c868c4244c407e529a27aa1468aa5bf18efe8f3b70cf816f0a75e2b521456b070e189b17022cbaeb6ab5f76f50dda4376b97023b9169ea5f4fa6b55a235fc5075da3c4d5deed23f1ac7e042d2fed99055a49112cc01ff1ebaf0d5655c251dd71b39cb8c23fa66b77ccec51e205c76235f344015f080c5e5e53a7cf6b7a2da6cc491b003f6f4dd5446d5825b224e08db5301d8f7e5676b"]}, @typed={0x8, 0x6d, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x384}, {&(0x7f0000000640)={0x64, 0x11, 0x206, 0x70bd27, 0x25dfdbfd, "", [@generic="4113e3e2ad219c24726177a1e043bcec87c7e4fe16aeb179263a1dc8d833492b42402f840a7d54f45577ed032c1e578cb0f49ad26097f9061a7027a50a5c69e0e4033357062810d01af08364aaa06cb329c5"]}, 0x64}, {&(0x7f00000006c0)={0x1b0, 0x36, 0x210, 0x70bd28, 0x25dfdbff, "", [@generic, @typed={0x8, 0xc6, 0x0, 0x0, @u32=0xdfeb}, @nested={0x8, 0x74, 0x0, 0x1, [@nested={0x4, 0x126}, @generic, @generic]}, @generic="d0cabcc0d3a3f5c53b56c43534f1887ee29fcc27736e31c37594eec4925ecd4c830a6705dd5a5b56c5a68366e4f83e50ea9be5137a4e8b5f38cd1f914490233cd37912a81766713714197ffebac33e3d21f350fea550b6e40c2843a25ce65273bf93c1f54160f379b16e90b55f022e6b570c5ea42b0c363e82f044", @generic, @typed={0x9a, 0x3d, 0x0, 0x0, @binary="090338d14d6d656af8edfd86d697d19ad1cf6eb7a69fb3f3d2135a58969eac7de75aa82041e6cf0a2be790951f2d135d7fab832bc89a690d0eedd7be9bb5305ea3d39faa649794aee0d45b0c17ce1835bd8f2b7f50f83d6ca5e25bf8410e4f93b85f33df1217aa77f97a75e2c3748fa2325ff4b53cf53e98818e3c43450f0ac67daa447df1553597f7b295007f7baa22d595b2bfb86e"}, @generic="c91bc47a7be20316a8732bca50c3751e2fed29157bd62555daad3e8d9c5f8aa2d5a0a8cd7690ca991e22e5e0228cc9cb85a0f49091ff3eef7139f7812987e4bf305b17fb1c7d5581fa1a89b04f7dc84f449ce49de0e11ac51f153ed6f762b5c191b7d39b1df005a2235b1662a63d9d0d814e8799a38b"]}, 0x1b0}, {&(0x7f0000000ec0)={0x3d4, 0x31, 0x20, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x10a, 0x0, 0x0, @pid}, @typed={0x8, 0xbf, 0x0, 0x0, @pid}, @nested={0x4, 0x1c}, @nested={0x10, 0x133, 0x0, 0x1, [@typed={0x8, 0x12a, 0x0, 0x0, @u32=0xfffffffb}, @nested={0x4, 0x10d}]}, @nested={0x1e4, 0x76, 0x0, 0x1, [@generic="f06792687917b4cc26441620af149c59be745ba210cf05e84c90df0a84962f37acdbdc55058c2346124efc879a42c093770bc2c31b266d9517f8631d95ea9afd441042e7768f377280b497fec797b16b87c4bbecfa1b98d5dbc0ce6df33671cdbe18e5b8a594ae9bc24b5c8afd7a2d7aff7935af9d008077cdc374f41d4fe882ad62abdd391844266cdbf014ff643ea69dab4dea7401825925a8a31fc4f172c2fa43064a960eca37a69778a797df8076577ce47782fa6ef3d923c3cadb", @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x6}, @nested={0x4, 0x145}, @generic="241890e3e26cc3a35fd2c85c64df9329b3cc52cc0354e161bef2a17a95d08a1a84859365bab6a480cf7b7b5b34", @nested={0x4, 0x33}, @typed={0x7, 0x123, 0x0, 0x0, @str='(#\x00'}, @nested={0x4, 0x68}, @generic="7831bd18554537c431b7e35d8a53de82dc742c25331a5ef9b2958d66790a53226cb4de0e7a874b3f37cffd314148078a1e316955a0bbe82d618fcbea894801d9f9e9871c031ba746ac4068999f9ab2a49680e71b6d22a1f33cdc7808b660635c199ce3236e01b5a66a67ca827c73ae59f29c8c41b75edee0e62cb1d4ea4de46e6f094da0122d2b170267889c914ef0856a0879b7fe3f5e71bcc04bdc7fcbd61438531df0f1b4bda1df957354f1fa3d7a04486465f4d87abe853da625aa4d37c4130a9cd276ead621e456679a8f8e", @typed={0x8, 0xdc, 0x0, 0x0, @fd=r3}]}, @generic="2679e345ec382059759662de22ce2495b1fe9f76ae0315bc2cf6d803882b1794796dc9c5f6dd4457bc0e8e98141d4034f753bbf179260651e3999921504f5945e9159aadc772ca4a5a8cbd2173d2805038cdefe2ee4f06d4e67dd128110fb560a1017c983d33edb211fcd84588743caa1a940fde6a62d2adfeb098fdd039811ae45f7e648969cc14ea896bf76224b14d4fab33bda1a085009f5e3d421c4d290e5a00cf4497867bda", @typed={0x67, 0x137, 0x0, 0x0, @binary="dab502e8006955c3e4a3b9f0fb6461ea3cabd50572485bbbea139c92c38d9d02a716e017cd7a999d5d3ff6ba266037dec5559308ddcc42c5df5cf38b122af2ce4ea4dec55a73b352777b88b22ec47d1e30684efa38f2926a9c456e4dea95ddd77fd901"}, @generic="4ff33c2595e10c395262e885895bb796b1dfe3e646711ea7589b37f836a45e222fa1c6c85c0e7295f9f682cd3fcee8fd13af8e76dae51457da63db7a9c95c5ac2423c84c8641a033cff757680b0da717275bc93a1d2b49cac7d07188ee0fa6beba3154ff5fcbd30f22453038518f1ada4465a64dffbe77171ef7328df5dc8d631602c0c8d6f773f4709eb742e865c7614db67faf15e8fca52751656495970fa359f3063be347d20f1b"]}, 0x3d4}, {&(0x7f00000012c0)={0x10, 0x21, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x10}, {&(0x7f0000000380)={0x10, 0x3c, 0x20, 0x70bd2c, 0x25dfdbff}, 0x10}, {&(0x7f0000001600)={0xff8, 0x42, 0x1, 0x70bd25, 0x25dfdbfb, "", [@nested={0x17, 0xe6, 0x0, 0x1, [@generic, @typed={0xc, 0x37, 0x0, 0x0, @u64=0x400}, @generic="a4d20d", @nested={0x4, 0x14f}]}, @generic="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"]}, 0xff8}], 0x7}, 0x40000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) write(r5, &(0x7f0000000240)="94", 0x1) tee(r4, r8, 0x8f5, 0x100000000000000) write$cgroup_type(r8, 0x0, 0x0) write(r6, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x40006040, 0x0) ioctl$EVIOCGSND(r5, 0x8040451a, &(0x7f0000001380)=""/190) 1.63673183s ago: executing program 0 (id=2688): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000001b40)='/proc/self/attr/current\x00', 0x64, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'hugetlb'}]}, 0x9) r2 = getpid() rt_tgsigqueueinfo(r2, 0x0, 0x7, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={&(0x7f0000000140)=@qipcrtr, 0x80, 0x0}, 0x0) sendmsg$kcm(r3, &(0x7f0000001540)={&(0x7f0000000000)=@qipcrtr={0x2a, 0x3}, 0x80, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) syz_usbip_server_init(0x6) syz_usbip_server_init(0x5) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x1bd}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x80000000, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4, 0x100000}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0xfffffffc, 0xb, 0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffb}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x2, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000, 0x1}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x18000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001) 1.223389532s ago: executing program 2 (id=2691): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000240), 0x4) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r5}) 1.202097462s ago: executing program 2 (id=2692): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg0\x00'}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) 1.176575732s ago: executing program 2 (id=2694): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x3e}, @remote, @remote, 0x3, 0x2, 0x0, 0x0, 0xb7, 0x2000213, r4}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x3, 0x6, @random="cea0300a1672"}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}}) 1.146324443s ago: executing program 4 (id=2695): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg0\x00'}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) mmap(&(0x7f0000896000/0x2000)=nil, 0x2000, 0x0, 0x30, r1, 0x34f0e000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x20, 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "5b8ba256cdac970100000006db8fe637"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 1.116284343s ago: executing program 2 (id=2696): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r0, &(0x7f0000000780)=[{&(0x7f0000001440)="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", 0x1ab}], 0x1) 1.093901583s ago: executing program 2 (id=2697): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x9}, 0x0, 0x10000, 0x0, 0x6, 0x2000000000008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) r3 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f0000001880)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0x6}, &(0x7f0000000400)=0x7, 0x0, 0xf, 0x4, 0x9, 0xfffffffffffffff9, 0x22, 0x7}}], 0x58, 0x8000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x4, 0x0, 0x2, 0x7ffc1ffb}]}) syz_emit_ethernet(0x72, &(0x7f0000000280)=ANY=[], 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@mcast2}}, {{@in6=@initdev}, 0x0, @in=@private}}, 0x0) keyctl$session_to_parent(0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000040)) socket(0x10, 0x80002, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x789, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40c00) 1.042146373s ago: executing program 4 (id=2698): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000a00)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0x10000001}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a00010077"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.018087294s ago: executing program 4 (id=2699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000005300000057000e"], 0x80}}, 0x0) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000f303010000000000000000000a00000a1400"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r2, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "abaf9631b81f11154c4224db5b8ae76256d47c186c44cf9387625688c2398fec9a4f7d9685a0f410f325e5b02a3833910d16aff365622d03288587a5983ba843fcfa5ac0ea3482d1f20f417ccc9bb816206ac96bd14e0f1353a7c67964f14befec4e3ee5ebe10c09188d88db74d912b1af611ebe38d4802c11e89bb9bf4dffbd046ca69ce8de48e2d3d7"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x190}, 0x20000000) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x220000, 0x3, 0xffffeffe, 0x4, 0xebe, 0xcd}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r5, 0x7) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) io_setup(0x202, &(0x7f0000000200)) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffa) r6 = socket$kcm(0x1e, 0x4, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='skb_copy_datagram_iovec\x00', r8, 0x0, 0x8}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) shmctl$IPC_RMID(0x0, 0x13) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r10 = timerfd_create(0x0, 0x0) timerfd_settime(r10, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r10, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xe438, 0x0, 0x3}) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x101d0) 888.140675ms ago: executing program 4 (id=2700): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xec4}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xdd3) close(r2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff, 0x8}}, './file0\x00'}) 860.287225ms ago: executing program 4 (id=2701): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x8090) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) 838.671295ms ago: executing program 0 (id=2702): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_disconnect(0xffffffffffffffff) setpriority(0x1, 0x0, 0x8) 797.290475ms ago: executing program 1 (id=2703): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000c7474bba47695d921d3f37dc01f11cb9bd4c4bc82c5935062379a6783a00f36fa56e35aab774e15ba05aec95801ca41c6f093d3e04c859b8dd137ef12c4520b8b00fb175cc1b0dbe42054df96d56ff7954b22740fea5607acdacd46634ca85c2801e2f3c7e4679dfad2beed3d74451722366c7f7d27da95a7cdef88194cb98b4a1f37fae922af9eed3caf4f049108875d3da828fc0ef78d63d58a3680aafc45e2aab6984377719b0e59f3976c10f0189367b48ce79115935c2f2be428cc14a832ced1bcfd675b6d147f495648237bf622c"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000640)='nilfs2_mdt_submit_block\x00', r0, 0x0, 0xe17}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mmap(&(0x7f0000135000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xa34a3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) epoll_create(0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="030000010100000006000000000a00000f000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000500"/27], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) 381.034578ms ago: executing program 3 (id=2704): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 363.752498ms ago: executing program 3 (id=2705): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000400)={0x0, 0x1, 0xffffffffffffffff, 0x4, 0x80000}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x4}) epoll_pwait(r4, &(0x7f0000002500)=[{}], 0x1, 0x30, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505330, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000a00)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0x10000001}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1002430, &(0x7f0000000440)={[{@quota}, {@noquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r8) rmdir(&(0x7f0000000000)='./file0\x00') 327.584738ms ago: executing program 3 (id=2706): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg0\x00'}) socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00'}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x20, 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "5b8ba256cdac970100000006db8fe637"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 289.048729ms ago: executing program 1 (id=2707): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x3e}, @remote, @remote, 0x3, 0x2, 0x0, 0x0, 0xb7, 0x2000213, r4}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x3, 0x6, @random="cea0300a1672"}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}}) 277.523229ms ago: executing program 3 (id=2708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000005300000057000e"], 0x80}}, 0x0) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000f303010000000000000000000a00000a1400"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r2, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "abaf9631b81f11154c4224db5b8ae76256d47c186c44cf9387625688c2398fec9a4f7d9685a0f410f325e5b02a3833910d16aff365622d03288587a5983ba843fcfa5ac0ea3482d1f20f417ccc9bb816206ac96bd14e0f1353a7c67964f14befec4e3ee5ebe10c09188d88db74d912b1af611ebe38d4802c11e89bb9bf4dffbd046ca69ce8de48e2d3d7"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x190}, 0x20000000) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x220000, 0x3, 0xffffeffe, 0x4, 0xebe, 0xcd}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r5, 0x7) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) io_setup(0x202, &(0x7f0000000200)) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffa) r6 = socket$kcm(0x1e, 0x4, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='skb_copy_datagram_iovec\x00', r8, 0x0, 0x8}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) shmctl$IPC_RMID(0x0, 0x13) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r10 = timerfd_create(0x0, 0x0) timerfd_settime(r10, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) 241.659229ms ago: executing program 2 (id=2709): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = dup(r3) bind$unix(r4, &(0x7f00000002c0)=@abs={0xa, 0x2}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8100036c00fc08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) getsockopt$EBT_SO_GET_INFO(r6, 0x0, 0x80, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0x5, 0x93, 0x0, 0xffff, 0x200, 0xe]}, &(0x7f0000000140)=0x78) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b90402000000008000000000150010001400259070f409000d2000000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee05e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5e08001b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6cce50dd6e4edef3d939acd92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8040, 0x0) ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000001480)=0x3) 202.706569ms ago: executing program 1 (id=2710): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x31, &(0x7f00000004c0)=0x1, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) 198.298509ms ago: executing program 3 (id=2711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="80000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900040000005300000057000e"], 0x80}}, 0x0) r3 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000f303010000000000000000000a00000a1400"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb8, r2, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x8e, 0x5b, "abaf9631b81f11154c4224db5b8ae76256d47c186c44cf9387625688c2398fec9a4f7d9685a0f410f325e5b02a3833910d16aff365622d03288587a5983ba843fcfa5ac0ea3482d1f20f417ccc9bb816206ac96bd14e0f1353a7c67964f14befec4e3ee5ebe10c09188d88db74d912b1af611ebe38d4802c11e89bb9bf4dffbd046ca69ce8de48e2d3d7"}, @NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8000}]}, 