last executing test programs: 2.734926141s ago: executing program 1 (id=345): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) open(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_disconnect(0xffffffffffffffff) 2.105367395s ago: executing program 1 (id=362): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000c7474bba47695d921d3f37dc01f11cb9bd4c4bc82c5935062379a6783a00f36fa56e35aab774e15ba05aec95801ca41c6f093d3e04c859b8dd137ef12c4520b8b00fb175cc1b0dbe42054df96d56ff7954b22740fea5607acdacd46634ca85c2801e2f3c7e4679dfad2beed3d74451722366c7f7d27da95a7cdef88194cb98b4a1f37fae922af9eed3caf4f049108875d3da828fc0ef78d63d58a3680aafc45e2aab6984377719b0e59f3976c10f0189367b48ce79115935c2f2be428cc14a832ced1bcfd675b6d147f495648237bf622c"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000640)='nilfs2_mdt_submit_block\x00', r0, 0x0, 0xe17}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mmap(&(0x7f0000135000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xa34a3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) epoll_create(0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="030000010100000006000000000a00000f000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000500"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) 1.965026486s ago: executing program 4 (id=365): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) 1.945119787s ago: executing program 4 (id=366): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r0, 0x0, 0x80) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) 1.926590316s ago: executing program 4 (id=367): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000001) inotify_add_watch(r0, &(0x7f0000000100)='./file0/bus\x00', 0xc4000100) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) 1.899868927s ago: executing program 4 (id=368): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xec4}, 0x18) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0xdd3) close(r2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff, 0x8}}, './file0\x00'}) 1.873939377s ago: executing program 4 (id=369): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4}, 0x18) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x3e}, @remote, @remote, 0x3, 0x2, 0x0, 0x0, 0xb7, 0x2000213, r4}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x3, 0x6, @random="cea0300a1672"}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000180)={{0x2, 0x4e21, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}}) 1.803363437s ago: executing program 4 (id=370): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x2e, 0x0, 0x108) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020816c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xbfb}, 0x18) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRESHEX, @ANYBLOB="0000000000000074973b25c160c4b4e728cb0950efcd3ec3488377a0cc1e7b552b88892ca599e82689a6abaaf4d6a7162ad487b0cc9abadd9659a248042b88dfc6eecda345934be9254485a9dee0a4064c2ff843501dec46bf88b6f9fdbf8ab432ce825f89820f874c6cc31147e24787191b6795dc9abdfba5b2c0870b8b40499a9b888998c5ce5a196591f48c10a2b811edbf28869efbfb92338fcf8692a3f560646114d5199334f2faecf27cb0352660dc489b3ed2caaaf61c3f5ff431c811fc23c276607ceb26c93215defd9d19ff141bd1220a0ba4ac88534a65cb920ec68a2099ed96d84f232a977a0e26516c61b86e801fe151d1d4aff56c432d6f7685216b3df117934beffce51ea2b83c0cbce1676a57a2d26a2d0d99ed065e7027b24e70c3d207eb060d8878e63cd82143b382bec44c60041c73031956663fab7af49ee44d99dccdd85d1216dc98e372740a11b82259438f7de31213", @ANYRESHEX, @ANYBLOB=',rootcontext=system_u,\x00']) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000003c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) waitid(0x2, 0x0, 0x0, 0x4, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r7, 0x0, r6, 0x0, 0x5, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r6, 0x4, 0x7c00) fspick(r5, &(0x7f00000002c0)='./file0\x00', 0x1) r8 = dup3(r7, r1, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) connect$bt_l2cap(r8, &(0x7f0000000500)={0x1f, 0x6, @none, 0x7f, 0x1}, 0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000180)={r9, @in={{0x2, 0x4e21, @empty}}, 0x8, 0xe6}, 0x90) r10 = openat(r5, &(0x7f0000000480)='./file1\x00', 0x208201, 0x40) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r10, {0x9}}, './file0\x00'}) r11 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) pwritev(r11, &(0x7f0000003d80)=[{&(0x7f0000000980)='-1', 0x2}, {&(0x7f00000009c0)="370fc80d277b63e2259e", 0xa}, {&(0x7f0000000cc0)="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", 0x1000}, {&(0x7f0000000a00)="58fe64b77276410868c35875ec4f4b4bd9d7e3d0695c1ef9b6367e", 0x1b}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)="6cd7cde0df69d4d6edd11aa02976fd2c510f425bf7418e00280589eba544e1e5bd55f3051e85fc2e18b52a4ef98141bfb4bf9d8b5a673403e4", 0x39}], 0x6, 0x7, 0x3ff) 1.687658978s ago: executing program 0 (id=371): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1002430, &(0x7f0000000440)={[{@quota}, {@noquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) rmdir(&(0x7f0000000000)='./file0\x00') 1.607152929s ago: executing program 0 (id=372): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0xfffffffe, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)="d8000000200081044e81f782db44b90402000000e8fe55a11800150006001c0000000e120900100000000401a80016000a0011400600000003080000004dcf5c0468c1d67f6f94007134cf6ee08088568ab35d6e7016bb234841ef52b49816277ce06bbace806069438e6fb599e0ced72a6ba86cf917cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d414f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce34d4a13821f4fbb9ad809d561cdce81ed0bffece0b42a9e", 0xd8}], 0x1}, 0x0) close(r0) 1.546980679s ago: executing program 1 (id=373): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000200)={0x8, 'vlan1\x00', {'netdevsim0\x00'}, 0x4}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r1, &(0x7f0000000780)=[{&(0x7f0000001440)="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", 0x1ab}], 0x1) 1.49836247s ago: executing program 0 (id=374): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x2000000000000101, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffec6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f0000000200)}) fdatasync(0xffffffffffffffff) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r7, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 1.497546379s ago: executing program 1 (id=375): r0 = gettid() rt_sigqueueinfo(r0, 0x23, &(0x7f0000001340)={0x3, 0x0, 0x7}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000008000000dd00000040"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r2}, 0x18) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r2}, 0x8) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)=""/148, 0x18b, 0x94, 0x0, 0x2, 0x10000, @value=r3}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xfffffffffffffe3c, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="16000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="71c82cbd7000fbdbdf250400000030000180060004004e230000060002003a0000001400030000000000000000000000000000000000060001"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPVS_CMD_FLUSH(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000940)=ANY=[@ANYBLOB="98003219f0e2550000", @ANYRES16=r9, @ANYBLOB="000429bd7000ffdbdf25110000002c000180060004004e2200000600010002000000060004004e240000060002003a00000006000100020000003c000180060004004e21000006000100020000000c0007000000000016000000060002008900000006000100020000000c00070025000000040000001c0001800600020016000000060002002b0000000800080008000000"], 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x20004805) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaafad1e048716e08004500001c00000000009078000000000000000000004e2000089078d7323921bbc98563795444829fda805f8ae8c96d7965e96314039e834fb79aa1f650a24ac649e0a71a60e6e533664764874f35edd62be0adcc99591613b4ea801cddcc44cf367d15d7eedfd3ace66603cebf6ddb278961452640db11a72a78a18bebd28bf4ca8b2bbb08efd8f46a2c93e1db9cf8369308ee5db746b5c7539c2d36405d8ebc4ca677c0abc4de029784fbe3a3295ca6cae39fcfe345cc497ce8c24a57319e6bae393f86cbc7d8dc2530ecf867076ad2fd6cae47dec1"], 0x0) setsockopt$inet_int(r8, 0x0, 0x14, &(0x7f00000001c0)=0x3f7, 0x4) recvmmsg(r8, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) r12 = dup(r11) write$UHID_INPUT(r12, &(0x7f0000002080)={0xa, {"a2e3ad214fc752f91b2909004bf70e0dd038e7ff7fc6e5539b326c078b089b3b083844090890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b333b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0afc9397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6258742317662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab96b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e0088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76ccc2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c826467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb204466cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2e57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849d11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f9d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f0712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073da5b0000d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1ccced94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89234b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d876a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x823}}, 0x1006) 1.320724321s ago: executing program 2 (id=376): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0), 0x0, 0x38b6, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000001b00)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '9J\t', 0x0, 0x32, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2}}}}, 0x0) 1.291175391s ago: executing program 2 (id=377): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) 1.253924141s ago: executing program 2 (id=379): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000680)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0xfff8, 0x2, 0x1, 0x9, 0x7}}, 0x118) 1.235406701s ago: executing program 2 (id=380): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r4, 0x10, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x185) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000300)="bfde55a16aedb1c2b3910bdc7e87ada1b9946d6a237675c8fd10a73865fafbd10c4b3e888a274ddce01f1495eca164e5d7db5dcf1b9600a57e69fbf991de888a151ed6e7204507ba9dbd53dc000c6becd72a401569ab0bc51a07e630b6914d0bc70c19b6c65dc577c534fb88db3b73", 0x6f}, {&(0x7f0000000380)="aecd3c07bc02fc913cb73d32fdf344c04d2ffc326d5abd298fae33b91058d4a7b14a5d755dc5ca", 0x27}], 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) 1.024370483s ago: executing program 2 (id=381): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x20ffe, 0x0, 0x0, 0x40f00, 0xac, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_usb_disconnect(0xffffffffffffffff) setpriority(0x1, 0x0, 0x8) 633.576395ms ago: executing program 1 (id=382): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000c7474bba47695d921d3f37dc01f11cb9bd4c4bc82c5935062379a6783a00f36fa56e35aab774e15ba05aec95801ca41c6f093d3e04c859b8dd137ef12c4520b8b00fb175cc1b0dbe42054df96d56ff7954b22740fea5607acdacd46634ca85c2801e2f3c7e4679dfad2beed3d74451722366c7f7d27da95a7cdef88194cb98b4a1f37fae922af9eed3caf4f049108875d3da828fc0ef78d63d58a3680aafc45e2aab6984377719b0e59f3976c10f0189367b48ce79115935c2f2be428cc14a832ced1bcfd675b6d147f495648237bf622c"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000640)='nilfs2_mdt_submit_block\x00', r0, 0x0, 0xe17}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mmap(&(0x7f0000135000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xa34a3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) epoll_create(0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="030000010100000006000000000a00000f000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000500"/28], 0x50) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) 600.929816ms ago: executing program 0 (id=383): bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000c7474bba47695d921d3f37dc01f11cb9bd4c4bc82c5935062379a6783a00f36fa56e35aab774e15ba05aec95801ca41c6f093d3e04c859b8dd137ef12c4520b8b00fb175cc1b0dbe42054df96d56ff7954b22740fea5607acdacd46634ca85c2801e2f3c7e4679dfad2beed3d74451722366c7f7d27da95a7cdef88194cb98b4a1f37fae922af9eed3caf4f049108875d3da828fc0ef78d63d58a3680aafc45e2aab6984377719b0e59f3976c10f0189367b48ce79115935c2f2be428cc14a832ced1bcfd675b6d147f495648237bf622c"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000640)='nilfs2_mdt_submit_block\x00', r0, 0x0, 0xe17}, 0x18) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) mmap(&(0x7f0000135000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0xa34a3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f00000001c0)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) epoll_create(0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlockall() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="030000010100000006000000000a00000f000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000500"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) 394.560997ms ago: executing program 3 (id=385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x20000000000000}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000240)=[{&(0x7f00000000c0)="3b256c7a40ff8cf30d776a89d5cfc3ce7467bd24", 0x14}], 0x1, 0x0) r8 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r6, 0x0, r8, 0x0, 0x8000, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x40000041, 0x4, 0x3, 0x3}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 355.953988ms ago: executing program 3 (id=386): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x9}, 0x0, 0x10000, 0x0, 0x6, 0x2000000000008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) r3 = memfd_create(&(0x7f0000000280)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r3, &(0x7f0000001880)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@fadd={0x58, 0x114, 0x6, {{0x5, 0x6}, &(0x7f0000000400)=0x7, 0x0, 0xf, 0x4, 0x9, 0xfffffffffffffff9, 0x22, 0x7}}], 0x58, 0x8000}, 0x0) 333.469028ms ago: executing program 2 (id=387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f00000004c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x8, 0x5}, {0x12, 0x1, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) 257.450358ms ago: executing program 3 (id=388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) r4 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x1b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) write$vga_arbiter(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='lock io'], 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r8, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000680)="b7", 0x1}], 0x1}}], 0x2, 0x24001844) write$vga_arbiter(r1, &(0x7f0000000100)=@other={'unlock', ' ', 'mem'}, 0xb) syz_emit_ethernet(0x4e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd31800180600fc010000000000000000000000000002fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60dcf202000090780000fe0201021c6efc1072ebbd5b138bb6554788ff51e169363d784a073a68d5d90d286e3e663eb206383a36fee7aeacde16562c55e00400f0bac6105102fc1c94b0e3635addb43765644f44240875d94b92d8d081f4341a2ced5286692367a0cb8828734714cb3e64d8f2898bf78392fdf40b25e40122fd4d355dffb60688d57e3ead47d9"], 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x20000800) 181.950178ms ago: executing program 0 (id=389): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) 111.647659ms ago: executing program 3 (id=390): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 110.612879ms ago: executing program 0 (id=391): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x0, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x8, 0x80, 0x3, 0x5}, {0xea, 0x9, 0x9, 0x8}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000140)=@fragment={0xb6, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8) sendto$inet6(r1, 0x0, 0xffffffffffffff2e, 0x404cc40, &(0x7f0000000040)={0xa, 0x4e22, 0xffffff7c, @mcast2, 0x7}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f00000005c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r5) sendmsg$IEEE802154_LIST_PHY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r7, 0x30b, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000022007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file2\x00', 0xc8d0, &(0x7f0000000100)=ANY=[@ANYRES8], 0x1, 0x30e, &(0x7f0000000ac0)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") lstat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000400)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x5, 0x2, 0x80, 0xfffffff1}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'netpci0\x00'}) getgid() truncate(&(0x7f0000000900)='./file1\x00', 0x24b9) 102.822939ms ago: executing program 1 (id=392): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r3 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = open(&(0x7f0000000100)='./file0\x00', 0x624003, 0x520f26f1033c1623) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0x7, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x1}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f00000006c0)=0x101, 0x4) bind$bt_hci(r8, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000f2ff0000000001b1622063b9b09374f1e353760000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r9, 0x0, &(0x7f0000000340)) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r12 = socket$netlink(0x10, 0x3, 0x4) getdents(0xffffffffffffff9c, &(0x7f00000007c0)=""/32, 0x20) write(r12, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) io_uring_enter(r4, 0x847bd, 0x2004, 0xe, 0x0, 0x0) r13 = getpid() process_vm_writev(r13, &(0x7f0000000640)=[{&(0x7f0000000380)=""/241, 0xf1}, {&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000001c0)=""/50, 0x32}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/24, 0x18}, {&(0x7f0000000480)=""/179, 0xb3}, {&(0x7f00000005c0)=""/126, 0x7e}], 0x7, &(0x7f0000000780)=[{&(0x7f0000000740)=""/2, 0x2}], 0x1, 0x0) bind$packet(r0, &(0x7f0000000300)={0x11, 0x3, r2, 0x1, 0x0, 0x6, @random="0002006800"}, 0x14) 50.56842ms ago: executing program 3 (id=393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000001b00)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, '9J\t', 0x0, 0x32, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2}}}}, 0x0) 0s ago: executing program 3 (id=394): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf) pwrite64(r0, &(0x7f00000000c0)='^0', 0x2, 0x7ff) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0x45, [@private=0x7, @empty, @empty, @local]}, @timestamp={0x44, 0x8, 0x5, 0x3, 0x0, [0x0]}]}}, {{0xfffe, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 35.249507][ T29] audit: type=1400 audit(1762811791.945:62): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.272927][ T29] audit: type=1400 audit(1762811791.965:63): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.274637][ T3305] cgroup: Unknown subsys name 'net' [ 35.301536][ T29] audit: type=1400 audit(1762811791.995:64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.457592][ T3305] cgroup: Unknown subsys name 'cpuset' [ 35.464015][ T3305] cgroup: Unknown subsys name 'rlimit' [ 35.585462][ T29] audit: type=1400 audit(1762811792.275:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 35.608881][ T29] audit: type=1400 audit(1762811792.275:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.629833][ T29] audit: type=1400 audit(1762811792.275:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.650453][ T29] audit: type=1400 audit(1762811792.275:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.653455][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 35.671069][ T29] audit: type=1400 audit(1762811792.275:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 35.704774][ T29] audit: type=1400 audit(1762811792.275:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.722589][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.728896][ T29] audit: type=1400 audit(1762811792.385:71): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 37.863204][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 37.978307][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.985428][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.992960][ T3315] bridge_slave_0: entered allmulticast mode [ 37.999623][ T3315] bridge_slave_0: entered promiscuous mode [ 38.008556][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.015705][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.022899][ T3315] bridge_slave_1: entered allmulticast mode [ 38.029479][ T3315] bridge_slave_1: entered promiscuous mode [ 38.056230][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 38.073062][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.082257][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 38.106286][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.160799][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 38.189304][ T3315] team0: Port device team_slave_0 added [ 38.200825][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.208262][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.215506][ T3317] bridge_slave_0: entered allmulticast mode [ 38.222320][ T3317] bridge_slave_0: entered promiscuous mode [ 38.237478][ T3315] team0: Port device team_slave_1 added [ 38.250399][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.257625][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.264954][ T3317] bridge_slave_1: entered allmulticast mode [ 38.271614][ T3317] bridge_slave_1: entered promiscuous mode [ 38.293886][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.301250][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.327484][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.345666][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.352941][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.360208][ T3324] bridge_slave_0: entered allmulticast mode [ 38.366681][ T3324] bridge_slave_0: entered promiscuous mode [ 38.375556][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.382557][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.408686][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.429467][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.436671][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.443972][ T3324] bridge_slave_1: entered