0xb8}, 0x1, 0x0, 0x0, 0x190}, 0x20000000) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x220000, 0x3, 0xffffeffe, 0x4, 0xebe, 0xcd}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000280)={0x1f, @none}, 0x8) listen(r5, 0x7) connect$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) io_setup(0x202, &(0x7f0000000200)) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffa) r6 = socket$kcm(0x1e, 0x4, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000480)='skb_copy_datagram_iovec\x00', r8, 0x0, 0x8}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) shmctl$IPC_RMID(0x0, 0x13) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r10 = timerfd_create(0x0, 0x0) timerfd_settime(r10, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) read(r10, &(0x7f0000000240)=""/123, 0x7b) clock_adjtime(0x0, &(0x7f0000000040)={0xd51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xe438, 0x0, 0x3}) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x101d0) 98.01786ms ago: executing program 1 (id=2712): socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x2000000000000101, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffec6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f0000000200)}) fdatasync(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 69.82536ms ago: executing program 0 (id=2713): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) get_mempolicy(0x0, 0x0, 0x206, &(0x7f0000394000/0x3000)=nil, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000500)=[{0xf41b, 0x2d, 0x8}]}) clock_gettime(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095", @ANYRESHEX=0x0, @ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24044885}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x230, 0xffffffff, 0xffffffff, 0x230, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@state={{0x28}, {0x800}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x5, 0x4009, 0x9244, 0x7, 'snmp\x00'}}}, {{@ipv6={@remote, @private1, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xff, 0xff000000, 0x0, 0xff000000], 'vxcan1\x00', 'vxcan1\x00', {0xff}, {0xff}, 0x0, 0x2, 0x5, 0x5}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3ff, 0xd, 0x7ff, 0x0, 0x0, "d7bd804316da7dbca19fd162adf9adbee07d8f7e3807d45ccde0847a270155e522aa5396f5cddaeb8cfe19829d839a38b81b084e36444fb49debcf3011427a12"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='block_rq_requeue\x00', r0, 0x0, 0x9}, 0x18) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x280000, 0x10) epoll_create1(0x80000) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x48) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000004c0)={r7, 0x3, 0x6}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r7, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) finit_module(r3, 0x0, 0x7) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='.\x00', 0x0, 0xa00a, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) 46.12798ms ago: executing program 3 (id=2714): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg0\x00'}) socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00'}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x78, 0x30, 0xb, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_ct={0x60, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x10, 0x8}, @TCA_CT_PARMS={0x18, 0x1, {0x0, 0x20, 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "5b8ba256cdac970100000006db8fe637"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 0s ago: executing program 4 (id=2715): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) kernel console output (not intermixed with test programs): [ 193.690002][T10839] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 193.690014][T10839] RBP: 00007f52fe081f91 R08: 0000000000000000 R09: 0000000000000000 [ 193.690027][T10839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.690045][T10839] R13: 00007f52fe256038 R14: 00007f52fe255fa0 R15: 00007ffe58e7b728 [ 193.690070][T10839] [ 193.690079][T10839] memory: usage 307200kB, limit 307200kB, failcnt 657 [ 193.992442][T10839] memory+swap: usage 307364kB, limit 9007199254740988kB, failcnt 0 [ 194.114652][T10839] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 194.121954][T10839] Memory cgroup stats for /syz0: [ 194.122143][T10839] cache 0 [ 194.130121][T10839] rss 0 [ 194.132897][T10839] shmem 0 [ 194.135843][T10839] mapped_file 0 [ 194.139319][T10839] dirty 0 [ 194.142328][T10839] writeback 0 [ 194.145631][T10839] workingset_refault_anon 159 [ 194.150384][T10839] workingset_refault_file 2337 [ 194.155187][T10839] swap 167936 [ 194.158647][T10839] swapcached 24576 [ 194.162487][T10839] pgpgin 226591 [ 194.165962][T10839] pgpgout 226577 [ 194.169662][T10839] pgfault 262440 [ 194.173395][T10839] pgmajfault 97 [ 194.176973][T10839] inactive_anon 4096 [ 194.181019][T10839] active_anon 20480 [ 194.184921][T10839] inactive_file 0 [ 194.188556][T10839] active_file 32768 [ 194.192568][T10839] unevictable 0 [ 194.196104][T10839] hierarchical_memory_limit 314572800 [ 194.201463][T10839] hierarchical_memsw_limit 9223372036854771712 [ 194.207646][T10839] total_cache 0 [ 194.211100][T10839] total_rss 0 [ 194.214392][T10839] total_shmem 0 [ 194.217843][T10839] total_mapped_file 0 [ 194.221810][T10839] total_dirty 0 [ 194.225295][T10839] total_writeback 0 [ 194.229095][T10839] total_workingset_refault_anon 159 [ 194.234304][T10839] total_workingset_refault_file 2337 [ 194.239593][T10839] total_swap 167936 [ 194.243411][T10839] total_swapcached 24576 [ 194.247699][T10839] total_pgpgin 226591 [ 194.251666][T10839] total_pgpgout 226577 [ 194.255734][T10839] total_pgfault 262440 [ 194.259802][T10839] total_pgmajfault 97 [ 194.263793][T10839] total_inactive_anon 4096 [ 194.268199][T10839] total_active_anon 20480 [ 194.272553][T10839] total_inactive_file 0 [ 194.276709][T10839] total_active_file 32768 [ 194.281061][T10839] total_unevictable 0 [ 194.285082][T10839] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2009,pid=10838,uid=0 [ 194.299859][T10839] Memory cgroup out of memory: Killed process 10838 (syz.0.2009) total-vm:95872kB, anon-rss:1116kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 194.394214][T10878] loop4: detected capacity change from 0 to 1024 [ 194.407783][T10876] loop2: detected capacity change from 0 to 128 [ 194.414998][T10876] vfat: Unknown parameter 'ÿ' [ 194.423929][T10878] EXT4-fs: inline encryption not supported [ 194.434593][T10878] EXT4-fs mount: 158 callbacks suppressed [ 194.434613][T10878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.465463][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.520004][T10886] loop1: detected capacity change from 0 to 512 [ 194.534562][T10886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.547581][T10886] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.573300][T10890] loop0: detected capacity change from 0 to 512 [ 194.573832][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.604631][T10890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.617841][T10890] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 194.642207][T10892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 194.653123][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.707790][T10902] loop1: detected capacity change from 0 to 1024 [ 194.715095][T10902] EXT4-fs: Ignoring removed orlov option [ 194.724336][T10902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.732862][T10905] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 194.758729][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.801617][T10909] FAULT_INJECTION: forcing a failure. [ 194.801617][T10909] name failslab, interval 1, probability 0, space 0, times 0 [ 194.814459][T10909] CPU: 0 UID: 0 PID: 10909 Comm: gtp Not tainted syzkaller #0 PREEMPT(voluntary) [ 194.814523][T10909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 194.814535][T10909] Call Trace: [ 194.814541][T10909] [ 194.814548][T10909] __dump_stack+0x1d/0x30 [ 194.814643][T10909] dump_stack_lvl+0xe8/0x140 [ 194.814662][T10909] dump_stack+0x15/0x1b [ 194.814678][T10909] should_fail_ex+0x265/0x280 [ 194.814697][T10909] should_failslab+0x8c/0xb0 [ 194.814724][T10909] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 194.814760][T10909] ? __alloc_skb+0x101/0x320 [ 194.814826][T10909] __alloc_skb+0x101/0x320 [ 194.814851][T10909] ? audit_log_start+0x342/0x720 [ 194.814872][T10909] audit_log_start+0x3a0/0x720 [ 194.814891][T10909] ? kstrtouint+0x76/0xc0 [ 194.815009][T10909] audit_seccomp+0x48/0x100 [ 194.815056][T10909] ? __seccomp_filter+0x82d/0x1250 [ 194.815094][T10909] __seccomp_filter+0x83e/0x1250 [ 194.815163][T10909] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 194.815203][T10909] ? vfs_write+0x7e8/0x960 [ 194.815302][T10909] ? __rcu_read_unlock+0x4f/0x70 [ 194.815328][T10909] ? __fget_files+0x184/0x1c0 [ 194.815427][T10909] __secure_computing+0x82/0x150 [ 194.815531][T10909] syscall_trace_enter+0xcf/0x1e0 [ 194.815568][T10909] do_syscall_64+0xac/0x200 [ 194.815587][T10909] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 194.815621][T10909] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 194.815692][T10909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.815712][T10909] RIP: 0033:0x7f729ed0f6c9 [ 194.815726][T10909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.815781][T10909] RSP: 002b:00007f729d76f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 194.815851][T10909] RAX: ffffffffffffffda RBX: 00007f729ef65fa0 RCX: 00007f729ed0f6c9 [ 194.815897][T10909] RDX: 0000200000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 194.815908][T10909] RBP: 00007f729d76f090 R08: 0000000000000000 R09: 0000000000000000 [ 194.815925][T10909] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 194.815936][T10909] R13: 00007f729ef66038 R14: 00007f729ef65fa0 R15: 00007ffd0a1d5308 [ 194.815955][T10909] [ 195.250629][T10920] loop1: detected capacity change from 0 to 512 [ 195.280412][T10918] loop3: detected capacity change from 0 to 128 [ 195.288628][T10918] vfat: Unknown parameter 'ÿ' [ 195.294354][T10920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.315840][T10920] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.351167][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.385537][T10941] loop1: detected capacity change from 0 to 764 [ 195.392267][T10941] iso9660: Unknown parameter 'ÿÿÿÿÿÿ' [ 195.410724][T10941] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2044'. [ 195.542598][ T29] kauditd_printk_skb: 3837 callbacks suppressed [ 195.542617][ T29] audit: type=1326 audit(5288435729.294:108447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff0c89d6567 code=0x7ffc0000 [ 195.572586][ T29] audit: type=1326 audit(5288435729.294:108448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff0c897b779 code=0x7ffc0000 [ 195.596252][ T29] audit: type=1326 audit(5288435729.294:108449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 195.620054][ T29] audit: type=1326 audit(5288435729.294:108450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0c8a11f85 code=0x7ffc0000 [ 195.643799][ T29] audit: type=1326 audit(5288435729.294:108451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0c8a11f85 code=0x7ffc0000 [ 195.667661][ T29] audit: type=1326 audit(5288435729.294:108452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0c8a11f85 code=0x7ffc0000 [ 195.691439][ T29] audit: type=1326 audit(5288435729.294:108453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0c8a11f85 code=0x7ffc0000 [ 195.715242][ T29] audit: type=1326 audit(5288435729.294:108454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0c8a11f85 code=0x7ffc0000 [ 195.738966][ T29] audit: type=1326 audit(5288435729.294:108455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0c8a11f85 code=0x7ffc0000 [ 195.762669][ T29] audit: type=1326 audit(5288435729.294:108456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10917 comm="syz.3.2036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff0c89d6567 code=0x7ffc0000 [ 195.800786][T10960] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2052'. [ 195.810576][T10960] netlink: 7 bytes leftover after parsing attributes in process `syz.4.2052'. [ 195.903336][T10961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.913822][T10961] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.930977][ T36] syz1: Port: 1 Link ACTIVE [ 196.029920][T10967] loop4: detected capacity change from 0 to 512 [ 196.044583][T10967] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.057779][T10967] ext4 filesystem being mounted at /446/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.082344][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.107801][T10973] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 196.123700][T10975] FAULT_INJECTION: forcing a failure. [ 196.123700][T10975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.136830][T10975] CPU: 0 UID: 0 PID: 10975 Comm: syz.4.2058 Not tainted syzkaller #0 PREEMPT(voluntary) [ 196.136973][T10975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.136990][T10975] Call Trace: [ 196.136997][T10975] [ 196.137008][T10975] __dump_stack+0x1d/0x30 [ 196.137038][T10975] dump_stack_lvl+0xe8/0x140 [ 196.137059][T10975] dump_stack+0x15/0x1b [ 196.137078][T10975] should_fail_ex+0x265/0x280 [ 196.137190][T10975] should_fail+0xb/0x20 [ 196.137204][T10975] should_fail_usercopy+0x1a/0x20 [ 196.137254][T10975] _copy_from_user+0x1c/0xb0 [ 196.137307][T10975] btf_new_fd+0x20f/0x790 [ 196.137349][T10975] bpf_btf_load+0x112/0x130 [ 196.137371][T10975] __sys_bpf+0x357/0x7c0 [ 196.137396][T10975] __x64_sys_bpf+0x41/0x50 [ 196.137425][T10975] x64_sys_call+0x2aee/0x3000 [ 196.137518][T10975] do_syscall_64+0xd2/0x200 [ 196.137608][T10975] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 196.137634][T10975] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 196.137666][T10975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.137685][T10975] RIP: 0033:0x7f5f88ebf6c9 [ 196.137767][T10975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.137784][T10975] RSP: 002b:00007f5f87927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.137802][T10975] RAX: ffffffffffffffda RBX: 00007f5f89115fa0 RCX: 00007f5f88ebf6c9 [ 196.137855][T10975] RDX: 0000000000000028 RSI: 0000200000000100 RDI: 0000000000000012 [ 196.137867][T10975] RBP: 00007f5f87927090 R08: 0000000000000000 R09: 0000000000000000 [ 196.137878][T10975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.137889][T10975] R13: 00007f5f89116038 R14: 00007f5f89115fa0 R15: 00007ffe4b723b08 [ 196.137908][T10975] [ 196.352467][T10979] loop4: detected capacity change from 0 to 512 [ 196.381563][T10982] can0: slcan on ttyS3. [ 196.442542][T10982] can0 (unregistered): slcan off ttyS3. [ 196.456578][T10991] loop4: detected capacity change from 0 to 512 [ 196.488460][T10993] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.505912][T10998] loop0: detected capacity change from 0 to 512 [ 196.512803][T11001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 196.534165][T10991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.551379][T10998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.564126][T10998] ext4 filesystem being mounted at /378/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.574485][T10991] ext4 filesystem being mounted at /451/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.600297][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.610171][T11009] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 196.637691][T10991] netlink: 'syz.4.2064': attribute type 4 has an invalid length. [ 196.694766][T11012] netlink: 'syz.4.2064': attribute type 4 has an invalid length. [ 196.749414][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.120405][T11038] loop3: detected capacity change from 0 to 512 [ 197.134958][T11038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.148186][T11038] ext4 