allmulticast mode [ 38.450417][ T3324] bridge_slave_1: entered promiscuous mode [ 38.473721][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.488457][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.495642][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.502943][ T3323] bridge_slave_0: entered allmulticast mode [ 38.509526][ T3323] bridge_slave_0: entered promiscuous mode [ 38.538870][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.550273][ T3315] hsr_slave_0: entered promiscuous mode [ 38.556301][ T3315] hsr_slave_1: entered promiscuous mode [ 38.562550][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.569779][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.577136][ T3323] bridge_slave_1: entered allmulticast mode [ 38.583693][ T3323] bridge_slave_1: entered promiscuous mode [ 38.591381][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.603599][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.628326][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 38.643622][ T3317] team0: Port device team_slave_0 added [ 38.667882][ T3317] team0: Port device team_slave_1 added [ 38.674833][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.690275][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.700306][ T3324] team0: Port device team_slave_0 added [ 38.727390][ T3324] team0: Port device team_slave_1 added [ 38.738744][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.745815][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.772028][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.798249][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.805432][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.832050][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.851684][ T3323] team0: Port device team_slave_0 added [ 38.878924][ T3323] team0: Port device team_slave_1 added [ 38.885157][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.892163][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.918347][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.946798][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.953964][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.980202][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.012797][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.019876][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.046486][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.059829][ T3317] hsr_slave_0: entered promiscuous mode [ 39.066128][ T3317] hsr_slave_1: entered promiscuous mode [ 39.072133][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 39.077908][ T3317] Cannot create hsr debugfs directory [ 39.083575][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.090789][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.098338][ T3326] bridge_slave_0: entered allmulticast mode [ 39.105127][ T3326] bridge_slave_0: entered promiscuous mode [ 39.118481][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.125544][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.151699][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.162953][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.170116][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.177475][ T3326] bridge_slave_1: entered allmulticast mode [ 39.184151][ T3326] bridge_slave_1: entered promiscuous mode [ 39.232783][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.261840][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.276419][ T3324] hsr_slave_0: entered promiscuous mode [ 39.282624][ T3324] hsr_slave_1: entered promiscuous mode [ 39.288565][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 39.294364][ T3324] Cannot create hsr debugfs directory [ 39.309084][ T3323] hsr_slave_0: entered promiscuous mode [ 39.315564][ T3323] hsr_slave_1: entered promiscuous mode [ 39.321566][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 39.327435][ T3323] Cannot create hsr debugfs directory [ 39.357758][ T3326] team0: Port device team_slave_0 added [ 39.366942][ T3326] team0: Port device team_slave_1 added [ 39.401621][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.408679][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.435138][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.461212][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.468416][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.494581][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.536175][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.549544][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.570857][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.581751][ T3326] hsr_slave_0: entered promiscuous mode [ 39.588141][ T3326] hsr_slave_1: entered promiscuous mode [ 39.593979][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 39.599749][ T3326] Cannot create hsr debugfs directory [ 39.616107][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.688083][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.702811][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.712100][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.728114][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.764765][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.774825][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.784085][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.793552][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.829465][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.839378][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.857521][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.874560][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.905417][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.918443][ T3326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.927346][ T3326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.936524][ T3326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.950696][ T3326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.970577][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.992696][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.999908][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.017935][ T1816] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.025114][ T1816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.051803][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.063422][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.081956][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.101068][ T1735] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.108716][ T1735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.118130][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.135315][ T1735] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.142640][ T1735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.151476][ T1735] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.158564][ T1735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.168467][ T1735] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.175666][ T1735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.187337][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.215268][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.229939][ T1735] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.237078][ T1735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.254801][ T1735] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.262038][ T1735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.276521][ T3324] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.287020][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.305137][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.322829][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 40.333338][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.360836][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.370100][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.382790][ T159] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.389919][ T159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.418698][ T159] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.425841][ T159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.461755][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.532405][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.577081][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.623275][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.645363][ T3324] veth0_vlan: entered promiscuous mode [ 40.654431][ T3315] veth0_vlan: entered promiscuous mode [ 40.667817][ T3324] veth1_vlan: entered promiscuous mode [ 40.674937][ T3315] veth1_vlan: entered promiscuous mode [ 40.720312][ T3315] veth0_macvtap: entered promiscuous mode [ 40.727640][ T3324] veth0_macvtap: entered promiscuous mode [ 40.737995][ T3315] veth1_macvtap: entered promiscuous mode [ 40.745589][ T3324] veth1_macvtap: entered promiscuous mode [ 40.774538][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.788262][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.799822][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.812050][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.826970][ T52] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.835918][ T52] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.856684][ T3317] veth0_vlan: entered promiscuous mode [ 40.868341][ T52] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.887593][ T52] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.898169][ T3317] veth1_vlan: entered promiscuous mode [ 40.912669][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.921484][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.940492][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.953183][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 40.953198][ T29] audit: type=1400 audit(1762811797.645:81): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/root/syzkaller.E7g03A/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 40.970409][ T3317] veth0_macvtap: entered promiscuous mode [ 40.989586][ T29] audit: type=1400 audit(1762811797.645:82): avc: denied { mount } for pid=3324 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.011704][ T29] audit: type=1400 audit(1762811797.645:83): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/root/syzkaller.E7g03A/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.037122][ T29] audit: type=1400 audit(1762811797.645:84): avc: denied { mount } for pid=3324 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 41.059145][ T29] audit: type=1400 audit(1762811797.645:85): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/root/syzkaller.E7g03A/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 41.085790][ T29] audit: type=1400 audit(1762811797.645:86): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/root/syzkaller.E7g03A/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 41.113623][ T29] audit: type=1400 audit(1762811797.655:87): avc: denied { unmount } for pid=3324 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 41.135993][ T3324] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.146875][ T29] audit: type=1400 audit(1762811797.695:88): avc: denied { mounton } for pid=3324 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 41.158120][ T3323] veth0_vlan: entered promiscuous mode [ 41.173695][ T29] audit: type=1400 audit(1762811797.695:89): avc: denied { mount } for pid=3324 comm="syz-executor" name="/" dev="gadgetfs" ino=3746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 41.182330][ T3323] veth1_vlan: entered promiscuous mode [ 41.210829][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.222264][ T3326] veth0_vlan: entered promiscuous mode [ 41.239059][ T3317] veth1_macvtap: entered promiscuous mode [ 41.250852][ T29] audit: type=1400 audit(1762811797.945:90): avc: denied { read write } for pid=3324 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.276821][ T3326] veth1_vlan: entered promiscuous mode [ 41.293533][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.310789][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.333004][ T3323] veth0_macvtap: entered promiscuous mode [ 41.357675][ T3326] veth0_macvtap: entered promiscuous mode [ 41.363642][ T3490] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 41.374336][ T3323] veth1_macvtap: entered promiscuous mode [ 41.381522][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.404369][ T3326] veth1_macvtap: entered promiscuous mode [ 41.412385][ T3494] loop1: detected capacity change from 0 to 512 [ 41.421792][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.431794][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.450512][ T1816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.460705][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.471502][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.478876][ T1816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.488684][ T3494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.499219][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.504143][ T3494] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.527830][ T3494] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.8: corrupted inode contents [ 41.548331][ T1816] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.558929][ T1816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.573324][ T3494] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.8: mark_inode_dirty error [ 41.585387][ T1816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.598005][ T1816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.610541][ T3494] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.8: corrupted inode contents [ 41.625789][ T1816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.637580][ T3494] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.8: mark_inode_dirty error [ 41.647975][ T3500] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 41.676106][ T1816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.695773][ T1816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.706937][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.731671][ T1816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.881954][ C1] hrtimer: interrupt took 29049 ns [ 41.946681][ T3516] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 42.096045][ T3522] loop3: detected capacity change from 0 to 512 [ 42.114775][ T3522] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.147995][ T3522] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 42.165733][ T3522] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.188533][ T3522] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.11: corrupted inode contents [ 42.207531][ T3522] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.11: mark_inode_dirty error [ 42.240153][ T3522] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.11: corrupted inode contents [ 42.268302][ T3522] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.11: mark_inode_dirty error [ 42.328341][ T3522] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.11: corrupted inode contents [ 42.353663][ T3522] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 42.375662][ T3536] loop0: detected capacity change from 0 to 512 [ 42.396723][ T3522] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.11: corrupted inode contents [ 42.431407][ T3536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.440501][ T3522] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.11: mark_inode_dirty error [ 42.479384][ T3536] ext4 filesystem being mounted at /1/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.479504][ T3544] loop2: detected capacity change from 0 to 512 [ 42.508712][ T3522] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 42.540863][ T3522] EXT4-fs (loop3): 1 truncate cleaned up [ 42.547950][ T3544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.551223][ T1816] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 1 [ 42.568839][ T3536] netlink: 'syz.0.12': attribute type 4 has an invalid length. [ 42.608204][ T3522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.627347][ T3544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.646516][ T3551] netlink: 'syz.0.12': attribute type 4 has an invalid length. [ 42.663841][ T3553] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 42.680939][ T3544] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.742910][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.757988][ T3536] syz.0.12 (3536) used greatest stack depth: 10056 bytes left [ 42.830191][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.882986][ T3567] loop3: detected capacity change from 0 to 1024 [ 42.899724][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.911372][ T3567] ======================================================= [ 42.911372][ T3567] WARNING: The mand mount option has been deprecated and [ 42.911372][ T3567] and is ignored by this kernel. Remove the mand [ 42.911372][ T3567] option from the mount to silence this warning. [ 42.911372][ T3567] ======================================================= [ 42.951576][ T3569] loop0: detected capacity change from 0 to 512 [ 42.968175][ T3567] EXT4-fs: inline encryption not supported [ 43.025059][ T3567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.052012][ T3574] loop2: detected capacity change from 0 to 1024 [ 43.091652][ T3574] EXT4-fs: Ignoring removed orlov option [ 43.127648][ T3574] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.225822][ T3590] loop0: detected capacity change from 0 to 512 [ 43.227296][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 43.239769][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.248013][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.270804][ T3588] team0 (unregistering): Port device team_slave_0 removed [ 43.281612][ T3590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.281668][ T3588] team0 (unregistering): Port device team_slave_1 removed [ 43.310319][ T3590] ext4 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.326133][ T3595] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 43.367523][ T3590] netlink: 'syz.0.20': attribute type 4 has an invalid length. [ 43.411937][ T3600] netlink: 'syz.0.20': attribute type 4 has an invalid length. [ 43.527785][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.626356][ T3610] loop2: detected capacity change from 0 to 512 [ 43.661140][ T3610] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.702625][ T3617] loop0: detected capacity change from 0 to 512 [ 43.723166][ T3610] ext4 filesystem being mounted at /7/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.748754][ T3617] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.779207][ T3617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 43.807824][ T3617] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.873248][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.073018][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.220060][ T3660] loop3: detected capacity change from 0 to 512 [ 44.235681][ T3660] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.245350][ T3658] loop0: detected capacity change from 0 to 1024 [ 44.257116][ T3660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.280180][ T3658] EXT4-fs: inline encryption not supported [ 44.286378][ T3660] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.335381][ T3658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.393701][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.416525][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.470891][ T3687] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 44.477495][ T3687] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 44.485760][ T3687] vhci_hcd vhci_hcd.0: Device attached [ 44.500552][ T3694] loop4: detected capacity change from 0 to 7 [ 44.507730][ T3571] Buffer I/O error on dev loop4, logical block 0, async page read [ 44.515625][ T3571] Buffer I/O error on dev loop4, logical block 0, async page read [ 44.523637][ T3571] loop4: unable to read partition table [ 44.537244][ T3687] vhci_hcd vhci_hcd.0: port 0 already used [ 44.546955][ T3697] loop3: detected capacity change from 0 to 1024 [ 44.573185][ T3694] Buffer I/O error on dev loop4, logical block 0, async page read [ 44.581340][ T3694] Buffer I/O error on dev loop4, logical block 0, async page read [ 44.589412][ T3694] loop4: unable to read partition table [ 44.599259][ T3694] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 44.599842][ T3571] Buffer I/O error on dev loop4, logical block 0, async page read [ 44.621853][ T3697] EXT4-fs: Ignoring removed orlov option [ 44.652348][ T3571] Buffer I/O error on dev loop4, logical block 0, async page read [ 44.666556][ T3697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.675317][ T3571] Buffer I/O error on dev loop4, logical block 0, async page read [ 44.687335][ T3571] Buffer I/O error on dev loop4, logical block 0, async page read [ 44.695760][ T3571] Buffer I/O error on dev loop4, logical block 0, async page read [ 44.704313][ T3571] Buffer I/O error on dev loop4, logical block 0, async page read [ 44.744138][ T3712] loop0: detected capacity change from 0 to 512 [ 44.777584][ T10] usb 4-1: SetAddress Request (2) to port 0 [ 44.783824][ T10] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 44.820704][ T3717] loop2: detected capacity change from 0 to 512 [ 44.828649][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.855250][ T3717] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.856555][ T3712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.877150][ T3712] ext4 filesystem being mounted at /11/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.901781][ T3688] vhci_hcd: connection reset by peer [ 44.907524][ T37] vhci_hcd: stop threads [ 44.911875][ T37] vhci_hcd: release socket [ 44.916365][ T37] vhci_hcd: disconnect device [ 44.932858][ T3717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.949055][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.956665][ T3717] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.995857][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 45.058560][ T3734] loop3: detected capacity change from 0 to 512 [ 45.074971][ T3735] loop0: detected capacity change