filesystem being mounted at /431/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.175600][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.196993][T11042] loop9: detected capacity change from 0 to 7 [ 197.203390][T11042] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.211470][T11042] Buffer I/O error on dev loop9, logical block 0, async page read [ 197.219468][T11042] loop9: unable to read partition table [ 197.225407][T11042] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 197.225407][T11042] ) failed (rc=-5) [ 197.352002][T11044] loop3: detected capacity change from 0 to 512 [ 197.458265][T11053] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 197.496916][T11052] atomic_op ffff888144263128 conn xmit_atomic 0000000000000000 [ 197.569310][T11054] loop3: detected capacity change from 0 to 2048 [ 197.584193][T11054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.641353][T11058] loop4: detected capacity change from 0 to 512 [ 197.654691][T11058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.667637][T11058] ext4 filesystem being mounted at /456/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.684339][T11058] netlink: 'syz.4.2089': attribute type 4 has an invalid length. [ 197.735590][T11058] netlink: 'syz.4.2089': attribute type 4 has an invalid length. [ 197.771954][T11064] loop0: detected capacity change from 0 to 8192 [ 197.792191][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.814791][T11066] loop4: detected capacity change from 0 to 1024 [ 197.822084][T11066] EXT4-fs: Ignoring removed orlov option [ 197.854020][T11066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.888997][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.950115][T11075] loop2: detected capacity change from 0 to 512 [ 197.964288][T11075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.977035][T11075] ext4 filesystem being mounted at /422/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.000704][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.019292][ T3407] IPVS: starting estimator thread 0... [ 198.025126][T11081] loop2: detected capacity change from 0 to 512 [ 198.056105][T11081] EXT4-fs error (device loop2): ext4_quota_enable:7136: inode #3: comm syz.2.2096: unexpected EA_INODE flag [ 198.068395][T11081] EXT4-fs (loop2): Remounting filesystem read-only [ 198.075161][T11081] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 198.083633][T11086] loop0: detected capacity change from 0 to 512 [ 198.090427][T11081] EXT4-fs (loop2): mount failed [ 198.108830][T11081] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 198.125908][T11082] IPVS: using max 2352 ests per chain, 117600 per kthread [ 198.135441][T11073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2094'. [ 198.144517][T11073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2094'. [ 198.153588][T11073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2094'. [ 198.164676][T11073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2094'. [ 198.199272][T11096] loop0: detected capacity change from 0 to 1024 [ 198.206156][T11096] EXT4-fs: inline encryption not supported [ 198.216006][T11098] loop2: detected capacity change from 0 to 512 [ 198.224383][T11096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.245476][T11098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.261591][T11098] ext4 filesystem being mounted at /426/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.272554][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.289336][T11098] netlink: 'syz.2.2102': attribute type 4 has an invalid length. [ 198.328436][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.339552][T11109] netlink: 'syz.2.2102': attribute type 4 has an invalid length. [ 198.354301][T11108] bridge0: port 3(macsec1) entered blocking state [ 198.360807][T11108] bridge0: port 3(macsec1) entered disabled state [ 198.367928][T11108] macsec1: entered allmulticast mode [ 198.373351][T11108] bridge0: entered allmulticast mode [ 198.379127][T11108] macsec1: left allmulticast mode [ 198.384256][T11108] bridge0: left allmulticast mode [ 198.401347][T11111] loop3: detected capacity change from 0 to 128 [ 198.410627][T11111] vfat: Unknown parameter 'ÿ' [ 198.422470][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.445299][T11114] loop2: detected capacity change from 0 to 1024 [ 198.452102][T11114] EXT4-fs: Ignoring removed orlov option [ 198.463658][T11114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.497783][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.573388][T11118] loop1: detected capacity change from 0 to 8192 [ 198.635925][T11133] loop2: detected capacity change from 0 to 512 [ 198.687377][T11135] loop2: detected capacity change from 0 to 512 [ 198.730988][T11139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2114'. [ 198.742827][T11139] loop1: detected capacity change from 0 to 128 [ 198.750394][T11139] msdos filesystem being mounted at /394/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 198.800946][T11146] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.217438][T11166] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.428051][T11180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 199.914518][T11188] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 199.926790][T11190] loop3: detected capacity change from 0 to 128 [ 199.970100][T11173] syz.4.2126 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 199.984464][T11173] CPU: 0 UID: 0 PID: 11173 Comm: syz.4.2126 Not tainted syzkaller #0 PREEMPT(voluntary) [ 199.984557][T11173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 199.984575][T11173] Call Trace: [ 199.984584][T11173] [ 199.984600][T11173] __dump_stack+0x1d/0x30 [ 199.984630][T11173] dump_stack_lvl+0xe8/0x140 [ 199.984657][T11173] dump_stack+0x15/0x1b [ 199.984680][T11173] dump_header+0x81/0x220 [ 199.984699][T11173] oom_kill_process+0x342/0x400 [ 199.984740][T11173] out_of_memory+0x979/0xb80 [ 199.984796][T11173] try_charge_memcg+0x610/0xa10 [ 199.984865][T11173] obj_cgroup_charge_pages+0xa6/0x150 [ 199.984896][T11173] __memcg_kmem_charge_page+0x9f/0x170 [ 199.985003][T11173] __alloc_frozen_pages_noprof+0x188/0x360 [ 199.985030][T11173] alloc_pages_mpol+0xb3/0x260 [ 199.985060][T11173] ? alloc_pages_noprof+0x61/0x130 [ 199.985092][T11173] alloc_pages_noprof+0x90/0x130 [ 199.985124][T11173] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 199.985210][T11173] __kvmalloc_node_noprof+0x483/0x670 [ 199.985266][T11173] ? ip_set_alloc+0x24/0x30 [ 199.985300][T11173] ? ip_set_alloc+0x24/0x30 [ 199.985333][T11173] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 199.985442][T11173] ip_set_alloc+0x24/0x30 [ 199.985476][T11173] hash_netiface_create+0x282/0x740 [ 199.985515][T11173] ? __pfx_hash_netiface_create+0x10/0x10 [ 199.985555][T11173] ip_set_create+0x3cc/0x970 [ 199.985661][T11173] ? __nla_parse+0x40/0x60 [ 199.985687][T11173] nfnetlink_rcv_msg+0x4c6/0x590 [ 199.985743][T11173] netlink_rcv_skb+0x123/0x220 [ 199.985889][T11173] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 199.985998][T11173] nfnetlink_rcv+0x167/0x16c0 [ 199.986027][T11173] ? kmem_cache_free+0xe4/0x3d0 [ 199.986064][T11173] ? __kfree_skb+0x109/0x150 [ 199.986100][T11173] ? nlmon_xmit+0x4f/0x60 [ 199.986168][T11173] ? consume_skb+0x49/0x150 [ 199.986201][T11173] ? nlmon_xmit+0x4f/0x60 [ 199.986290][T11173] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 199.986334][T11173] ? __dev_queue_xmit+0x1200/0x2000 [ 199.986394][T11173] ? __dev_queue_xmit+0x182/0x2000 [ 199.986416][T11173] ? ref_tracker_free+0x37d/0x3e0 [ 199.986565][T11173] ? __netlink_deliver_tap+0x4dc/0x500 [ 199.986645][T11173] netlink_unicast+0x5c0/0x690 [ 199.986682][T11173] netlink_sendmsg+0x58b/0x6b0 [ 199.986724][T11173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.986748][T11173] __sock_sendmsg+0x145/0x180 [ 199.986866][T11173] ____sys_sendmsg+0x31e/0x4e0 [ 199.986908][T11173] ___sys_sendmsg+0x17b/0x1d0 [ 199.986944][T11173] __x64_sys_sendmsg+0xd4/0x160 [ 199.986971][T11173] x64_sys_call+0x191e/0x3000 [ 199.987063][T11173] do_syscall_64+0xd2/0x200 [ 199.987086][T11173] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 199.987121][T11173] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 199.987168][T11173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.987191][T11173] RIP: 0033:0x7f5f88ebf6c9 [ 199.987208][T11173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.987227][T11173] RSP: 002b:00007f5f87906038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.987248][T11173] RAX: ffffffffffffffda RBX: 00007f5f89116090 RCX: 00007f5f88ebf6c9 [ 199.987262][T11173] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000a [ 199.987276][T11173] RBP: 00007f5f88f41f91 R08: 0000000000000000 R09: 0000000000000000 [ 199.987320][T11173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 199.987403][T11173] R13: 00007f5f89116128 R14: 00007f5f89116090 R15: 00007ffe4b723b08 [ 199.987434][T11173] [ 199.987446][T11173] memory: usage 307200kB, limit 307200kB, failcnt 354 [ 200.000537][T11190] msdos filesystem being mounted at /439/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 200.007442][T11173] memory+swap: usage 369024kB, limit 9007199254740988kB, failcnt 0 [ 200.007471][T11173] kmem: usage 307156kB, limit 9007199254740988kB, failcnt 0 [ 200.218130][T11194] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 200.221005][T11173] Memory cgroup stats for /syz4: [ 200.373719][T11173] cache 0 [ 200.381771][T11173] rss 8192 [ 200.384853][T11173] shmem 0 [ 200.387802][T11173] mapped_file 0 [ 200.391281][T11173] dirty 0 [ 200.394341][T11173] writeback 0 [ 200.397686][T11173] workingset_refault_anon 55 [ 200.402348][T11173] workingset_refault_file 697 [ 200.407033][T11173] swap 63311872 [ 200.410501][T11173] swapcached 12288 [ 200.414265][T11173] pgpgin 291863 [ 200.417738][T11173] pgpgout 291853 [ 200.421286][T11173] pgfault 318552 [ 200.424859][T11173] pgmajfault 58 [ 200.428329][T11173] inactive_anon 8192 [ 200.432290][T11173] active_anon 0 [ 200.435830][T11173] inactive_file 0 [ 200.439485][T11173] active_file 28672 [ 200.443394][T11173] unevictable 0 [ 200.446860][T11173] hierarchical_memory_limit 314572800 [ 200.452274][T11173] hierarchical_memsw_limit 9223372036854771712 [ 200.458513][T11173] total_cache 0 [ 200.462005][T11173] total_rss 8192 [ 200.465571][T11173] total_shmem 0 [ 200.469047][T11173] total_mapped_file 0 [ 200.473070][T11173] total_dirty 0 [ 200.476630][T11173] total_writeback 0 [ 200.480469][T11173] total_workingset_refault_anon 55 [ 200.485647][T11173] total_workingset_refault_file 697 [ 200.490937][T11173] total_swap 63311872 [ 200.494940][T11173] total_swapcached 12288 [ 200.499370][T11173] total_pgpgin 291863 [ 200.503560][T11173] total_pgpgout 291853 [ 200.507678][T11173] total_pgfault 318552 [ 200.511761][T11173] total_pgmajfault 58 [ 200.515777][T11173] total_inactive_anon 8192 [ 200.520206][T11173] total_active_anon 0 [ 200.524288][T11173] total_inactive_file 0 [ 200.528457][T11173] total_active_file 28672 [ 200.532852][T11173] total_unevictable 0 [ 200.536894][T11173] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2126,pid=11169,uid=0 [ 200.549988][T11191] lo speed is unknown, defaulting to 1000 [ 200.551638][T11173] Memory cgroup out of memory: Killed process 11169 (syz.4.2126) total-vm:93956kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 200.606727][T11196] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 200.635470][ T29] kauditd_printk_skb: 2930 callbacks suppressed [ 200.635488][ T29] audit: type=1326 audit(5288435734.380:111387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fdfff6c9 code=0x7ffc0000 [ 200.690215][ T29] audit: type=1326 audit(5288435734.420:111388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52fdfff6c9 code=0x7ffc0000 [ 200.714086][ T29] audit: type=1326 audit(5288435734.420:111389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fdfff6c9 code=0x7ffc0000 [ 200.737914][ T29] audit: type=1326 audit(5288435734.420:111390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52fdfff6c9 code=0x7ffc0000 [ 200.761618][ T29] audit: type=1326 audit(5288435734.420:111391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fdfff6c9 code=0x7ffc0000 [ 200.785412][ T29] audit: type=1326 audit(5288435734.420:111392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f52fdfff6c9 code=0x7ffc0000 [ 200.809218][ T29] audit: type=1326 audit(5288435734.420:111393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fdfff6c9 code=0x7ffc0000 [ 200.832982][ T29] audit: type=1326 audit(5288435734.420:111394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52fdfff6c9 code=0x7ffc0000 [ 200.850131][T11201] loop2: detected capacity change from 0 to 2048 [ 200.856708][ T29] audit: type=1326 audit(5288435734.420:111395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52fdfff6c9 code=0x7ffc0000 [ 200.886687][ T29] audit: type=1326 audit(5288435734.420:111396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11197 comm="syz.0.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f52fdfff6c9 code=0x7ffc0000 [ 200.937876][T11201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.954793][T11201] ext4 filesystem being mounted at /436/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.989491][T11201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.998602][T11201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.006821][T11211] FAULT_INJECTION: forcing a failure. [ 201.006821][T11211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.012978][T11201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2138'. [ 201.019961][T11211] CPU: 0 UID: 0 PID: 11211 Comm: syz.3.2140 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.020000][T11211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.020021][T11211] Call Trace: [ 201.020030][T11211] [ 201.020041][T11211] __dump_stack+0x1d/0x30 [ 201.020116][T11211] dump_stack_lvl+0xe8/0x140 [ 201.020146][T11211] dump_stack+0x15/0x1b [ 201.020172][T11211] should_fail_ex+0x265/0x280 [ 201.020248][T11211] should_fail+0xb/0x20 [ 201.020271][T11211] should_fail_usercopy+0x1a/0x20 [ 201.020303][T11211] _copy_to_user+0x20/0xa0 [ 201.020341][T11211] simple_read_from_buffer+0xb5/0x130 [ 201.020447][T11211] proc_fail_nth_read+0x10e/0x150 [ 201.020522][T11211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 201.020567][T11211] vfs_read+0x1a8/0x770 [ 201.020600][T11211] ? __rcu_read_unlock+0x4f/0x70 [ 201.020638][T11211] ? __fget_files+0x184/0x1c0 [ 201.020756][T11211] ksys_read+0xda/0x1a0 [ 201.020794][T11211] __x64_sys_read+0x40/0x50 [ 201.020830][T11211] x64_sys_call+0x27c0/0x3000 [ 201.020918][T11211] do_syscall_64+0xd2/0x200 [ 201.020948][T11211] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 201.020990][T11211] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 201.021084][T11211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.021151][T11211] RIP: 0033:0x7ff0c89de0dc [ 201.021172][T11211] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 201.021255][T11211] RSP: 002b:00007ff0c7447030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 201.021282][T11211] RAX: ffffffffffffffda RBX: 00007ff0c8c35fa0 RCX: 00007ff0c89de0dc [ 201.021300][T11211] RDX: 000000000000000f RSI: 00007ff0c74470a0 RDI: 0000000000000006 [ 201.021318][T11211] RBP: 00007ff0c7447090 R08: 0000000000000000 R09: 0000000000000000 [ 201.021336][T11211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.021353][T11211] R13: 00007ff0c8c36038 R14: 00007ff0c8c35fa0 R15: 00007ffeb40e75c8 [ 201.021387][T11211] [ 201.164989][T11213] loop3: detected capacity change from 0 to 512 [ 201.570606][T11236] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 201.887754][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.917675][T11238] loop2: detected capacity change from 0 to 512 [ 201.933989][T11238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.947248][T11238] ext4 filesystem