from 0 to 1024 [ 45.080220][ T3734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.111677][ T3734] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.113534][ T3734] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.54: corrupted inode contents [ 45.113889][ T3734] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.54: mark_inode_dirty error [ 45.117852][ T3734] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.54: corrupted inode contents [ 45.138655][ T3735] EXT4-fs: inline encryption not supported [ 45.183842][ T3735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.184278][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.234053][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.306760][ T3748] loop3: detected capacity change from 0 to 128 [ 45.318134][ T3748] vfat: Unknown parameter 'ÿ' [ 45.468534][ T3752] loop1: detected capacity change from 0 to 512 [ 45.480002][ T3752] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.493507][ T3752] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.514470][ T3752] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.60: corrupted inode contents [ 45.526594][ T3752] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.60: mark_inode_dirty error [ 45.538657][ T3752] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.60: corrupted inode contents [ 45.550704][ T3752] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.60: mark_inode_dirty error [ 45.575566][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.636525][ T3757] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 45.643196][ T3757] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 45.651604][ T3757] vhci_hcd vhci_hcd.0: Device attached [ 45.656588][ T3763] loop4: detected capacity change from 0 to 512 [ 45.665388][ T3757] vhci_hcd vhci_hcd.0: port 0 already used [ 45.671824][ T3763] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.689427][ T3763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 45.704876][ T3763] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.735652][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 45.797800][ T3760] vhci_hcd: connection closed [ 45.798150][ T1816] vhci_hcd: stop threads [ 45.807294][ T1816] vhci_hcd: release socket [ 45.808000][ T3769] loop4: detected capacity change from 0 to 128 [ 45.811775][ T1816] vhci_hcd: disconnect device [ 45.826530][ T3769] vfat: Unknown parameter 'ÿ' [ 45.878425][ T3772] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 45.894424][ T3772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 45.957638][ T29] kauditd_printk_skb: 1654 callbacks suppressed [ 45.957657][ T29] audit: type=1326 audit(1762811802.655:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3747 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb671a1f85 code=0x7ffc0000 [ 45.988534][ T29] audit: type=1326 audit(1762811802.655:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3777161f85 code=0x7ffc0000 [ 46.012016][ T29] audit: type=1326 audit(1762811802.655:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3777161f85 code=0x7ffc0000 [ 46.035512][ T29] audit: type=1326 audit(1762811802.655:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3777126567 code=0x7ffc0000 [ 46.058935][ T29] audit: type=1326 audit(1762811802.655:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37770cb779 code=0x7ffc0000 [ 46.082133][ T29] audit: type=1326 audit(1762811802.655:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f377712f6c9 code=0x7ffc0000 [ 46.105969][ T29] audit: type=1326 audit(1762811802.655:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.64" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3777161f85 code=0x7ffc0000 [ 46.129360][ T29] audit: type=1326 audit(1762811802.655:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3747 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbb67166567 code=0x7ffc0000 [ 46.152879][ T29] audit: type=1326 audit(1762811802.655:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3747 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbb6710b779 code=0x7ffc0000 [ 46.177292][ T29] audit: type=1326 audit(1762811802.655:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3747 comm="syz.3.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fbb6716f6c9 code=0x7ffc0000 [ 46.277804][ T3779] loop3: detected capacity change from 0 to 512 [ 46.302670][ T3779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.325893][ T3779] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.404489][ T3779] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 46.508660][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.572364][ T3796] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.603915][ T3797] loop0: detected capacity change from 0 to 512 [ 46.756273][ T3809] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.786075][ T3807] loop4: detected capacity change from 0 to 128 [ 46.808492][ T3811] loop1: detected capacity change from 0 to 512 [ 46.815691][ T3807] vfat: Unknown parameter 'ÿ' [ 46.856405][ T3811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.890802][ T3811] ext4 filesystem being mounted at /14/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.927674][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.985879][ T3816] loop1: detected capacity change from 0 to 512 [ 47.015156][ T3816] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.069947][ T3816] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 47.097731][ T3816] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.128812][ T3776] syz.2.66 (3776) used greatest stack depth: 7496 bytes left [ 47.160364][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 47.196964][ T3826] loop2: detected capacity change from 0 to 512 [ 47.236558][ T3826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.271768][ T3826] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.309659][ T3826] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.82: corrupted inode contents [ 47.368331][ T3826] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.82: mark_inode_dirty error [ 47.389993][ T3826] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.82: corrupted inode contents [ 47.502917][ T3868] loop3: detected capacity change from 0 to 512 [ 47.518097][ T3872] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 47.539055][ T3868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.556971][ T3868] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.590863][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.617297][ T3868] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.88: corrupted inode contents [ 47.652288][ T3868] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.88: mark_inode_dirty error [ 47.663582][ T3878] loop4: detected capacity change from 0 to 512 [ 47.675078][ T3868] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.88: corrupted inode contents [ 47.692658][ T3868] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.88: mark_inode_dirty error [ 47.720832][ T3878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.744075][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.746971][ T3878] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.767732][ T3878] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.93: corrupted inode contents [ 47.767884][ T3878] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.93: mark_inode_dirty error [ 47.768113][ T3878] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.93: corrupted inode contents [ 47.768214][ T3878] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.93: mark_inode_dirty error [ 47.802844][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.843769][ T3888] loop4: detected capacity change from 0 to 1024 [ 47.886643][ T3888] EXT4-fs: Ignoring removed orlov option [ 47.889896][ T3890] loop3: detected capacity change from 0 to 512 [ 47.915697][ T3888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.940610][ T3890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.955600][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.966241][ T3890] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.987413][ T3890] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.96: corrupted inode contents [ 47.999676][ T3890] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.96: mark_inode_dirty error [ 48.012486][ T3890] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.96: corrupted inode contents [ 48.027275][ T3890] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.96: mark_inode_dirty error [ 48.063544][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.230933][ T3925] loop0: detected capacity change from 0 to 512 [ 48.246968][ T3922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.268684][ T3922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.289102][ T3925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.305621][ T3930] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 48.312265][ T3930] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 48.315772][ T3925] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.320764][ T3930] vhci_hcd vhci_hcd.0: Device attached [ 48.338986][ T3925] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.103: corrupted inode contents [ 48.351143][ T3925] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.103: mark_inode_dirty error [ 48.366305][ T3939] loop4: detected capacity change from 0 to 512 [ 48.376014][ T3925] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.103: corrupted inode contents [ 48.388664][ T3930] vhci_hcd vhci_hcd.0: port 0 already used [ 48.424734][ T3939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.454773][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.459740][ T3939] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.504033][ T3939] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.105: corrupted inode contents [ 48.535442][ T3956] loop2: detected capacity change from 0 to 1024 [ 48.558483][ T3939] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.105: mark_inode_dirty error [ 48.573281][ T3956] EXT4-fs: Ignoring removed orlov option [ 48.588423][ T3939] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.105: corrupted inode contents [ 48.600423][ T36] usb 8-1: SetAddress Request (2) to port 0 [ 48.606522][ T36] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 48.612226][ T3934] vhci_hcd: connection closed [ 48.614470][ T159] vhci_hcd: stop threads [ 48.618944][ T3956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.619415][ T159] vhci_hcd: release socket [ 48.624523][ T3958] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 48.636070][ T159] vhci_hcd: disconnect device [ 48.636178][ T36] usb 8-1: enqueue for inactive port 0 [ 48.636198][ T36] usb 8-1: enqueue for inactive port 0 [ 48.636220][ T36] usb 8-1: enqueue for inactive port 0 [ 48.682331][ T3958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 48.682297][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.777169][ T36] usb 8-1: new SuperSpeed USB device number 2 using vhci_hcd [ 48.797043][ T36] usb 8-1: enqueue for inactive port 0 [ 48.802677][ T36] usb 8-1: enqueue for inactive port 0 [ 48.808448][ T36] usb 8-1: enqueue for inactive port 0 [ 48.814188][ T3967] loop2: detected capacity change from 0 to 1024 [ 48.821379][ T3967] EXT4-fs: inline encryption not supported [ 48.843617][ T3969] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 48.856472][ T3967] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.890359][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.092566][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.278956][ T3994] loop4: detected capacity change from 0 to 512 [ 49.297814][ T3995] loop3: detected capacity change from 0 to 512 [ 49.346283][ T3994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.402210][ T3994] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.574939][ T4023] loop3: detected capacity change from 0 to 512 [ 49.607656][ T4023] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.671873][ T4023] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.686452][ T4023] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.118: corrupted inode contents [ 49.706799][ T4023] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.118: mark_inode_dirty error [ 49.720609][ T4023] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.118: corrupted inode contents [ 49.738580][ T4031] loop0: detected capacity change from 0 to 512 [ 49.789850][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.877097][ T36] usb usb8-port1: attempt power cycle [ 49.898527][ T4038] loop0: detected capacity change from 0 to 1024 [ 49.907154][ T10] usb 4-1: device descriptor read/8, error -110 [ 49.919522][ T4038] EXT4-fs: inline encryption not supported [ 49.967380][ T4040] loop3: detected capacity change from 0 to 512 [ 49.969774][ T4038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.025844][ T10] usb 4-1: new SuperSpeed USB device number 2 using vhci_hcd [ 50.070867][ T10] usb 4-1: enqueue for inactive port 0 [ 50.095798][ T4046] loop2: detected capacity change from 0 to 1024 [ 50.122791][ T10] usb 4-1: enqueue for inactive port 0 [ 50.153170][ T10] usb 4-1: enqueue for inactive port 0 [ 50.166820][ T4046] EXT4-fs: Ignoring removed orlov option [ 50.193789][ T4053] loop0: detected capacity change from 0 to 512 [ 50.286072][ T4053] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.309714][ T4053] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.128: corrupted inode contents [ 50.310378][ T4053] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.128: mark_inode_dirty error [ 50.310704][ T4053] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.128: corrupted inode contents [ 50.440763][ T4066] loop0: detected capacity change from 0 to 512 [ 50.472396][ T4066] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.483356][ T4066] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.130: corrupted inode contents [ 50.483623][ T4066] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.130: mark_inode_dirty error [ 50.507423][ T4066] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.130: corrupted inode contents [ 50.554709][ T4071] loop0: detected capacity change from 0 to 512 [ 50.593623][ T4073] loop0: detected capacity change from 0 to 1024 [ 50.600504][ T4073] EXT4-fs: Ignoring removed orlov option [ 51.029139][ T29] kauditd_printk_skb: 1901 callbacks suppressed [ 51.029181][ T29] audit: type=1326 audit(1762811807.725:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377712f6c9 code=0x7ffc0000 [ 51.059649][ T29] audit: type=1326 audit(1762811807.725:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377712f6c9 code=0x7ffc0000 [ 51.095478][ T29] audit: type=1326 audit(1762811807.775:3657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f377712f6c9 code=0x7ffc0000 [ 51.119132][ T29] audit: type=1326 audit(1762811807.775:3658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4081 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377712f6c9 code=0x7ffc0000 [ 51.183184][ T29] audit: type=1326 audit(1762811807.875:3659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377712f6c9 code=0x7ffc0000 [ 51.206613][ T29] audit: type=1326 audit(1762811807.875:3660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f377712f6c9 code=0x7ffc0000 [ 51.230001][ T29] audit: type=1326 audit(1762811807.875:3661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4085 comm="syz.4.138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f377712f6c9 code=0x7ffc0000 [ 51.286935][ T10] usb usb4-port1: attempt power cycle [ 51.413841][ T29] audit: type=1326 audit(1762811808.025:3662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb847f6c9 code=0x7ffc0000 [ 51.437390][ T29] audit: type=1326 audit(1762811808.025:3663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6eb847f6c9 code=0x7ffc0000 [ 51.461441][ T29] audit: type=1326 audit(1762811808.025:3664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4089 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f6eb847f6c9 code=0x7ffc0000 [ 51.485311][ T4102] loop1: detected capacity change from 0 to 512 [ 51.538514][ T4104] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 51.545170][ T4104] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 51.553454][ T4104] vhci_hcd vhci_hcd.0: Device attached [ 51.573939][ T4104] vhci_hcd vhci_hcd.0: port 0 already used [ 51.581156][ T4108] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 51.696988][ T36] usb usb8-port1: unable to enumerate USB device [ 51.816127][ T4105] vhci_hcd: connection closed [ 51.816383][ T1816] vhci_hcd: stop threads [ 51.825467][ T1816] vhci_hcd: release socket [ 51.829985][ T1816] vhci_hcd: disconnect device [ 51.836784][ T1037] usb 2-1: enqueue for inactive port 0 [ 51.904521][ T4079] syz.3.135 (4079) used greatest stack depth: 6880 bytes left [ 52.047913][ T1037] usb 2-1: enqueue for inactive port 0 [ 52.193548][ T4132] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 52.383407][ T4141] loop1: detected capacity change from 0 to 512 [ 52.410694][ T4141] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.441584][ T4141] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.159: corrupted inode contents [ 52.457283][ T4141] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.159: mark_inode_dirty error [ 52.471404][ T4141] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.159: corrupted inode contents [ 52.700096][ T4153] loop1: detected capacity change from 0 to 128 [ 52.712837][ T4153] vfat: Unknown parameter 'ÿ' [ 52.911631][ T4129] syz.3.152 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 52.925927][ T4129] CPU: 1 UID: 0 PID: 4129 Comm: syz.3.152 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.925957][ T4129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 52.925973][ T4129] Call Trace: [ 52.925984][ T4129] [ 52.925994][ T4129] __dump_stack+0x1d/0x30 [ 52.926026][ T4129] dump_stack_lvl+0xe8/0x140 [ 52.926072][ T4129] dump_stack+0x15/0x1b [ 52.926126][ T4129] dump_header+0x81/0x220 [ 52.926145][ T4129] oom_kill_process+0x342/0x400 [ 52.926181][ T4129] out_of_memory+0x979/0xb80 [ 52.926229][ T4129] try_charge_memcg+0x610/0xa10 [ 52.926331][ T4129] obj_cgroup_charge_pages+0xa6/0x150 [ 52.926416][ T4129] __memcg_kmem_charge_page+0x9f/0x170 [ 52.926447][ T4129] __alloc_frozen_pages_noprof+0x188/0x360 [ 52.926480][ T4129] alloc_pages_mpol+0xb3/0x260 [ 52.926550][ T4129] ? alloc_pages_noprof+0x61/0x130 [ 52.926580][ T4129] alloc_pages_noprof+0x90/0x130 [ 52.926663][ T4129] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 52.926730][ T4129] __kvmalloc_node_noprof+0x483/0x670 [ 52.926775][ T4129] ? ip_set_alloc+0x24/0x30 [ 52.926851][ T4129] ? ip_set_alloc+0x24/0x30 [ 52.926887][ T4129] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 52.926999][ T4129] ip_set_alloc+0x24/0x30 [ 52.927033][ T4129] hash_netiface_create+0x282/0x740 [ 52.927070][ T4129] ? __pfx_hash_netiface_create+0x10/0x10 [ 52.927118][ T4129] ip_set_create+0x3cc/0x970 [ 52.927199][ T4129] ? __nla_parse+0x40/0x60 [ 52.927232][ T4129] nfnetlink_rcv_msg+0x4c6/0x590 [ 52.927355][ T4129] netlink_rcv_skb+0x123/0x220 [ 52.927389][ T4129] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 52.927491][ T4129] nfnetlink_rcv+0x167/0x16c0 [ 52.927529][ T4129] ? kmem_cache_free+0xe4/0x3d0 [ 52.927600][ T4129] ? __kfree_skb+0x109/0x150 [ 52.927644][ T4129] ? nlmon_xmit+0x4f/0x60 [ 52.927707][ T4129] ? consume_skb+0x49/0x150 [ 52.927808][ T4129] ? nlmon_xmit+0x4f/0x60 [ 52.927900][ T4129] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 52.927947][ T4129] ? __dev_queue_xmit+0x1200/0x2000 [ 52.928005][ T4129] ? __dev_queue_xmit+0x182/0x2000 [ 52.928072][ T4129] ? merge_sched_in+0x605/0xa30 [ 52.928113][ T4129] ? ref_tracker_free+0x37d/0x3e0 [ 52.928227][ T4129] ? __netlink_deliver_tap+0x4dc/0x500 [ 52.928283][ T4129] netlink_unicast+0x5c0/0x690 [ 52.928370][ T4129] netlink_sendmsg+0x58b/0x6b0 [ 52.928392][ T4129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.928412][ T4129] __sock_sendmsg+0x145/0x180 [ 52.928443][ T4129] ____sys_sendmsg+0x31e/0x4e0 [ 52.928530][ T4129] ___sys_sendmsg+0x17b/0x1d0 [ 52.928565][ T4129] __x64_sys_sendmsg+0xd4/0x160 [ 52.928594][ T4129] x64_sys_call+0x191e/0x3000 [ 52.928627][ T4129] do_syscall_64+0xd2/0x200 [ 52.928691][ T4129] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 52.928726][ T4129] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 52.928774][ T4129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.928804][ T4129] RIP: 0033:0x7fbb6716f6c9 [ 52.928825][ T4129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.928883][ T4129] RSP: 002b:00007fbb65bae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.928909][ T4129] RAX: ffffffffffffffda RBX: 00007fbb673c6090 RCX: 00007fbb6716f6c9 [ 52.928922][ T4129] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000c [ 52.928988][ T4129] RBP: 00007fbb671f1f91 R08: 0000000000000000 R09: 0000000000000000 [ 52.929005][ T4129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.929022][ T4129] R13: 00007fbb673c6128 R14: 00007fbb673c6090 R15: 00007ffe7ab5ff18 [ 52.929049][ T4129] [ 53.282358][ T10] usb usb4-port1: unable to enumerate USB device [ 53.282533][ T4129] memory: usage 307200kB, limit 307200kB, failcnt 282 [ 53.296195][ T4129] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 53.304351][ T4129] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 53.311696][ T4129] Memory cgroup stats for /syz3: [ 53.335557][ T4129] cache 0 [ 53.343577][ T4129] rss 0 [ 53.346428][ T4129] shmem 0 [ 53.349622][ T4129] mapped_file 0 [ 53.353103][ T4129] dirty 0 [ 53.356056][ T4129] writeback 0 [ 53.359612][ T4129] workingset_refault_anon 97 [ 53.364214][ T4129] workingset_refault_file 1466 [ 53.369052][ T4129] swap 192512 [ 53.372356][ T4129] swapcached 8192 [ 53.376004][ T4129] pgpgin 15713 [ 53.379442][ T4129] pgpgout 15710 [ 53.383016][ T4129] pgfault 19874 [ 53.386583][ T4129] pgmajfault 54 [ 53.390147][ T4129] inactive_anon 8192 [ 53.394057][ T4129] active_anon 0 [ 53.397603][ T4129] inactive_file 4096 [ 53.401510][ T4129] active_file 0 [ 53.405085][ T4129] unevictable 0 [ 53.408623][ T4129] hierarchical_memory_limit 314572800 [ 53.414200][ T4129] hierarchical_memsw_limit 9223372036854771712 [ 53.420603][ T4129] total_cache 0 [ 53.424118][ T4129] total_rss 0 [ 53.427437][ T4129] total_shmem 0 [ 53.430920][ T4129] total_mapped_file 0 [ 53.434943][ T4129] total_dirty 0 [ 53.438444][ T4129] total_writeback 0 [ 53.442367][ T4129] total_workingset_refault_anon 97 [ 53.447565][ T4129] total_workingset_refault_file 1466 [ 53.452886][ T4129] total_swap 192512 [ 53.456968][ T4129] total_swapcached 8192 [ 53.461243][ T4129] total_pgpgin 15713 [ 53.465168][ T4129] total_pgpgout 15710 [ 53.469314][ T4129] total_pgfault 19874 [ 53.473400][ T4129] total_pgmajfault 54 [ 53.477526][ T4129] total_inactive_anon 8192 [ 53.481960][ T4129] total_active_anon 0 [ 53.486135][ T4129] total_inactive_file 4096 [ 53.490739][ T4129] total_active_file 0 [ 53.494789][ T4129] total_unevictable 0 [ 53.498824][ T4129] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.152,pid=4121,uid=0 [ 53.513431][ T4129] Memory cgroup out of memory: Killed process 4121 (syz.3.152) total-vm:96004kB, anon-rss:1132kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 53.531600][ T1037] usb usb2-port1: attempt power cycle [ 53.599561][ T4160] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.632836][ T4163] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 53.681982][ T4165] loop1: detected capacity change from 0 to 1024 [ 53.715419][ T4165] EXT4-fs: Ignoring removed orlov option [ 53.802755][ T4174] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 53.875209][ T4176] loop1: detected capacity change from 0 to 128 [ 53.882988][ T4176] vfat: Unknown parameter 'ÿ' [ 54.242008][ T4204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 54.260224][ T4204] team0 (unregistering): Port device team_slave_0 removed [ 54.272806][ T4204] team0 (unregistering): Port device team_slave_1 removed [ 54.299091][ T4211] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 54.384077][ T4217] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 54.454748][ T4221] loop0: detected capacity change from 0 to 512 [ 54.479828][ T4221] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.503909][ T4223] loop3: detected capacity change from 0 to 512 [ 54.509781][ T4221] netlink: 'syz.0.179': attribute type 4 has an invalid length. [ 54.532506][ T4223] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.558200][ T4232] netlink: 'syz.0.179': attribute type 4 has an invalid length. [ 54.617469][ T4236] loop3: detected capacity change from 0 to 512 [ 54.643760][ T4236] ext4 filesystem being mounted at /37/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.665248][ T4236] netlink: 'syz.3.181': attribute type 4 has an invalid length. [ 54.713779][ T4236] netlink: 'syz.3.181': attribute type 4 has an invalid length. [ 54.839846][ T4252] loop3: detected capacity change from 0 to 1024 [ 54.848513][ T4252] EXT4-fs: Ignoring removed orlov option [ 54.913690][ T4247] netlink: 28 bytes leftover after parsing attributes in process `syz.1.184'. [ 55.160024][ T4271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 55.161628][ T4273] loop4: detected capacity change from 0 to 128 [ 55.188709][ T4273] vfat: Unknown parameter 'ÿ' [ 55.357117][ T1037] usb usb2-port1: unable to enumerate USB device [ 55.441739][ T4285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.198'. [ 55.529811][ T4287] mmap: syz.0.199 (4287) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 55.630036][ T4287] netlink: 100 bytes leftover after parsing attributes in process `syz.0.199'. [ 55.645993][ T4287] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4287 comm=syz.0.199 [ 55.685320][ T4287] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=4287 comm=syz.0.199 [ 55.699301][ T4287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4287 comm=syz.0.199 [ 55.728098][ T4264] syz.3.189 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 55.742303][ T4264] CPU: 1 UID: 0 PID: 4264 Comm: syz.3.189 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.742340][ T4264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 55.742356][ T4264] Call Trace: [ 55.742365][ T4264] [ 55.742375][ T4264] __dump_stack+0x1d/0x30 [ 55.742405][ T4264] dump_stack_lvl+0xe8/0x140 [ 55.742459][ T4264] dump_stack+0x15/0x1b [ 55.742483][ T4264] dump_header+0x81/0x220 [ 55.742506][ T4264] oom_kill_process+0x342/0x400 [ 55.742544][ T4264] out_of_memory+0x979/0xb80 [ 55.742620][ T4264] try_charge_memcg+0x610/0xa10 [ 55.742657][ T4264] obj_cgroup_charge_pages+0xa6/0x150 [ 55.742721][ T4264] __memcg_kmem_charge_page+0x9f/0x170 [ 55.742751][ T4264] __alloc_frozen_pages_noprof+0x188/0x360 [ 55.742783][ T4264] alloc_pages_mpol+0xb3/0x260 [ 55.742811][ T4264] ? alloc_pages_noprof+0x61/0x130 [ 55.742917][ T4264] alloc_pages_noprof+0x90/0x130 [ 55.742945][ T4264] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 55.743090][ T4264] __kvmalloc_node_noprof+0x483/0x670 [ 55.743174][ T4264] ? ip_set_alloc+0x24/0x30 [ 55.743218][ T4264] ? ip_set_alloc+0x24/0x30 [ 55.743261][ T4264] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 55.743333][ T4264] ip_set_alloc+0x24/0x30 [ 55.743449][ T4264] hash_netiface_create+0x282/0x740 [ 55.743499][ T4264] ? __pfx_hash_netiface_create+0x10/0x10 [ 55.743548][ T4264] ip_set_create+0x3cc/0x970 [ 55.743583][ T4264] ? __nla_parse+0x40/0x60 [ 55.743680][ T4264] nfnetlink_rcv_msg+0x4c6/0x590 [ 55.743768][ T4264] netlink_rcv_skb+0x123/0x220 [ 55.743810][ T4264] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 55.743851][ T4264] nfnetlink_rcv+0x167/0x16c0 [ 55.743907][ T4264] ? kmem_cache_free+0xe4/0x3d0 [ 55.743954][ T4264] ? __kfree_skb+0x109/0x150 [ 55.744009][ T4264] ? nlmon_xmit+0x4f/0x60 [ 55.744086][ T4264] ? consume_skb+0x49/0x150 [ 55.744140][ T4264] ? nlmon_xmit+0x4f/0x60 [ 55.744228][ T4264] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 55.744277][ T4264] ? __dev_queue_xmit+0x1200/0x2000 [ 55.744295][ T4264] ? __dev_queue_xmit+0x182/0x2000 [ 55.744327][ T4264] ? merge_sched_in+0x605/0xa30 [ 55.744374][ T4264] ? ref_tracker_free+0x37d/0x3e0 [ 55.744431][ T4264] ? __netlink_deliver_tap+0x4dc/0x500 [ 55.744504][ T4264] netlink_unicast+0x5c0/0x690 [ 55.744541][ T4264] netlink_sendmsg+0x58b/0x6b0 [ 55.744570][ T4264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.744617][ T4264] __sock_sendmsg+0x145/0x180 [ 55.744651][ T4264] ____sys_sendmsg+0x31e/0x4e0 [ 55.744700][ T4264] ___sys_sendmsg+0x17b/0x1d0 [ 55.744813][ T4264] __x64_sys_sendmsg+0xd4/0x160 [ 55.744846][ T4264] x64_sys_call+0x191e/0x3000 [ 55.744926][ T4264] do_syscall_64+0xd2/0x200 [ 55.745002][ T4264] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 55.745048][ T4264] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 55.745085][ T4264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.745107][ T4264] RIP: 0033:0x7fbb6716f6c9 [ 55.745207][ T4264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.745229][ T4264] RSP: 002b:00007fbb65bae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.745249][ T4264] RAX: ffffffffffffffda RBX: 00007fbb673c6090 RCX: 00007fbb6716f6c9 [ 55.745272][ T4264] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 55.745289][ T4264] RBP: 00007fbb671f1f91 R08: 0000000000000000 R09: 0000000000000000 [ 55.745304][ T4264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.745393][ T4264] R13: 00007fbb673c6128 R14: 00007fbb673c6090 R15: 00007ffe7ab5ff18 [ 55.745421][ T4264] [ 55.745430][ T4264] memory: usage 307200kB, limit 307200kB, failcnt 409 [ 55.880258][ T4291] loop0: detected capacity change from 0 to 512 [ 55.882986][ T4264] memory+swap: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 55.883006][ T4264] kmem: usage 306984kB, limit 9007199254740988kB, failcnt 0 [ 55.937029][ T4291] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.942153][ T4264] Memory cgroup stats for /syz3: [ 55.942648][ T4264] cache 4096 [ 56.018459][ T4264] rss 16384 [ 56.053118][ T29] kauditd_printk_skb: 3041 callbacks suppressed [ 56.053137][ T29] audit: type=1326 audit(1762811812.745:6706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3777126567 code=0x7ffc0000 [ 56.057316][ T4264] shmem 0 [ 56.073447][ T29] audit: type=1326 audit(1762811812.755:6707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37770cb779 code=0x7ffc0000 [ 56.081230][ T4264] mapped_file 4096 [ 56.081251][ T4264] dirty 0 [ 56.089648][ T29] audit: type=1326 audit(1762811812.755:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3777126567 code=0x7ffc0000 [ 56.097689][ T4264] writeback 0 [ 56.097700][ T4264] workingset_refault_anon 140 [ 56.100903][ T29] audit: type=1326 audit(1762811812.755:6709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37770cb779 code=0x7ffc0000 [ 56.107772][ T4264] workingset_refault_file 1838 [ 56.113952][ T29] audit: type=1326 audit(1762811812.755:6710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f377712f6c9 code=0x7ffc0000 [ 56.121899][ T4264] swap 176128 [ 56.121915][ T4264] swapcached 20480 [ 56.121922][ T4264] pgpgin 19764 [ 56.121929][ T4264] pgpgout 19755 [ 56.121935][ T4264] pgfault 24180 [ 56.121942][ T4264] pgmajfault 84 [ 56.129276][ T29] audit: type=1326 audit(1762811812.775:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3777126567 code=0x7ffc0000 [ 56.139895][ T4264] inactive_anon 0 [ 56.139910][ T4264] active_anon 24576 [ 56.139920][ T4264] inactive_file 0 [ 56.139929][ T4264] active_file 12288 [ 56.140015][ T4264] unevictable 0 [ 56.140024][ T4264] hierarchical_memory_limit 314572800 [ 56.140035][ T4264] hierarchical_memsw_limit 9223372036854771712 [ 56.140046][ T4264] total_cache 4096 [ 56.140055][ T4264] total_rss 16384 [ 56.140063][ T4264] total_shmem 0 [ 56.140072][ T4264] total_mapped_file 4096 [ 56.140081][ T4264] total_dirty 0 [ 56.140100][ T4264] total_writeback 0 [ 56.140115][ T4264] total_workingset_refault_anon 140 [ 56.140124][ T4264] total_workingset_refault_file 1838 [ 56.140134][ T4264] total_swap 176128 [ 56.140144][ T4264] total_swapcached 20480 [ 56.140154][ T4264] total_pgpgin 19764 [ 56.140220][ T4264] total_pgpgout 19755 [ 56.140229][ T4264] total_pgfault 24180 [ 56.140236][ T4264] total_pgmajfault 84 [ 56.140244][ T4264] total_inactive_anon 0 [ 56.140254][ T4264] total_active_anon 24576 [ 56.140264][ T4264] total_inactive_file 0 [ 56.140273][ T4264] total_active_file 12288 [ 56.140283][ T4264] total_unevictable 0 [ 56.140293][ T4264] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.189,pid=4260,uid=0 [ 56.140423][ T4264] Memory cgroup out of memory: Killed process 4260 (syz.3.189) total-vm:96004kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 56.145455][ T29] audit: type=1326 audit(1762811812.775:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37770cb779 code=0x7ffc0000 [ 56.508133][ T29] audit: type=1326 audit(1762811812.775:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f377712f6c9 code=0x7ffc0000 [ 56.532330][ T29] audit: type=1326 audit(1762811812.845:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3777126567 code=0x7ffc0000 [ 56.555961][ T29] audit: type=1326 audit(1762811812.845:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.4.194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f37770cb779 code=0x7ffc0000 [ 56.588055][ T4304] netlink: 56 bytes leftover after parsing attributes in process `syz.2.205'. [ 