being mounted at /437/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 202.003375][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.066487][T11251] 8021q: VLANs not supported on ip6_vti0 [ 202.569039][T11243] syz.4.2151 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 202.580119][T11243] CPU: 0 UID: 0 PID: 11243 Comm: syz.4.2151 Not tainted syzkaller #0 PREEMPT(voluntary) [ 202.580148][T11243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.580160][T11243] Call Trace: [ 202.580168][T11243] [ 202.580184][T11243] __dump_stack+0x1d/0x30 [ 202.580210][T11243] dump_stack_lvl+0xe8/0x140 [ 202.580234][T11243] dump_stack+0x15/0x1b [ 202.580261][T11243] dump_header+0x81/0x220 [ 202.580282][T11243] oom_kill_process+0x342/0x400 [ 202.580366][T11243] out_of_memory+0x979/0xb80 [ 202.580404][T11243] try_charge_memcg+0x610/0xa10 [ 202.580466][T11243] charge_memcg+0x51/0xc0 [ 202.580493][T11243] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 202.580569][T11243] __read_swap_cache_async+0x17b/0x2d0 [ 202.580598][T11243] swap_cluster_readahead+0x262/0x3c0 [ 202.580631][T11243] swapin_readahead+0xde/0x6f0 [ 202.580660][T11243] ? __rcu_read_unlock+0x4f/0x70 [ 202.580753][T11243] ? __rcu_read_unlock+0x4f/0x70 [ 202.580783][T11243] ? swap_cache_get_folio+0x277/0x280 [ 202.580809][T11243] do_swap_page+0x2ae/0x2370 [ 202.580834][T11243] ? _raw_spin_unlock+0x26/0x50 [ 202.580860][T11243] ? finish_task_switch+0xad/0x2b0 [ 202.580929][T11243] ? __pfx_default_wake_function+0x10/0x10 [ 202.580962][T11243] handle_mm_fault+0x9a5/0x2be0 [ 202.581004][T11243] ? vma_start_read+0x141/0x1f0 [ 202.581040][T11243] do_user_addr_fault+0x630/0x1080 [ 202.581063][T11243] ? fpregs_restore_userregs+0xe2/0x1d0 [ 202.581208][T11243] ? switch_fpu_return+0xe/0x20 [ 202.581240][T11243] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 202.581413][T11243] exc_page_fault+0x62/0xa0 [ 202.581450][T11243] asm_exc_page_fault+0x26/0x30 [ 202.581469][T11243] RIP: 0033:0x7f5f88d9593c [ 202.581484][T11243] Code: 66 0f 1f 44 00 00 69 3d 76 fd ea 00 e8 03 00 00 48 8d 1d 77 06 38 00 e8 f2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 202.581579][T11243] RSP: 002b:00007ffe4b723c70 EFLAGS: 00010202 [ 202.581597][T11243] RAX: 0000000000000000 RBX: 00007f5f89115fa0 RCX: 0000000000000000 [ 202.581612][T11243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558efc8808 [ 202.581630][T11243] RBP: 00007f5f89117da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 202.581647][T11243] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000031821 [ 202.581662][T11243] R13: 00007ffe4b723d60 R14: ffffffffffffffff R15: 00007ffe4b723d80 [ 202.581689][T11243] [ 202.814339][T11243] memory: usage 307200kB, limit 307200kB, failcnt 766 [ 202.821174][T11243] memory+swap: usage 369032kB, limit 9007199254740988kB, failcnt 0 [ 202.829083][T11243] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 202.836392][T11243] Memory cgroup stats for /syz4: [ 202.836741][T11243] cache 0 [ 202.844706][T11243] rss 0 [ 202.847557][T11243] shmem 0 [ 202.850510][T11243] mapped_file 0 [ 202.854023][T11243] dirty 0 [ 202.856977][T11243] writeback 4096 [ 202.860544][T11243] workingset_refault_anon 78 [ 202.865296][T11243] workingset_refault_file 1345 [ 202.870075][T11243] swap 63315968 [ 202.873587][T11243] swapcached 8192 [ 202.877230][T11243] pgpgin 292645 [ 202.880700][T11243] pgpgout 292636 [ 202.884359][T11243] pgfault 318881 [ 202.887918][T11243] pgmajfault 81 [ 202.891384][T11243] inactive_anon 8192 [ 202.895319][T11243] active_anon 0 [ 202.898809][T11243] inactive_file 28672 [ 202.902818][T11243] active_file 0 [ 202.906370][T11243] unevictable 0 [ 202.909839][T11243] hierarchical_memory_limit 314572800 [ 202.915346][T11243] hierarchical_memsw_limit 9223372036854771712 [ 202.921519][T11243] total_cache 0 [ 202.925028][T11243] total_rss 0 [ 202.928322][T11243] total_shmem 0 [ 202.931819][T11243] total_mapped_file 0 [ 202.935820][T11243] total_dirty 0 [ 202.939316][T11243] total_writeback 4096 [ 202.943422][T11243] total_workingset_refault_anon 78 [ 202.948561][T11243] total_workingset_refault_file 1345 [ 202.953896][T11243] total_swap 63315968 [ 202.957888][T11243] total_swapcached 8192 [ 202.962082][T11243] total_pgpgin 292645 [ 202.966077][T11243] total_pgpgout 292636 [ 202.970200][T11243] total_pgfault 318881 [ 202.974660][T11243] total_pgmajfault 81 [ 202.978679][T11243] total_inactive_anon 8192 [ 202.983148][T11243] total_active_anon 0 [ 202.987149][T11243] total_inactive_file 28672 [ 202.991705][T11243] total_active_file 0 [ 202.995699][T11243] total_unevictable 0 [ 202.999707][T11243] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2151,pid=11243,uid=0 [ 203.014509][T11243] Memory cgroup out of memory: Killed process 11243 (syz.4.2151) total-vm:93956kB, anon-rss:1132kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 203.148888][T11284] loop2: detected capacity change from 0 to 1024 [ 203.156265][T11284] EXT4-fs: Ignoring removed orlov option [ 203.181648][T11284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.209983][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.268399][T11292] loop4: detected capacity change from 0 to 128 [ 203.275794][T11292] vfat: Unknown parameter 'ÿ' [ 203.329270][T11299] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 203.329532][T11303] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 203.335830][T11299] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 203.335956][T11299] vhci_hcd vhci_hcd.0: Device attached [ 203.358965][T11301] loop0: detected capacity change from 0 to 512 [ 203.361424][T11299] vhci_hcd vhci_hcd.0: port 0 already used [ 203.384703][T11301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.398284][T11301] ext4 filesystem being mounted at /405/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.426505][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.476547][T11302] vhci_hcd: connection closed [ 203.476842][ T3502] vhci_hcd: stop threads [ 203.485945][ T3502] vhci_hcd: release socket [ 203.490373][ T3502] vhci_hcd: disconnect device [ 203.498399][T11310] atomic_op ffff88810412f528 conn xmit_atomic 0000000000000000 [ 204.230041][T11332] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 204.422280][T11338] netlink: 54775 bytes leftover after parsing attributes in process `syz.4.2187'. [ 204.445827][T11340] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 204.452413][T11340] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 204.460565][T11340] vhci_hcd vhci_hcd.0: Device attached [ 204.474314][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2187'. [ 204.496957][T11347] vhci_hcd vhci_hcd.0: port 0 already used [ 204.599469][T11354] loop3: detected capacity change from 0 to 128 [ 204.628628][T11354] vfat: Unknown parameter 'ÿ' [ 204.709835][T11341] vhci_hcd: connection closed [ 204.710008][ T3438] vhci_hcd: stop threads [ 204.719023][ T3438] vhci_hcd: release socket [ 204.723481][ T3438] vhci_hcd: disconnect device [ 204.741429][ T36] usb 2-1: enqueue for inactive port 0 [ 204.891152][T11357] ip6gretap0: entered promiscuous mode [ 204.897735][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2192'. [ 204.940361][T11361] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 204.951568][ T36] usb 2-1: enqueue for inactive port 0 [ 205.164833][T11373] loop4: detected capacity change from 0 to 512 [ 205.183468][T11373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.196311][T11373] ext4 filesystem being mounted at /475/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.213189][T11373] netlink: 'syz.4.2198': attribute type 4 has an invalid length. [ 205.232234][T11373] netlink: 'syz.4.2198': attribute type 4 has an invalid length. [ 205.295611][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.339618][T11384] loop0: detected capacity change from 0 to 512 [ 205.346429][T11382] loop4: detected capacity change from 0 to 512 [ 205.367666][T11384] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.380405][T11384] ext4 filesystem being mounted at /410/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 205.422441][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.433257][T11390] loop4: detected capacity change from 0 to 1024 [ 205.440059][T11390] EXT4-fs: Ignoring removed orlov option [ 205.462839][T11390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.488141][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.543986][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2208'. [ 205.606952][T11405] loop4: detected capacity change from 0 to 128 [ 205.619299][T11405] vfat: Unknown parameter 'ÿ' [ 205.641485][ T29] kauditd_printk_skb: 2208 callbacks suppressed [ 205.641502][ T29] audit: type=1326 audit(5288435739.391:113603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f88eb6567 code=0x7ffc0000 [ 205.671633][ T29] audit: type=1326 audit(5288435739.391:113604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f88e5b779 code=0x7ffc0000 [ 205.695401][ T29] audit: type=1326 audit(5288435739.391:113605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f5f88ebf6c9 code=0x7ffc0000 [ 205.719052][ T29] audit: type=1326 audit(5288435739.391:113606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f88eb6567 code=0x7ffc0000 [ 205.742688][ T29] audit: type=1326 audit(5288435739.391:113607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f88e5b779 code=0x7ffc0000 [ 205.766273][ T29] audit: type=1326 audit(5288435739.391:113608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f5f88ebf6c9 code=0x7ffc0000 [ 205.790157][ T29] audit: type=1326 audit(5288435739.391:113609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f88eb6567 code=0x7ffc0000 [ 205.813744][ T29] audit: type=1326 audit(5288435739.391:113610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f88e5b779 code=0x7ffc0000 [ 205.837454][ T29] audit: type=1326 audit(5288435739.391:113611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f5f88ebf6c9 code=0x7ffc0000 [ 205.861172][ T29] audit: type=1326 audit(5288435739.391:113612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11404 comm="syz.4.2209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5f88eb6567 code=0x7ffc0000 [ 205.936684][T11409] loop2: detected capacity change from 0 to 512 [ 205.953716][T11407] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 205.960284][T11407] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 205.968584][T11407] vhci_hcd vhci_hcd.0: Device attached [ 205.976725][T11407] vhci_hcd vhci_hcd.0: port 0 already used [ 205.993514][T11409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.014667][T11409] ext4 filesystem being mounted at /449/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.046667][T11409] netlink: 'syz.2.2211': attribute type 4 has an invalid length. [ 206.097736][T11417] netlink: 'syz.2.2211': attribute type 4 has an invalid length. [ 206.106342][T11398] syz.3.2207 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 206.112132][ T36] usb usb2-port1: attempt power cycle [ 206.120516][T11398] CPU: 0 UID: 0 PID: 11398 Comm: syz.3.2207 Not tainted syzkaller #0 PREEMPT(voluntary) [ 206.120635][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 206.120654][T11398] Call Trace: [ 206.120733][T11398] [ 206.120744][T11398] __dump_stack+0x1d/0x30 [ 206.120778][T11398] dump_stack_lvl+0xe8/0x140 [ 206.120809][T11398] dump_stack+0x15/0x1b [ 206.120836][T11398] dump_header+0x81/0x220 [ 206.120864][T11398] oom_kill_process+0x342/0x400 [ 206.120941][T11398] out_of_memory+0x979/0xb80 [ 206.121010][T11398] try_charge_memcg+0x610/0xa10 [ 206.121064][T11398] obj_cgroup_charge_pages+0xa6/0x150 [ 206.121095][T11398] __memcg_kmem_charge_page+0x9f/0x170 [ 206.121129][T11398] __alloc_frozen_pages_noprof+0x188/0x360 [ 206.121164][T11398] alloc_pages_mpol+0xb3/0x260 [ 206.121259][T11398] ? alloc_pages_noprof+0xf4/0x130 [ 206.121294][T11398] alloc_pages_noprof+0x90/0x130 [ 206.121327][T11398] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 206.121443][T11398] __kvmalloc_node_noprof+0x483/0x670 [ 206.121494][T11398] ? ip_set_alloc+0x24/0x30 [ 206.121540][T11398] ? ip_set_alloc+0x24/0x30 [ 206.121585][T11398] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 206.121638][T11398] ip_set_alloc+0x24/0x30 [ 206.121757][T11398] hash_netiface_create+0x282/0x740 [ 206.121810][T11398] ? __pfx_hash_netiface_create+0x10/0x10 [ 206.121862][T11398] ip_set_create+0x3cc/0x970 [ 206.121906][T11398] ? __nla_parse+0x40/0x60 [ 206.122023][T11398] nfnetlink_rcv_msg+0x4c6/0x590 [ 206.122102][T11398] netlink_rcv_skb+0x123/0x220 [ 206.122159][T11398] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 206.122210][T11398] nfnetlink_rcv+0x167/0x16c0 [ 206.122317][T11398] ? insn_get_opcode+0x7dd/0x890 [ 206.122351][T11398] ? insn_get_modrm+0x367/0x390 [ 206.122377][T11398] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 206.122444][T11398] ? __rcu_read_lock+0x37/0x50 [ 206.122482][T11398] ? __schedule+0xa12/0xb30 [ 206.122519][T11398] ? __pte_offset_map_lock+0x1d4/0x230 [ 206.122570][T11398] ? do_sync_core+0x39/0x60 [ 206.122656][T11398] ? smp_call_function_many_cond+0x7f8/0xc60 [ 206.122759][T11398] ? __pfx_do_sync_core+0x10/0x10 [ 206.122809][T11398] ? should_fail_ex+0x30/0x280 [ 206.122837][T11398] ? selinux_nlmsg_lookup+0x99/0x890 [ 206.122877][T11398] ? __rcu_read_unlock+0x34/0x70 [ 206.122983][T11398] ? __netlink_lookup+0x266/0x2a0 [ 206.123018][T11398] netlink_unicast+0x5c0/0x690 [ 206.123067][T11398] netlink_sendmsg+0x58b/0x6b0 [ 206.123100][T11398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.123187][T11398] __sock_sendmsg+0x145/0x180 [ 206.123227][T11398] ____sys_sendmsg+0x31e/0x4e0 [ 206.123329][T11398] ___sys_sendmsg+0x17b/0x1d0 [ 206.123379][T11398] __x64_sys_sendmsg+0xd4/0x160 [ 206.123415][T11398] x64_sys_call+0x191e/0x3000 [ 206.123457][T11398] do_syscall_64+0xd2/0x200 [ 206.123488][T11398] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 206.123608][T11398] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 206.123666][T11398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.123700][T11398] RIP: 0033:0x7ff0c89df6c9 [ 206.123787][T11398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.123814][T11398] RSP: 002b:00007ff0c7447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.123842][T11398] RAX: ffffffffffffffda RBX: 00007ff0c8c35fa0 RCX: 00007ff0c89df6c9 [ 206.123861][T11398] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 206.123879][T11398] RBP: 00007ff0c8a61f91 R08: 0000000000000000 R09: 0000000000000000 [ 206.123898][T11398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.123916][T11398] R13: 00007ff0c8c36038 R14: 00007ff0c8c35fa0 R15: 00007ffeb40e75c8 [ 206.123945][T11398] [ 206.124069][T11398] memory: usage 307200kB, limit 307200kB, failcnt 299 [ 206.261233][ T3407] usb 4-1: SetAddress Request (27) to port 0 [ 206.261468][T11398] memory+swap: usage 307380kB, limit 9007199254740988kB, failcnt 0 [ 206.265962][ T3407] usb 4-1: new SuperSpeed USB device number 27 using vhci_hcd [ 206.270795][T11398] kmem: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 206.270810][T11398] Memory cgroup stats for /syz3: [ 206.294517][T11398] cache 0 [ 206.405249][T11422] loop0: detected capacity change from 0 to 512 [ 206.407455][T11398] rss 0 [ 206.407466][T11398] shmem 0 [ 206.407475][T11398] mapped_file 0 [ 206.407485][T11398] dirty 0 [ 206.414143][T11410] vhci_hcd: connection closed [ 206.417831][T11398] writeback 0 [ 206.417844][T11398] workingset_refault_anon 59 [ 206.417855][T11398] workingset_refault_file 442 [ 206.511237][ T3438] vhci_hcd: stop threads [ 206.517504][T11398] swap 184320 [ 206.517515][T11398] swapcached 4096 [ 206.517524][T11398] pgpgin 259175 [ 206.517532][T11398] pgpgout 259161 [ 206.517541][T11398] pgfault 303210 [ 206.517549][T11398] pgmajfault 30 [ 206.517558][T11398] inactive_anon 0 [ 206.517566][T11398] active_anon 4096 [ 206.517585][T11398] inactive_file 0 [ 206.517595][T11398] active_file 53248 [ 206.517605][T11398] unevictable 0 [ 206.524958][ T3438] vhci_hcd: release socket [ 206.529863][T11398] hierarchical_memory_limit 314572800 [ 206.532833][ T3438] vhci_hcd: disconnect device [ 206.539058][T11398] hierarchical_memsw_limit 9223372036854771712 [ 206.570526][T11426] loop0: detected capacity change from 0 to 512 [ 206.572791][T11398] total_cache 0 [ 206.572802][T11398] total_rss 0 [ 206.593030][T11426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.593741][T11398] total_shmem 0 [ 206.597441][T11426] ext4 filesystem being mounted at /415/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.601235][T11398] total_mapped_file 0 [ 206.601246][T11398] total_dirty 0 [ 206.601255][T11398] total_writeback 0 [ 206.601304][T11398] total_workingset_refault_anon 59 [ 206.601315][T11398] total_workingset_refault_file 442 [ 206.601326][T11398] total_swap 184320 [ 206.601336][T11398] total_swapcached 4096 [ 206.601346][T11398] total_pgpgin 259175 [ 206.601355][T11398] total_pgpgout 259161 [ 206.709976][T11398] total_pgfault 303210 [ 206.714056][T11398] total_pgmajfault 30 [ 206.718035][T11398] total_inactive_anon 0 [ 206.722224][T11398] total_active_anon 4096 [ 206.726454][T11398] total_inactive_file 0 [ 206.730597][T11398] total_active_file 53248 [ 206.734970][T11398] total_unevictable 0 [ 206.738948][T11398] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.2207,pid=11395,uid=0 [ 206.753660][T11398] Memory cgroup out of memory: Killed process 11395 (syz.3.2207) total-vm:93824kB, anon-rss:1132kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 206.782170][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.792073][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.839317][T11439] loop0: detected capacity change from 0 to 1024 [ 206.871477][T11439] EXT4-fs: Ignoring removed orlov option [ 206.952560][T11446] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 206.968566][T11439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.017402][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.043618][T11449] loop0: detected capacity change from 0 to 512 [ 207.055699][T11451] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 207.077832][T11449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.110960][T11449] ext4 filesystem being mounted at /417/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.137229][T11449] netlink: 'syz.0.2223': attribute type 4 has an invalid length. [ 207.182042][T11449] netlink: 'syz.0.2223': attribute type 4 has an invalid length. [ 207.237677][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.260798][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2225'. [ 207.372697][T11463] loop1: detected capacity change from 0 to 512 [ 207.434710][T11467] loop1: detected capacity change from 0 to 512 [ 207.436396][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2231'. [ 207.463422][T11467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.476107][T11467] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.499946][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.640421][T11491] loop3: detected capacity change from 0 to 512 [ 207.652856][T11491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.665511][T11491] ext4 filesystem being mounted at /453/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.685102][T11499] loop2: detected capacity change from 0 to 512 [ 207.692379][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.712799][T11499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.727127][T11499] ext4 filesystem being mounted at /461/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.767914][T11507] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 207.778829][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.829404][T11516] loop1: detected capacity change from 0 to 512 [ 207.847071][T11516] EXT4-fs (loop1): 1 truncate cleaned up [ 207.853434][T11516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.869132][T11516] netlink: 28 bytes leftover after parsing attributes in process `'. [ 207.900552][T11521] netlink: 'syz.2.2253': attribute type 10 has an invalid length. [ 207.908571][T11521] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2253'. [ 207.981308][ T36] usb usb2-port1: unable to enumerate USB device [ 208.166107][T11544] loop0: detected capacity change from 0 to 512 [ 208.207297][T11544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.236889][T11544] ext4 filesystem being mounted at /422/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.249042][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.312702][T11544] netlink: 'syz.0.2261': attribute type 4 has an invalid length. [ 208.393426][T11574] netlink: 'syz.0.2261': attribute type 4 has an invalid length. [ 208.424006][T11577] loop3: detected capacity change from 0 to 512 [ 208.456919][T11577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.472639][T11577] ext4 filesystem being mounted at /461/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.509735][T11585] netlink: 'syz.3.2276': attribute type 10 has an invalid length. [ 208.539287][T11588] FAULT_INJECTION: forcing a failure. [ 208.539287][T11588] name failslab, interval 1, probability 0, space 0, times 0 [ 208.552110][T11588] CPU: 1 UID: 0 PID: 11588 Comm: syz.4.2277 Not tainted syzkaller #0 PREEMPT(voluntary) [ 208.552145][T11588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 208.552238][T11588] Call Trace: [ 208.552246][T11588] [ 208.552257][T11588] __dump_stack+0x1d/0x30 [ 208.552287][T11588] dump_stack_lvl+0xe8/0x140 [ 208.552317][T11588] dump_stack+0x15/0x1b [ 208.552341][T11588] should_fail_ex+0x265/0x280 [ 208.552396][T11588] should_failslab+0x8c/0xb0 [ 208.552436][T11588] kmem_cache_alloc_noprof+0x50/0x480 [ 208.552474][T11588] ? dst_alloc+0xbd/0x100 [ 208.552573][T11588] dst_alloc+0xbd/0x100 [ 208.552617][T11588] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 208.552662][T11588] ip_route_output_key_hash+0x63/0xa0 [ 208.552744][T11588] tcp_v4_connect+0x3e4/0xaf0 [ 208.552787][T11588] __inet_stream_connect+0x169/0x7d0 [ 208.552810][T11588] ? _raw_spin_unlock_bh+0x36/0x40 [ 208.552841][T11588] ? release_sock+0x116/0x150 [ 208.552880][T11588] ? _raw_spin_unlock_bh+0x36/0x40 [ 208.553009][T11588] ? lock_sock_nested+0x112/0x140 [ 208.553070][T11588] ? selinux_netlbl_socket_connect+0x115/0x130 [ 208.553111][T11588] inet_stream_connect+0x44/0x70 [ 208.553141][T11588] ? __pfx_inet_stream_connect+0x10/0x10 [ 208.553178][T11588] __sys_connect+0x1f2/0x2b0 [ 208.553226][T11588] __x64_sys_connect+0x3f/0x50 [ 208.553267][T11588] x64_sys_call+0x2c0c/0x3000 [ 208.553299][T11588] do_syscall_64+0xd2/0x200 [ 208.553385][T11588] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 208.553460][T11588] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 208.553499][T11588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.553535][T11588] RIP: 0033:0x7f5f88ebf6c9 [ 208.553554][T11588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.553577][T11588] RSP: 002b:00007f5f87927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 208.553602][T11588] RAX: ffffffffffffffda RBX: 00007f5f89115fa0 RCX: 00007f5f88ebf6c9 [ 208.553688][T11588] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 208.553706][T11588] RBP: 00007f5f87927090 R08: 0000000000000000 R09: 0000000000000000 [ 208.553724][T11588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.553740][T11588] R13: 00007f5f89116038 R14: 00007f5f89115fa0 R15: 00007ffe4b723b08 [ 208.553766][T11588] [ 208.582570][T11593] netlink: 54775 bytes leftover after parsing attributes in process `syz.1.2279'. [ 208.656880][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2280'. [ 208.798506][T11593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2279'. [ 208.845723][T11610] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 208.954113][T11620] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 208.960692][T11620] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 208.969071][T11620] vhci_hcd vhci_hcd.0: Device attached [ 208.985557][T11620] vhci_hcd vhci_hcd.0: port 0 already used [ 209.114442][T11621] vhci_hcd: connection closed [ 209.114833][ T3502] vhci_hcd: stop threads [ 209.123956][ T3502] vhci_hcd: release socket [ 209.128389][ T3502] vhci_hcd: disconnect device [ 209.190756][T11631] loop2: detected capacity change from 0 to 764 [ 209.198301][T11631] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 209.209295][T11631] bridge0: port 3(macvtap1) entered blocking state [ 209.216016][T11631] bridge0: port 3(macvtap1) entered disabled state [ 209.222758][T11631] macvtap1: entered allmulticast mode [ 209.228154][T11631] bridge0: entered allmulticast mode [ 209.233912][T11631] macvtap1: left allmulticast mode [ 209.239037][T11631] bridge0: left allmulticast mode [ 209.382496][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2293'. [ 209.729692][T11656] loop4: detected capacity change from 0 to 2048 [ 209.771205][T11656] loop4: p1 < > p4 [ 209.775761][T11656] loop4: p4 size 8388608 extends beyond EOD, truncated [ 209.850796][T11658] loop3: detected capacity change from 0 to 512 [ 209.862775][T11658] ext4 filesystem being mounted at /468/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.524726][T11687] netlink: 54775 bytes leftover after parsing attributes in process `syz.4.2311'. [ 210.539335][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2311'. [ 210.618468][T11693] x_tables: duplicate underflow at hook 1 [ 210.890845][ T29] kauditd_printk_skb: 1194 callbacks suppressed [ 210.890861][ T29] audit: type=1326 audit(5288435744.642:114807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11706 comm="syz.1.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 210.921067][ T29] audit: type=1326 audit(5288435744.642:114808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11706 comm="syz.1.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 210.944809][ T29] audit: type=1326 audit(5288435744.642:114809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11706 comm="syz.1.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 210.968546][ T29] audit: type=1326 audit(5288435744.642:114810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11706 comm="syz.1.2318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 211.017652][T11713] loop1: detected capacity change from 0 to 128 [ 211.026114][T11713] vfat filesystem being mounted at /436/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 211.038518][T11713] bond0: Removing last ns target with arp_interval on [ 211.046354][T11713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.065016][ T29] audit: type=1326 audit(5288435744.812:114811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 211.088939][ T29] audit: type=1326 audit(5288435744.812:114812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 211.112905][ T29] audit: type=1326 audit(5288435744.812:114813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 211.136684][ T29] audit: type=1326 audit(5288435744.812:114814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 211.140879][ T316] Bluetooth: hci0: Frame reassembly failed (-84) [ 211.160468][ T29] audit: type=1326 audit(5288435744.812:114815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11710 comm="syz.3.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 211.190359][ T29] audit: type=1400 audit(5288435744.812:114816): avc: denied { bind } for pid=11710 comm="syz.3.2320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 211.271517][T11716] sd 0:0:1:0: device reset [ 211.282281][T11718] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 211.297482][T11720] loop3: detected capacity change from 0 to 512 [ 211.390689][ T3407] usb 4-1: device descriptor read/8, error -110 [ 211.500629][ T3407] usb 4-1: new SuperSpeed USB device number 27 using vhci_hcd [ 211.520746][ T3407] usb 4-1: enqueue for inactive port 0 [ 211.538861][ T3407] usb 4-1: enqueue for inactive port 0 [ 211.544770][ T3407] usb 4-1: enqueue for inactive port 0 [ 211.577589][T11741] loop4: detected capacity change from 0 to 512 [ 211.602305][T11741] ext4 filesystem being mounted at /503/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.623441][T11741] validate_nla: 2 callbacks suppressed [ 211.623625][T11741] netlink: 'syz.4.2332': attribute type 4 has an invalid length. [ 211.653407][T11741] netlink: 'syz.4.2332': attribute type 4 has an invalid length. [ 211.698469][T11750] FAULT_INJECTION: forcing a failure. [ 211.698469][T11750] name failslab, interval 1, probability 0, space 0, times 0 [ 211.711196][T11750] CPU: 0 UID: 0 PID: 11750 Comm: syz.4.2335 Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.711256][T11750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.711274][T11750] Call Trace: [ 211.711283][T11750] [ 211.711294][T11750] __dump_stack+0x1d/0x30 [ 211.711328][T11750] dump_stack_lvl+0xe8/0x140 [ 211.711356][T11750] dump_stack+0x15/0x1b [ 211.711381][T11750] should_fail_ex+0x265/0x280 [ 211.711407][T11750] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 211.711439][T11750] should_failslab+0x8c/0xb0 [ 211.711497][T11750] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 211.711600][T11750] ? shmem_alloc_inode+0x34/0x50 [ 211.711632][T11750] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 211.711662][T11750] shmem_alloc_inode+0x34/0x50 [ 211.711766][T11750] alloc_inode+0x40/0x170 [ 211.711796][T11750] new_inode+0x1d/0xe0 [ 211.711832][T11750] shmem_get_inode+0x244/0x750 [ 211.711892][T11750] __shmem_file_setup+0x113/0x210 [ 211.711959][T11750] shmem_file_setup+0x3b/0x50 [ 211.711985][T11750] __se_sys_memfd_create+0x2c3/0x590 [ 211.712021][T11750] __x64_sys_memfd_create+0x31/0x40 [ 211.712054][T11750] x64_sys_call+0x2ac2/0x3000 [ 211.712085][T11750] do_syscall_64+0xd2/0x200 [ 211.712187][T11750] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 211.712249][T11750] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 211.712358][T11750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.712380][T11750] RIP: 0033:0x7f5f88ebf6c9 [ 211.712395][T11750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.712482][T11750] RSP: 002b:00007f5f87926e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 211.712570][T11750] RAX: ffffffffffffffda RBX: 000000000000120b RCX: 00007f5f88ebf6c9 [ 211.712587][T11750] RDX: 00007f5f87926ef0 RSI: 0000000000000000 RDI: 00007f5f88f42960 [ 211.712602][T11750] RBP: 0000200000002300 R08: 00007f5f87926bb7 R09: 00007f5f87926e40 [ 211.712615][T11750] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000580 [ 211.712691][T11750] R13: 00007f5f87926ef0 R14: 00007f5f87926eb0 R15: 0000200000000980 [ 211.712717][T11750] [ 211.718502][T11752] FAULT_INJECTION: forcing a failure. [ 211.718502][T11752] name failslab, interval 1, probability 0, space 0, times 0 [ 211.943131][T11752] CPU: 1 UID: 0 PID: 11752 Comm: syz.2.2336 Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.943160][T11752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.943172][T11752] Call Trace: [ 211.943180][T11752] [ 211.943188][T11752] __dump_stack+0x1d/0x30 [ 211.943210][T11752] dump_stack_lvl+0xe8/0x140 [ 211.943229][T11752] dump_stack+0x15/0x1b [ 211.943248][T11752] should_fail_ex+0x265/0x280 [ 211.943267][T11752] should_failslab+0x8c/0xb0 [ 211.943294][T11752] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 211.943406][T11752] ? __get_vm_area_node+0x106/0x1d0 [ 211.943528][T11752] __get_vm_area_node+0x106/0x1d0 [ 211.943632][T11752] __vmalloc_node_range_noprof+0x28c/0xed0 [ 211.943690][T11752] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 211.943795][T11752] ? __rcu_read_unlock+0x4f/0x70 [ 211.943860][T11752] ? cred_has_capability+0x210/0x280 [ 211.943890][T11752] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 211.943956][T11752] __vmalloc_noprof+0x83/0xc0 [ 211.944037][T11752] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 211.944069][T11752] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 211.944169][T11752] ? bpf_prog_alloc+0x2a/0x150 [ 211.944209][T11752] bpf_prog_alloc+0x3c/0x150 [ 211.944254][T11752] bpf_prog_load+0x506/0x1100 [ 211.944311][T11752] ? security_bpf+0x2b/0x90 [ 211.944336][T11752] __sys_bpf+0x469/0x7c0 [ 211.944372][T11752] __x64_sys_bpf+0x41/0x50 [ 211.944403][T11752] x64_sys_call+0x2aee/0x3000 [ 211.944482][T11752] do_syscall_64+0xd2/0x200 [ 211.944502][T11752] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 211.944569][T11752] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 211.944600][T11752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.944689][T11752] RIP: 0033:0x7fc8f1c8f6c9 [ 211.944703][T11752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.944721][T11752] RSP: 002b:00007fc8f06f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.944738][T11752] RAX: ffffffffffffffda RBX: 00007fc8f1ee5fa0 RCX: 00007fc8f1c8f6c9 [ 211.944750][T11752] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 211.944780][T11752] RBP: 00007fc8f06f7090 R08: 0000000000000000 R09: 0000000000000000 [ 211.944791][T11752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.944803][T11752] R13: 00007fc8f1ee6038 R14: 00007fc8f1ee5fa0 R15: 00007ffedb026d48 [ 211.944901][T11752] [ 211.944909][T11752] syz.2.2336: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 212.198254][T11752] CPU: 1 UID: 0 PID: 11752 Comm: syz.2.2336 Not tainted syzkaller #0 PREEMPT(voluntary) [ 212.198371][T11752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 212.198389][T11752] Call Trace: [ 212.198397][T11752] [ 212.198407][T11752] __dump_stack+0x1d/0x30 [ 212.198437][T11752] dump_stack_lvl+0xe8/0x140 [ 212.198466][T11752] dump_stack+0x15/0x1b [ 212.198490][T11752] warn_alloc+0x12b/0x1a0 [ 212.198563][T11752] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 212.198637][T11752] ? __rcu_read_unlock+0x4f/0x70 [ 212.198669][T11752] ? cred_has_capability+0x210/0x280 [ 212.198709][T11752] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 212.198880][T11752] __vmalloc_noprof+0x83/0xc0 [ 212.198923][T11752] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 212.198960][T11752] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 212.199021][T11752] ? bpf_prog_alloc+0x2a/0x150 [ 212.199077][T11752] bpf_prog_alloc+0x3c/0x150 [ 212.199115][T11752] bpf_prog_load+0x506/0x1100 [ 212.199146][T11752] ? security_bpf+0x2b/0x90 [ 212.199216][T11752] __sys_bpf+0x469/0x7c0 [ 212.199253][T11752] __x64_sys_bpf+0x41/0x50 [ 212.199297][T11752] x64_sys_call+0x2aee/0x3000 [ 212.199374][T11752] do_syscall_64+0xd2/0x200 [ 212.199467][T11752] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.199523][T11752] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 212.199569][T11752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.199674][T11752] RIP: 0033:0x7fc8f1c8f6c9 [ 212.199690][T11752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.199709][T11752] RSP: 002b:00007fc8f06f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.199729][T11752] RAX: ffffffffffffffda RBX: 00007fc8f1ee5fa0 RCX: 00007fc8f1c8f6c9 [ 212.199746][T11752] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 212.199763][T11752] RBP: 00007fc8f06f7090 R08: 0000000000000000 R09: 0000000000000000 [ 212.199805][T11752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.199817][T11752] R13: 00007fc8f1ee6038 R14: 00007fc8f1ee5fa0 R15: 00007ffedb026d48 [ 212.199837][T11752] [ 212.199844][T11752] Mem-Info: [ 212.414029][T11752] active_anon:4914 inactive_anon:0 isolated_anon:0 [ 212.414029][T11752] active_file:8945 inactive_file:2434 isolated_file:0 [ 212.414029][T11752] unevictable:0 dirty:284 writeback:0 [ 212.414029][T11752] slab_reclaimable:3396 slab_unreclaimable:18312 [ 212.414029][T11752] mapped:29226 shmem:224 pagetables:1219 [ 212.414029][T11752] sec_pagetables:0 bounce:0 [ 212.414029][T11752] kernel_misc_reclaimable:0 [ 212.414029][T11752] free:1822567 free_pcp:75353 free_cma:0 [ 212.458815][T11752] Node 0 active_anon:19656kB inactive_anon:0kB active_file:35780kB inactive_file:9736kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116904kB dirty:1136kB writeback:0kB shmem:896kB kernel_stack:3472kB pagetables:4876kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 212.485982][T11752] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 212.515704][T11752] lowmem_reserve[]: 0 2881 7859 7859 [ 212.521408][T11752] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 212.552581][T11752] lowmem_reserve[]: 0 0 4978 4978 [ 212.557838][T11752] Node 0 Normal free:4328180kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19656kB inactive_anon:0kB active_file:35780kB inactive_file:9736kB unevictable:0kB writepending:1136kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:298048kB local_pcp:107968kB free_cma:0kB [ 212.591155][T11752] lowmem_reserve[]: 0 0 0 0 [ 212.595724][T11752] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 212.608551][T11752] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 212.624808][T11752] Node 0 Normal: 1126*4kB (UME) 765*8kB (UME) 670*16kB (UME) 580*32kB (UME) 501*64kB (UME) 397*128kB (UME) 289*256kB (UM) 197*512kB (UME) 124*1024kB (UME) 62*2048kB (UM) 924*4096kB (UM) = 4336288kB [ 212.644378][T11752] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 212.653708][T11752] 11550 total pagecache pages [ 212.658376][T11752] 7 pages in swap cache [ 212.662555][T11752] Free swap = 63324kB [ 212.666622][T11752] Total swap = 124996kB [ 212.670791][T11752] 2097051 pages RAM [ 212.674626][T11752] 0 pages HighMem/MovableOnly [ 212.679288][T11752] 81087 pages reserved [ 212.719548][T11756] __nla_validate_parse: 1 callbacks suppressed [ 212.719568][T11756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2338'. [ 212.771710][T11769] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 212.812797][T11773] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11773 comm=syz.3.2345 [ 212.882628][T11773] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=11773 comm=syz.3.2345 [ 213.150475][ T3677] Bluetooth: hci0: command 0x1003 tx timeout [ 213.150475][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 213.232732][T11790] loop1: detected capacity change from 0 to 1024 [ 213.240074][T11790] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 213.249883][T11790] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 213.260991][T11790] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 213.269041][T11790] EXT4-fs (loop1): orphan cleanup on readonly fs [ 213.275936][T11790] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.2350: Inode bitmap for bg 0 marked uninitialized [ 213.312435][T11788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.321374][T11788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.376369][T11797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2353'. [ 213.530772][ T3407] usb usb4-port1: attempt power cycle [ 213.707546][T11848] loop3: detected capacity change from 0 to 1024 [ 213.725658][T11848] EXT4-fs: Ignoring removed orlov option [ 213.734671][T11852] netlink: 54775 bytes leftover after parsing attributes in process `syz.0.2359'. [ 213.754480][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2359'. [ 213.808607][T11870] loop0: detected capacity change from 0 to 512 [ 213.818744][T11868] loop3: detected capacity change from 0 to 1024 [ 213.826490][T11868] EXT4-fs: inline encryption not supported [ 213.832329][T11873] FAULT_INJECTION: forcing a failure. [ 213.832329][T11873] name failslab, interval 1, probability 0, space 0, times 0 [ 213.845119][T11873] CPU: 0 UID: 0 PID: 11873 Comm: syz.4.2362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 213.845156][T11873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 213.845245][T11873] Call Trace: [ 213.845254][T11873] [ 213.845264][T11873] __dump_stack+0x1d/0x30 [ 213.845290][T11873] dump_stack_lvl+0xe8/0x140 [ 213.845312][T11873] dump_stack+0x15/0x1b [ 213.845381][T11873] should_fail_ex+0x265/0x280 [ 213.845408][T11873] should_failslab+0x8c/0xb0 [ 213.845448][T11873] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 213.845516][T11873] ? security_set_bools+0x85/0x340 [ 213.845562][T11873] kmemdup_noprof+0x2b/0x70 [ 213.845608][T11873] security_set_bools+0x85/0x340 [ 213.845656][T11873] sel_commit_bools_write+0x1ea/0x270 [ 213.845685][T11873] vfs_writev+0x406/0x8b0 [ 213.845772][T11873] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 213.845852][T11873] ? mutex_lock+0xd/0x30 [ 213.845933][T11873] do_writev+0xe7/0x210 [ 213.845978][T11873] __x64_sys_writev+0x45/0x50 [ 213.846010][T11873] x64_sys_call+0x1e9a/0x3000 [ 213.846061][T11873] do_syscall_64+0xd2/0x200 [ 213.846089][T11873] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 213.846126][T11873] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 213.846161][T11873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.846262][T11873] RIP: 0033:0x7f5f88ebf6c9 [ 213.846283][T11873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.846374][T11873] RSP: 002b:00007f5f87927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 213.846402][T11873] RAX: ffffffffffffffda RBX: 00007f5f89115fa0 RCX: 00007f5f88ebf6c9 [ 213.846489][T11873] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000007 [ 213.846506][T11873] RBP: 00007f5f87927090 R08: 0000000000000000 R09: 0000000000000000 [ 213.846524][T11873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.846541][T11873] R13: 00007f5f89116038 R14: 00007f5f89115fa0 R15: 00007ffe4b723b08 [ 213.846568][T11873] [ 213.859360][T11870] ext4 filesystem being mounted at /437/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.905406][T11868] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.2360: Allocating blocks 497-513 which overlap fs metadata [ 213.988106][T11889] netlink: 'syz.0.2361': attribute type 4 has an invalid length. [ 214.070885][T11897] netlink: 'syz.0.2361': attribute type 4 has an invalid length. [ 214.097640][T11868] EXT4-fs (loop3): pa ffff888106e42d20: logic 16, phys. 145, len 23 [ 214.106064][T11868] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 1 [ 214.119108][T11868] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 214.131368][T11868] EXT4-fs (loop3): This should not happen!! Data will be lost [ 214.131368][T11868] [ 214.131652][T11901] loop4: detected capacity change from 0 to 1024 [ 214.141050][T11868] EXT4-fs (loop3): Total free blocks count 0 [ 214.141071][T11868] EXT4-fs (loop3): Free/Dirty block details [ 214.151375][T11901] EXT4-fs: Ignoring removed orlov option [ 214.153553][T11868] EXT4-fs (loop3): free_blocks=16 [ 214.170145][T11868] EXT4-fs (loop3): dirty_blocks=0 [ 214.175234][T11868] EXT4-fs (loop3): Block reservation details [ 214.181270][T11868] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 214.364406][T11924] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2367'. [ 214.378901][T11924] lo speed is unknown, defaulting to 1000 [ 214.385712][T11924] lo speed is unknown, defaulting to 1000 [ 214.392583][T11924] lo speed is unknown, defaulting to 1000 [ 214.399480][T11924] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 214.408013][T11924] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 214.422259][T11924] lo speed is unknown, defaulting to 1000 [ 214.429656][T11924] lo speed is unknown, defaulting to 1000 [ 214.436126][T11924] lo speed is unknown, defaulting to 1000 [ 214.444808][T11924] lo speed is unknown, defaulting to 1000 [ 214.464468][T11924] lo speed is unknown, defaulting to 1000 [ 214.486149][T11934] loop0: detected capacity change from 0 to 1024 [ 214.498220][T11934] EXT4-fs: Ignoring removed orlov option [ 214.572846][T11943] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 214.579408][T11943] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 214.587837][T11943] vhci_hcd vhci_hcd.0: Device attached [ 214.605870][T11943] vhci_hcd vhci_hcd.0: port 0 already used [ 214.736107][T11944] vhci_hcd: connection closed [ 214.736329][ T3438] vhci_hcd: stop threads [ 214.745457][ T3438] vhci_hcd: release socket [ 214.749894][ T3438] vhci_hcd: disconnect device [ 214.954945][T11996] loop2: detected capacity change from 0 to 512 [ 214.982509][T11996] ext4 filesystem being mounted at /489/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.010286][T12007] FAULT_INJECTION: forcing a failure. [ 215.010286][T12007] name failslab, interval 1, probability 0, space 0, times 0 [ 215.023081][T12007] CPU: 1 UID: 0 PID: 12007 Comm: syz.4.2375 Not tainted syzkaller #0 PREEMPT(voluntary) [ 215.023143][T12007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.023155][T12007] Call Trace: [ 215.023161][T12007] [ 215.023175][T12007] __dump_stack+0x1d/0x30 [ 215.023197][T12007] dump_stack_lvl+0xe8/0x140 [ 215.023216][T12007] dump_stack+0x15/0x1b [ 215.023232][T12007] should_fail_ex+0x265/0x280 [ 215.023276][T12007] should_failslab+0x8c/0xb0 [ 215.023303][T12007] kmem_cache_alloc_noprof+0x50/0x480 [ 215.023331][T12007] ? getname_flags+0x80/0x3b0 [ 215.023466][T12007] getname_flags+0x80/0x3b0 [ 215.023495][T12007] __x64_sys_renameat2+0x6c/0x90 [ 215.023523][T12007] x64_sys_call+0x3f9/0x3000 [ 215.023600][T12007] do_syscall_64+0xd2/0x200 [ 215.023619][T12007] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 215.023701][T12007] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 215.023733][T12007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.023753][T12007] RIP: 0033:0x7f5f88ebf6c9 [ 215.023828][T12007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.023845][T12007] RSP: 002b:00007f5f87927038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 215.023863][T12007] RAX: ffffffffffffffda RBX: 00007f5f89115fa0 RCX: 00007f5f88ebf6c9 [ 215.023874][T12007] RDX: ffffffffffffff9c RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 215.023886][T12007] RBP: 00007f5f87927090 R08: 0000000000000000 R09: 0000000000000000 [ 215.023897][T12007] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 215.023908][T12007] R13: 00007f5f89116038 R14: 00007f5f89115fa0 R15: 00007ffe4b723b08 [ 215.023994][T12007] [ 215.242439][T12018] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2378'. [ 215.268467][T12020] loop3: detected capacity change from 0 to 1024 [ 215.275290][T12020] EXT4-fs: Ignoring removed orlov option [ 215.305812][T12023] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2378'. [ 215.327345][T12025] loop4: detected capacity change from 0 to 512 [ 215.337844][T12027] netlink: 54775 bytes leftover after parsing attributes in process `syz.3.2380'. [ 215.349324][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2380'. [ 215.410769][ T3407] usb usb4-port1: unable to enumerate USB device [ 215.439280][ T3502] Bluetooth: hci0: Frame reassembly failed (-84) [ 215.464760][T12036] loop3: detected capacity change from 0 to 512 [ 215.482051][T12036] ext4 filesystem being mounted at /490/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.485636][T12040] bridge0: entered allmulticast mode [ 215.498927][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2386'. [ 215.508196][T12040] bridge_slave_1: left allmulticast mode [ 215.514012][T12040] bridge_slave_1: left promiscuous mode [ 215.519908][T12040] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.528140][T12040] bridge_slave_0: left allmulticast mode [ 215.533890][T12040] bridge_slave_0: left promiscuous mode [ 215.539700][T12040] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.548187][T12040] bridge0 (unregistering): left allmulticast mode [ 215.601820][T12044] loop3: detected capacity change from 0 to 512 [ 215.612352][T12044] ext4 filesystem being mounted at /492/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 215.637372][T12044] netlink: 'syz.3.2388': attribute type 4 has an invalid length. [ 215.674803][T12044] netlink: 'syz.3.2388': attribute type 4 has an invalid length. [ 215.714103][T12052] 0ªX¹¦À: renamed from caif0 [ 215.720472][T12052] 0ªX¹¦À: entered allmulticast mode [ 215.725682][T12052] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 215.776880][T12052] loop3: detected capacity change from 0 to 4096 [ 215.804495][T12052] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.005773][T12067] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 216.012349][T12067] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 216.020552][T12067] vhci_hcd vhci_hcd.0: Device attached [ 216.028138][T12067] vhci_hcd vhci_hcd.0: port 0 already used [ 216.108542][T12073] loop2: detected capacity change from 0 to 512 [ 216.121899][T12073] ext4 filesystem being mounted at /492/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.134195][T12075] loop3: detected capacity change from 0 to 512 [ 216.149232][T12068] vhci_hcd: connection closed [ 216.149621][ T31] vhci_hcd: stop threads [ 216.151077][T12073] netlink: 'syz.2.2398': attribute type 4 has an invalid length. [ 216.154396][ T31] vhci_hcd: release socket [ 216.154408][ T31] vhci_hcd: disconnect device [ 216.156369][T12075] ext4 filesystem being mounted at /494/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.199885][T12081] netlink: 'syz.2.2398': attribute type 4 has an invalid length. [ 216.240250][T12085] loop2: detected capacity change from 0 to 512 [ 216.252126][T12085] ext4 filesystem being mounted at /493/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.263899][T12085] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.2400: corrupted inode contents [ 216.275960][T12085] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.2400: mark_inode_dirty error [ 216.283700][T12091] bridge0: entered allmulticast mode [ 216.288067][T12085] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.2400: corrupted inode contents [ 216.335249][T12095] siw: device registration error -23 [ 216.341071][T12095] smc: removing ib device sz1 [ 216.402795][T12101] loop3: detected capacity change from 0 to 2048 [ 216.426616][T12101] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 216.498807][ T29] kauditd_printk_skb: 810 callbacks suppressed [ 216.498826][ T29] audit: type=1326 audit(5288436263.246:115627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 216.529546][ T29] audit: type=1326 audit(5288436263.246:115628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 216.553255][ T29] audit: type=1326 audit(5288436263.246:115629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 216.576977][ T29] audit: type=1326 audit(5288436263.246:115630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 216.600686][ T29] audit: type=1326 audit(5288436263.246:115631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 216.624369][ T29] audit: type=1326 audit(5288436263.246:115632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 216.648121][ T29] audit: type=1326 audit(5288436263.246:115633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 216.671793][ T29] audit: type=1326 audit(5288436263.246:115634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 216.695575][ T29] audit: type=1326 audit(5288436263.246:115635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 216.719151][ T29] audit: type=1326 audit(5288436263.246:115636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12108 comm="syz.3.2408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 216.749505][T12113] loop2: detected capacity change from 0 to 512 [ 216.791927][T12117] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 216.800176][T12117] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 216.813978][T12111] loop3: detected capacity change from 0 to 512 [ 216.837665][T12111] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.876286][T12111] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 216.891127][T12124] loop2: detected capacity change from 0 to 512 [ 216.899252][T12111] EXT4-fs (loop3): 1 truncate cleaned up [ 216.912662][T12124] ext4 filesystem being mounted at /497/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.924602][T12124] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.2414: corrupted inode contents [ 216.936862][T12124] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.2414: mark_inode_dirty error [ 216.948655][T12124] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.2414: corrupted inode contents [ 217.014530][T12138] loop0: detected capacity change from 0 to 512 [ 217.088878][T12146] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 217.095416][T12146] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 217.103761][T12146] vhci_hcd vhci_hcd.0: Device attached [ 217.110296][T12146] vhci_hcd vhci_hcd.0: port 0 already used [ 217.208504][T12147] vhci_hcd: connection closed [ 217.208672][ T3502] vhci_hcd: stop threads [ 217.217690][ T3502] vhci_hcd: release socket [ 217.222160][ T3502] vhci_hcd: disconnect device [ 217.451248][T12157] loop3: detected capacity change from 0 to 512 [ 217.462297][T12157] ext4 filesystem being mounted at /504/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.470534][ T3983] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 217.472846][ T3677] Bluetooth: hci0: command 0x1003 tx timeout [ 217.672551][T12173] loop3: detected capacity change from 0 to 512 [ 217.728594][T12176] __nla_validate_parse: 6 callbacks suppressed [ 217.728614][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2433'. [ 217.828799][T12191] loop3: detected capacity change from 0 to 512 [ 217.842215][T12191] ext4 filesystem being mounted at /514/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.858332][T12191] netlink: 'syz.3.2439': attribute type 4 has an invalid length. [ 217.875526][T12191] netlink: 'syz.3.2439': attribute type 4 has an invalid length. [ 218.038336][T12209] loop4: detected capacity change from 0 to 512 [ 218.074026][T12213] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 218.080676][T12213] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 218.089086][T12213] vhci_hcd vhci_hcd.0: Device attached [ 218.095947][T12213] vhci_hcd vhci_hcd.0: port 0 already used [ 218.211801][T12214] vhci_hcd: connection closed [ 218.212406][ T3438] vhci_hcd: stop threads [ 218.221472][ T3438] vhci_hcd: release socket [ 218.225905][ T3438] vhci_hcd: disconnect device [ 218.246843][T12225] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2451'. [ 218.255996][T12225] unsupported nla_type 65024 [ 218.265580][T12225] veth0_vlan: entered allmulticast mode [ 218.491836][T12225] lo speed is unknown, defaulting to 1000 [ 218.631678][T12232] loop1: detected capacity change from 0 to 512 [ 218.642621][T12232] ext4 filesystem being mounted at /452/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 218.687962][T12237] loop1: detected capacity change from 0 to 128 [ 218.695679][T12237] vfat: Unknown parameter 'ÿ' [ 218.786282][T12241] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 218.869017][T12246] loop0: detected capacity change from 0 to 512 [ 218.976346][T12253] loop0: detected capacity change from 0 to 128 [ 218.984717][T12253] vfat: Unknown parameter 'ÿ' [ 219.176435][T12255] loop3: detected capacity change from 0 to 512 [ 219.192900][T12255] ext4 filesystem being mounted at /517/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.212312][T12255] netlink: 'syz.3.2462': attribute type 4 has an invalid length. [ 219.234557][T12255] netlink: 'syz.3.2462': attribute type 4 has an invalid length. [ 219.284549][T12259] loop3: detected capacity change from 0 to 1024 [ 219.291856][T12259] EXT4-fs: Ignoring removed orlov option [ 219.357612][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2464'. [ 219.406517][T12267] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 219.413082][T12267] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 219.421343][T12267] vhci_hcd vhci_hcd.0: Device attached [ 219.428473][T12267] vhci_hcd vhci_hcd.0: port 0 already used [ 219.538765][T12268] vhci_hcd: connection closed [ 219.539662][ T3438] vhci_hcd: stop threads [ 219.548772][ T3438] vhci_hcd: release socket [ 219.553253][ T3438] vhci_hcd: disconnect device [ 219.688881][T12277] loop4: detected capacity change from 0 to 512 [ 219.736015][T12279] loop4: detected capacity change from 0 to 128 [ 219.743901][T12279] vfat: Unknown parameter 'ÿ' [ 219.830125][T12281] loop0: detected capacity change from 0 to 128 [ 219.837449][T12281] vfat: Unknown parameter 'ÿ' [ 220.025426][T12283] loop2: detected capacity change from 0 to 512 [ 220.121030][T12289] atomic_op ffff88811c0cf928 conn xmit_atomic 0000000000000000 [ 220.130325][T12291] loop3: detected capacity change from 0 to 256 [ 220.155009][T12291] FAT-fs (loop3): Directory bread(block 64) failed [ 220.162601][T12291] FAT-fs (loop3): Directory bread(block 65) failed [ 220.169500][T12291] FAT-fs (loop3): Directory bread(block 66) failed [ 220.177026][T12291] FAT-fs (loop3): Directory bread(block 67) failed [ 220.184579][T12291] FAT-fs (loop3): Directory bread(block 68) failed [ 220.191648][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 220.192869][T12291] FAT-fs (loop3): Directory bread(block 69) failed [ 220.208082][T12291] FAT-fs (loop3): Directory bread(block 70) failed [ 220.215474][T12291] FAT-fs (loop3): Directory bread(block 71) failed [ 220.224845][T12291] FAT-fs (loop3): Directory bread(block 72) failed [ 220.232869][T12291] FAT-fs (loop3): Directory bread(block 73) failed [ 220.245019][T12291] vfat filesystem being mounted at /521/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 220.256414][T12297] loop2: detected capacity change from 0 to 1024 [ 220.264098][T12297] EXT4-fs: Ignoring removed orlov option [ 220.270799][T12291] syz.3.2474: attempt to access beyond end of device [ 220.270799][T12291] loop3: rw=0, sector=1800, nr_sectors = 4 limit=256 [ 220.284576][T12291] syz.3.2474: attempt to access beyond end of device [ 220.284576][T12291] loop3: rw=0, sector=1804, nr_sectors = 4 limit=256 [ 220.330488][T12301] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 220.347164][T12303] loop3: detected capacity change from 0 to 512 [ 220.362891][T12303] ext4 filesystem being mounted at /522/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.416016][T12303] netlink: 'syz.3.2478': attribute type 4 has an invalid length. [ 220.460786][T12307] atomic_op ffff88811c0cf928 conn xmit_atomic 0000000000000000 [ 220.469628][T12312] netlink: 'syz.3.2478': attribute type 4 has an invalid length. [ 220.493295][T12314] loop2: detected capacity change from 0 to 512 [ 220.571272][T12321] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 220.577877][T12321] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 220.586086][T12321] vhci_hcd vhci_hcd.0: Device attached [ 220.595712][T12321] vhci_hcd vhci_hcd.0: port 0 already used [ 220.607479][T12318] loop2: detected capacity change from 0 to 512 [ 220.640230][T12330] loop4: detected capacity change from 0 to 512 [ 220.660252][ T10] hid (null): unknown global tag 0xd [ 220.666602][ T10] hid-generic FFF8:0002:0001.0001: unknown main item tag 0x4 [ 220.749260][T12330] ext4 filesystem being mounted at /521/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.760089][T12322] vhci_hcd: connection closed [ 220.760232][ T3438] vhci_hcd: stop threads [ 220.769216][ T3438] vhci_hcd: release socket [ 220.773680][ T3438] vhci_hcd: disconnect device [ 220.775333][ T10] hid-generic FFF8:0002:0001.0001: unknown global tag 0xd [ 220.781162][T12330] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2487: corrupted inode contents [ 220.785650][ T10] hid-generic FFF8:0002:0001.0001: item 0 4 1 13 parsing failed [ 220.797833][T12330] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2487: mark_inode_dirty error [ 220.805649][ T10] hid-generic FFF8:0002:0001.0001: probe with driver hid-generic failed with error -22 [ 220.831108][T12330] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2487: corrupted inode contents [ 220.956928][T12344] loop2: detected capacity change from 0 to 128 [ 221.044321][T12344] ext4 filesystem being mounted at /511/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 221.141072][T12344] lo speed is unknown, defaulting to 1000 [ 221.367275][T12350] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 221.375577][T12350] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 221.422836][T12352] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 222.009532][T12361] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 222.033543][T12363] loop3: detected capacity change from 0 to 512 [ 222.213431][ T29] kauditd_printk_skb: 4121 callbacks suppressed [ 222.213446][ T29] audit: type=1326 audit(5288436268.966:119758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 222.245385][ T29] audit: type=1326 audit(5288436268.966:119759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 222.269096][ T29] audit: type=1326 audit(5288436268.966:119760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 222.292817][ T29] audit: type=1326 audit(5288436268.986:119761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 222.316514][ T29] audit: type=1326 audit(5288436268.986:119762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 222.340292][ T29] audit: type=1326 audit(5288436268.996:119763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff0c89de32a code=0x7ffc0000 [ 222.352793][T12375] loop0: detected capacity change from 0 to 1024 [ 222.363897][ T29] audit: type=1326 audit(5288436268.996:119764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12371 comm="syz.3.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0c8a11f85 code=0x7ffc0000 [ 222.390859][T12375] EXT4-fs: Ignoring removed orlov option [ 222.394058][ T29] audit: type=1326 audit(5288436268.996:119765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 222.423293][ T29] audit: type=1326 audit(5288436268.996:119766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 222.446967][ T29] audit: type=1326 audit(5288436268.996:119767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12351 comm="syz.1.2492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 222.641296][T12379] loop1: detected capacity change from 0 to 128 [ 222.658364][T12379] vfat: Unknown parameter 'ÿ' [ 222.696513][T12381] netlink: 54775 bytes leftover after parsing attributes in process `syz.4.2505'. [ 222.707059][T12381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2505'. [ 222.735062][T12383] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 223.007777][T12394] loop3: detected capacity change from 0 to 512 [ 223.025061][T12394] ext4 filesystem being mounted at /529/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.174296][T12408] loop4: detected capacity change from 0 to 512 [ 223.177409][T12410] netlink: 54775 bytes leftover after parsing attributes in process `syz.3.2517'. [ 223.191393][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2517'. [ 223.224261][T12414] loop3: detected capacity change from 0 to 512 [ 223.242770][T12414] ext4 filesystem being mounted at /533/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.259795][T12414] netlink: 'syz.3.2519': attribute type 4 has an invalid length. [ 223.279349][T12414] netlink: 'syz.3.2519': attribute type 4 has an invalid length. [ 223.414554][T12426] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 223.421113][T12426] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 223.429416][T12426] vhci_hcd vhci_hcd.0: Device attached [ 223.436061][T12426] vhci_hcd vhci_hcd.0: port 0 already used [ 223.482374][T12432] loop1: detected capacity change from 0 to 1024 [ 223.489271][T12432] EXT4-fs: Ignoring removed orlov option [ 223.548621][T12427] vhci_hcd: connection closed [ 223.548717][ T3502] vhci_hcd: stop threads [ 223.557738][ T3502] vhci_hcd: release socket [ 223.562240][ T3502] vhci_hcd: disconnect device [ 223.697332][T12449] loop2: detected capacity change from 0 to 512 [ 223.739607][T12461] loop1: detected capacity change from 0 to 512 [ 223.752066][T12461] ext4 filesystem being mounted at /468/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.767643][T12461] netlink: 'syz.1.2536': attribute type 4 has an invalid length. [ 223.807138][T12465] loop2: detected capacity change from 0 to 1024 [ 223.813398][T12461] netlink: 'syz.1.2536': attribute type 4 has an invalid length. [ 223.821997][T12465] EXT4-fs: Ignoring removed orlov option [ 223.919273][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2538'. [ 223.944836][T12479] loop1: detected capacity change from 0 to 128 [ 223.952095][T12479] vfat: Unknown parameter 'ÿ' [ 224.028547][T12485] loop2: detected capacity change from 0 to 512 [ 224.069083][T12492] netlink: 54775 bytes leftover after parsing attributes in process `syz.2.2548'. [ 224.079405][T12492] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2548'. [ 224.104818][T12494] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 224.317639][T12505] loop3: detected capacity change from 0 to 128 [ 224.333749][T12505] vfat: Unknown parameter 'ÿ' [ 224.337134][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2555'. [ 224.685391][T12521] loop0: detected capacity change from 0 to 512 [ 224.825886][T12537] loop0: detected capacity change from 0 to 512 [ 224.843984][T12537] EXT4-fs mount: 70 callbacks suppressed [ 224.844005][T12537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.862624][T12537] ext4 filesystem being mounted at /499/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.884942][T12537] netlink: 'syz.0.2566': attribute type 4 has an invalid length. [ 224.906684][T12537] netlink: 'syz.0.2566': attribute type 4 has an invalid length. [ 224.945400][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.982927][T12548] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 225.051838][T12555] atomic_op ffff8881323fa528 conn xmit_atomic 0000000000000000 [ 225.162439][T12563] loop2: detected capacity change from 0 to 2048 [ 225.173380][T12567] loop3: detected capacity change from 0 to 512 [ 225.192218][T12563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.276092][T12575] loop3: detected capacity change from 0 to 128 [ 225.290579][T12575] vfat: Unknown parameter 'ÿ' [ 225.595273][T12613] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 225.601839][T12613] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 225.610025][T12613] vhci_hcd vhci_hcd.0: Device attached [ 225.617195][T12613] vhci_hcd vhci_hcd.0: port 0 already used [ 225.652477][T12632] netlink: 54775 bytes leftover after parsing attributes in process `syz.1.2580'. [ 225.663948][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'. [ 225.746698][T12643] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 225.896277][T12624] vhci_hcd: connection closed [ 225.896428][ T1731] vhci_hcd: stop threads [ 225.905506][ T1731] vhci_hcd: release socket [ 225.909938][ T1731] vhci_hcd: disconnect device [ 225.914794][ T10] usb 10-1: enqueue for inactive port 0 [ 225.921713][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.118516][T12680] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 226.140496][ T10] usb 10-1: enqueue for inactive port 0 [ 226.411681][T12720] loop1: detected capacity change from 0 to 1024 [ 226.418536][T12720] EXT4-fs: Ignoring removed orlov option [ 226.451960][T12720] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.482012][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.528397][T12731] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 226.873105][T12746] loop3: detected capacity change from 0 to 128 [ 226.880018][T12746] vfat: Unknown parameter 'ÿ' [ 226.966998][T12748] loop0: detected capacity change from 0 to 512 [ 226.982574][T12748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.995342][T12748] ext4 filesystem being mounted at /501/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.014351][T12748] netlink: 'syz.0.2598': attribute type 4 has an invalid length. [ 227.032780][T12748] netlink: 'syz.0.2598': attribute type 4 has an invalid length. [ 227.065116][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.202957][T12756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2601'. [ 227.220721][ T29] kauditd_printk_skb: 4916 callbacks suppressed [ 227.220792][ T29] audit: type=1326 audit(5288436273.976:124684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff0c89d6567 code=0x7ffc0000 [ 227.251365][ T29] audit: type=1326 audit(5288436273.976:124685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff0c897b779 code=0x7ffc0000 [ 227.275179][ T29] audit: type=1326 audit(5288436273.976:124686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7ff0c89df6c9 code=0x7ffc0000 [ 227.299089][ T29] audit: type=1326 audit(5288436273.976:124687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0c8a11f85 code=0x7ffc0000 [ 227.322828][ T29] audit: type=1326 audit(5288436273.976:124688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0c8a11f85 code=0x7ffc0000 [ 227.323931][ T10] usb usb10-port1: attempt power cycle [ 227.346517][ T29] audit: type=1326 audit(5288436273.976:124689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0c8a11f85 code=0x7ffc0000 [ 227.346557][ T29] audit: type=1326 audit(5288436273.976:124690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0c8a11f85 code=0x7ffc0000 [ 227.399422][ T29] audit: type=1326 audit(5288436273.976:124691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0c8a11f85 code=0x7ffc0000 [ 227.399517][ T29] audit: type=1326 audit(5288436273.976:124692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0c8a11f85 code=0x7ffc0000 [ 227.399552][ T29] audit: type=1326 audit(5288436273.976:124693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz.3.2597" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff0c8a11f85 code=0x7ffc0000 [ 227.532066][T12768] loop0: detected capacity change from 0 to 512 [ 227.552994][T12768] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.565956][T12768] ext4 filesystem being mounted at /506/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.608544][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.614416][T12783] loop2: detected capacity change from 0 to 1024 [ 227.628079][T12783] EXT4-fs: Ignoring removed orlov option [ 227.635815][T12780] atomic_op ffff888144261528 conn xmit_atomic 0000000000000000 [ 227.664011][T12783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.684901][T12788] loop0: detected capacity change from 0 to 128 [ 227.692983][T12788] vfat: Unknown parameter 'ÿ' [ 227.699002][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.723542][T12790] loop1: detected capacity change from 0 to 2048 [ 227.742146][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2616'. [ 227.753230][T12790] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.896402][T12808] loop3: detected capacity change from 0 to 512 [ 228.079827][T12815] loop3: detected capacity change from 0 to 512 [ 228.102747][T12815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.115625][T12815] ext4 filesystem being mounted at /552/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.139061][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.276607][T12821] loop3: detected capacity change from 0 to 1024 [ 228.283919][T12821] EXT4-fs: Ignoring removed orlov option [ 228.292874][T12821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.317733][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.410914][T12831] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 228.452059][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.475096][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2631'. [ 228.608760][T12844] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12844 comm=syz.0.2644 [ 228.641992][T12844] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=12844 comm=syz.0.2644 [ 228.710188][T12845] loop1: detected capacity change from 0 to 512 [ 228.733807][T12845] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 228.761663][T12845] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 228.776632][T12845] EXT4-fs (loop1): 1 truncate cleaned up [ 228.782940][T12845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.853218][T12859] atomic_op ffff8881323fb528 conn xmit_atomic 0000000000000000 [ 228.922334][T12860] loop3: detected capacity change from 0 to 2048 [ 228.931955][T12860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.260657][ T10] usb usb10-port1: unable to enumerate USB device [ 229.372121][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.437018][T12872] loop1: detected capacity change from 0 to 128 [ 229.446048][T12872] vfat: Unknown parameter 'ÿ' [ 229.462288][T12874] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 229.635929][T12877] loop2: detected capacity change from 0 to 1024 [ 229.643754][T12877] EXT4-fs: Ignoring removed orlov option [ 229.653061][T12877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.676823][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.688265][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.748160][T12885] loop2: detected capacity change from 0 to 512 [ 229.764869][T12885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.777500][T12885] ext4 filesystem being mounted at /535/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 229.806011][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.873933][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'. [ 229.926747][T12904] loop2: detected capacity change from 0 to 128 [ 229.934005][T12904] vfat: Unknown parameter 'ÿ' [ 230.069244][T12913] atomic_op ffff888144261928 conn xmit_atomic 0000000000000000 [ 230.069722][T12912] loop0: detected capacity change from 0 to 512 [ 230.115068][T12915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2661'. [ 230.147393][T12917] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 230.158035][T12908] loop4: detected capacity change from 0 to 2048 [ 230.173677][T12908] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.465710][T12932] loop0: detected capacity change from 0 to 512 [ 230.866431][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.907820][T12980] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12980 comm=syz.4.2680 [ 230.950274][T12980] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=12980 comm=syz.4.2680 [ 231.235837][T13028] loop0: detected capacity change from 0 to 512 [ 231.252282][T13028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.273901][T13028] ext4 filesystem being mounted at /522/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.295447][T13028] netlink: 'syz.0.2684': attribute type 4 has an invalid length. [ 231.327411][T13044] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2686'. [ 231.356983][T13047] netlink: 'syz.0.2684': attribute type 4 has an invalid length. [ 231.391989][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.425424][T13057] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 231.431980][T13057] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 231.440235][T13057] vhci_hcd vhci_hcd.0: Device attached [ 231.446856][T13057] vhci_hcd vhci_hcd.0: port 0 already used [ 231.615537][T13061] vhci_hcd: connection closed [ 231.615874][ T31] vhci_hcd: stop threads [ 231.624964][ T31] vhci_hcd: release socket [ 231.629403][ T31] vhci_hcd: disconnect device [ 231.857584][T13109] loop4: detected capacity change from 0 to 512 [ 231.974872][T13117] atomic_op ffff888105947928 conn xmit_atomic 0000000000000000 [ 231.992113][T13121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2698'. [ 232.018069][T13123] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13123 comm=syz.4.2699 [ 232.051607][T13123] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=13123 comm=syz.4.2699 [ 232.064607][T13125] loop2: detected capacity change from 0 to 2048 [ 232.082470][T13125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.238136][T13139] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 232.388018][ T29] kauditd_printk_skb: 4259 callbacks suppressed [ 232.388046][ T29] audit: type=1326 audit(5288437305.137:128953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 232.418970][ T29] audit: type=1326 audit(5288437305.137:128954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 232.442882][ T29] audit: type=1326 audit(5288437305.137:128955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 232.466689][ T29] audit: type=1326 audit(5288437305.137:128956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 232.490431][ T29] audit: type=1326 audit(5288437305.147:128957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 232.514133][ T29] audit: type=1326 audit(5288437305.147:128958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 232.537932][ T29] audit: type=1326 audit(5288437305.147:128959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 232.561616][ T29] audit: type=1326 audit(5288437305.147:128960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 232.585458][ T29] audit: type=1326 audit(5288437305.147:128961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 232.609171][ T29] audit: type=1326 audit(5288437305.147:128962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13138 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f729ed0f6c9 code=0x7ffc0000 [ 232.677482][T13144] loop3: detected capacity change from 0 to 512 [ 232.760417][T13151] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13151 comm=syz.3.2708 [ 232.786467][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.792333][T13151] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=13151 comm=syz.3.2708 [ 232.839114][T13159] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13159 comm=syz.3.2711 [ 232.851787][T13156] loop2: detected capacity change from 0 to 1024 [ 232.858606][T13156] EXT4-fs: Ignoring removed orlov option [ 232.867189][T13156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.878739][T13159] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=13159 comm=syz.3.2711 [ 233.041560][T13156] ================================================================== [ 233.049755][T13156] BUG: KCSAN: data-race in filemap_read / filemap_read [ 233.056653][T13156] [ 233.058980][T13156] read to 0xffff88811b26b468 of 8 bytes by task 13165 on cpu 1: [ 233.066617][T13156] filemap_read+0x6f/0xa00 [ 233.071056][T13156] generic_file_read_iter+0x79/0x330 [ 233.076368][T13156] ext4_file_read_iter+0x1cc/0x290 [ 233.081488][T13156] copy_splice_read+0x442/0x660 [ 233.086351][T13156] splice_direct_to_actor+0x290/0x680 [ 233.091745][T13156] do_splice_direct+0xda/0x150 [ 233.096535][T13156] do_sendfile+0x380/0x650 [ 233.100974][T13156] __x64_sys_sendfile64+0x105/0x150 [ 233.106207][T13156] x64_sys_call+0x2bb4/0x3000 [ 233.110988][T13156] do_syscall_64+0xd2/0x200 [ 233.115506][T13156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.121414][T13156] [ 233.123745][T13156] write to 0xffff88811b26b468 of 8 bytes by task 13156 on cpu 0: [ 233.131482][T13156] filemap_read+0x974/0xa00 [ 233.136013][T13156] generic_file_read_iter+0x79/0x330 [ 233.141326][T13156] ext4_file_read_iter+0x1cc/0x290 [ 233.146455][T13156] copy_splice_read+0x442/0x660 [ 233.151323][T13156] splice_direct_to_actor+0x290/0x680 [ 233.156714][T13156] do_splice_direct+0xda/0x150 [ 233.161497][T13156] do_sendfile+0x380/0x650 [ 233.165939][T13156] __x64_sys_sendfile64+0x105/0x150 [ 233.171165][T13156] x64_sys_call+0x2bb4/0x3000 [ 233.175864][T13156] do_syscall_64+0xd2/0x200 [ 233.180391][T13156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.186299][T13156] [ 233.188644][T13156] value changed: 0x000000000000021a -> 0x000000000000021b [ 233.195752][T13156] [ 233.198076][T13156] Reported by Kernel Concurrency Sanitizer on: [ 233.204227][T13156] CPU: 0 UID: 0 PID: 13156 Comm: syz.2.2709 Not tainted syzkaller #0 PREEMPT(voluntary) [ 233.214056][T13156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.224120][T13156] ================================================================== [ 233.278785][T13173] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2709'. [ 233.340059][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2713'. [ 233.367598][T13156] siw: device registration error -23 [ 233.681250][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.