56.597137][ T4304] netlink: 24 bytes leftover after parsing attributes in process `syz.2.205'. [ 56.608833][ T4304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4304 comm=syz.2.205 [ 56.634027][ T4303] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 56.750561][ T4322] loop0: detected capacity change from 0 to 512 [ 56.770356][ T4322] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.782564][ T4322] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.212: corrupted inode contents [ 56.819500][ T4322] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.212: mark_inode_dirty error [ 56.821902][ T4322] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.212: corrupted inode contents [ 56.877676][ T4330] loop0: detected capacity change from 0 to 512 [ 56.910696][ T4330] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.935693][ T4330] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.213: corrupted inode contents [ 56.947842][ T4330] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.213: mark_inode_dirty error [ 56.960463][ T4330] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.213: corrupted inode contents [ 57.049705][ T4336] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 57.458432][ T4340] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 57.547645][ T4342] loop1: detected capacity change from 0 to 512 [ 57.647804][ T4353] syzkaller0: entered promiscuous mode [ 57.653363][ T4353] syzkaller0: entered allmulticast mode [ 57.703849][ T4355] loop4: detected capacity change from 0 to 512 [ 57.820201][ T4368] netlink: 40 bytes leftover after parsing attributes in process `syz.1.225'. [ 57.897859][ T4378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 58.322968][ T4415] loop0: detected capacity change from 0 to 512 [ 58.433445][ T4426] loop1: detected capacity change from 0 to 1024 [ 58.457532][ T4426] EXT4-fs: Ignoring removed orlov option [ 58.482703][ T4433] loop3: detected capacity change from 0 to 1024 [ 58.491223][ T4433] EXT4-fs: Ignoring removed orlov option [ 58.508597][ T4435] loop0: detected capacity change from 0 to 1024 [ 58.517842][ T4435] EXT4-fs: inline encryption not supported [ 58.584036][ T4449] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.714088][ T4457] loop0: detected capacity change from 0 to 512 [ 58.765379][ T4457] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.784803][ T4457] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.244: corrupted inode contents [ 58.802135][ T4462] loop4: detected capacity change from 0 to 512 [ 58.833127][ T4457] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.244: mark_inode_dirty error [ 58.847510][ T4457] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.244: corrupted inode contents [ 58.847827][ T4465] FAULT_INJECTION: forcing a failure. [ 58.847827][ T4465] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 58.872455][ T4465] CPU: 1 UID: 0 PID: 4465 Comm: syz.0.244 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.872489][ T4465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.872505][ T4465] Call Trace: [ 58.872513][ T4465] [ 58.872599][ T4465] __dump_stack+0x1d/0x30 [ 58.872623][ T4465] dump_stack_lvl+0xe8/0x140 [ 58.872645][ T4465] dump_stack+0x15/0x1b [ 58.872664][ T4465] should_fail_ex+0x265/0x280 [ 58.872696][ T4465] should_fail+0xb/0x20 [ 58.872712][ T4465] should_fail_usercopy+0x1a/0x20 [ 58.872775][ T4465] strncpy_from_user+0x25/0x230 [ 58.872827][ T4465] ? kmem_cache_alloc_noprof+0x242/0x480 [ 58.872866][ T4465] ? getname_flags+0x80/0x3b0 [ 58.872900][ T4465] getname_flags+0xae/0x3b0 [ 58.872985][ T4465] do_sys_openat2+0x60/0x110 [ 58.873008][ T4465] __x64_sys_creat+0x65/0x90 [ 58.873032][ T4465] x64_sys_call+0x2da3/0x3000 [ 58.873056][ T4465] do_syscall_64+0xd2/0x200 [ 58.873078][ T4465] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.873128][ T4465] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.873165][ T4465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.873220][ T4465] RIP: 0033:0x7f1344c7f6c9 [ 58.873235][ T4465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.873254][ T4465] RSP: 002b:00007f13436c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 58.873274][ T4465] RAX: ffffffffffffffda RBX: 00007f1344ed6090 RCX: 00007f1344c7f6c9 [ 58.873287][ T4465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 58.873314][ T4465] RBP: 00007f13436c6090 R08: 0000000000000000 R09: 0000000000000000 [ 58.873326][ T4465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.873339][ T4465] R13: 00007f1344ed6128 R14: 00007f1344ed6090 R15: 00007ffd07f7b858 [ 58.873359][ T4465] [ 59.075413][ T4457] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.244: mark_inode_dirty error [ 59.149907][ T4471] loop4: detected capacity change from 0 to 512 [ 59.188952][ T4471] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.220468][ T4471] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.250: corrupted inode contents [ 59.233557][ T4471] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.250: mark_inode_dirty error [ 59.246171][ T4471] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.250: corrupted inode contents [ 59.279245][ T4471] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.250: mark_inode_dirty error [ 59.381205][ T4491] loop3: detected capacity change from 0 to 1024 [ 59.393727][ T4491] EXT4-fs: Ignoring removed orlov option [ 59.418443][ T4493] loop4: detected capacity change from 0 to 1024 [ 59.451541][ T4493] EXT4-fs: inline encryption not supported [ 59.521051][ T4505] loop3: detected capacity change from 0 to 512 [ 59.562215][ T4499] loop1: detected capacity change from 0 to 512 [ 59.583295][ T4507] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.617255][ T4513] syz.2.258 uses obsolete (PF_INET,SOCK_PACKET) [ 59.652058][ T4499] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.800648][ T4537] loop1: detected capacity change from 0 to 512 [ 59.851305][ T4522] loop3: detected capacity change from 0 to 8192 [ 59.926235][ T4537] ext4 filesystem being mounted at /58/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.968456][ T4545] netlink: 36 bytes leftover after parsing attributes in process `syz.2.258'. [ 59.977568][ T4545] netlink: 16 bytes leftover after parsing attributes in process `syz.2.258'. [ 59.986468][ T4545] netlink: 36 bytes leftover after parsing attributes in process `syz.2.258'. [ 60.042331][ T4537] netlink: 'syz.1.260': attribute type 4 has an invalid length. [ 60.050136][ T4545] netlink: 36 bytes leftover after parsing attributes in process `syz.2.258'. [ 60.098582][ T4549] netlink: 'syz.1.260': attribute type 4 has an invalid length. [ 60.173372][ T4555] netlink: 7 bytes leftover after parsing attributes in process `syz.1.261'. [ 60.182660][ T4555] netlink: 7 bytes leftover after parsing attributes in process `syz.1.261'. [ 60.353839][ T4556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.355420][ T4564] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 60.465638][ T4567] FAULT_INJECTION: forcing a failure. [ 60.465638][ T4567] name failslab, interval 1, probability 0, space 0, times 1 [ 60.478548][ T4567] CPU: 0 UID: 0 PID: 4567 Comm: syz.3.266 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.478598][ T4567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 60.478615][ T4567] Call Trace: [ 60.478622][ T4567] [ 60.478632][ T4567] __dump_stack+0x1d/0x30 [ 60.478662][ T4567] dump_stack_lvl+0xe8/0x140 [ 60.478767][ T4567] dump_stack+0x15/0x1b [ 60.478791][ T4567] should_fail_ex+0x265/0x280 [ 60.478816][ T4567] ? __pfx_proc_alloc_inode+0x10/0x10 [ 60.478842][ T4567] should_failslab+0x8c/0xb0 [ 60.478881][ T4567] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 60.478943][ T4567] ? proc_alloc_inode+0x34/0x90 [ 60.479005][ T4567] ? __pfx_proc_alloc_inode+0x10/0x10 [ 60.479031][ T4567] proc_alloc_inode+0x34/0x90 [ 60.479135][ T4567] alloc_inode+0x40/0x170 [ 60.479209][ T4567] new_inode+0x1d/0xe0 [ 60.479245][ T4567] proc_sys_make_inode+0x31/0x2a0 [ 60.479273][ T4567] proc_sys_fill_cache+0x1c0/0x250 [ 60.479304][ T4567] proc_sys_link_fill_cache+0xff/0x170 [ 60.479327][ T4567] proc_sys_readdir+0x472/0x620 [ 60.479363][ T4567] iterate_dir+0x114/0x330 [ 60.479456][ T4567] ? mutex_lock+0xd/0x30 [ 60.479498][ T4567] __se_sys_getdents+0x88/0x1b0 [ 60.479526][ T4567] ? __pfx_filldir+0x10/0x10 [ 60.479598][ T4567] __x64_sys_getdents+0x43/0x50 [ 60.479629][ T4567] x64_sys_call+0xee7/0x3000 [ 60.479660][ T4567] do_syscall_64+0xd2/0x200 [ 60.479687][ T4567] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.479836][ T4567] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 60.479870][ T4567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.479891][ T4567] RIP: 0033:0x7fbb6716f6c9 [ 60.479908][ T4567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.479971][ T4567] RSP: 002b:00007fbb65bcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 60.479994][ T4567] RAX: ffffffffffffffda RBX: 00007fbb673c5fa0 RCX: 00007fbb6716f6c9 [ 60.480010][ T4567] RDX: 00000000000000ff RSI: 0000200000000080 RDI: 0000000000000004 [ 60.480061][ T4567] RBP: 00007fbb65bcf090 R08: 0000000000000000 R09: 0000000000000000 [ 60.480084][ T4567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.480095][ T4567] R13: 00007fbb673c6038 R14: 00007fbb673c5fa0 R15: 00007ffe7ab5ff18 [ 60.480119][ T4567] [ 60.491241][ T4569] loop2: detected capacity change from 0 to 1024 [ 60.749121][ T4569] EXT4-fs: inline encryption not supported [ 60.761166][ T4573] loop1: detected capacity change from 0 to 512 [ 60.949597][ T4584] loop3: detected capacity change from 0 to 1024 [ 60.985356][ T4584] EXT4-fs: Ignoring removed orlov option [ 61.025515][ T4586] loop1: detected capacity change from 0 to 512 [ 61.086960][ T29] kauditd_printk_skb: 1287 callbacks suppressed [ 61.086979][ T29] audit: type=1326 audit(1762811817.775:8003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1344c7f6c9 code=0x7ffc0000 [ 61.119429][ T29] audit: type=1326 audit(1762811817.815:8004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1344c7f6c9 code=0x7ffc0000 [ 61.144933][ T29] audit: type=1326 audit(1762811817.815:8005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1344c7f6c9 code=0x7ffc0000 [ 61.168550][ T29] audit: type=1326 audit(1762811817.815:8006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1344c7f6c9 code=0x7ffc0000 [ 61.191943][ T29] audit: type=1326 audit(1762811817.815:8007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1344c7f6c9 code=0x7ffc0000 [ 61.215434][ T29] audit: type=1326 audit(1762811817.815:8008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1344c7f6c9 code=0x7ffc0000 [ 61.227367][ T4586] ext4 filesystem being mounted at /62/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.238848][ T29] audit: type=1326 audit(1762811817.815:8009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1344c7f6c9 code=0x7ffc0000 [ 61.272550][ T29] audit: type=1326 audit(1762811817.815:8010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1344c7f6c9 code=0x7ffc0000 [ 61.296313][ T29] audit: type=1326 audit(1762811817.815:8011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1344c7f6c9 code=0x7ffc0000 [ 61.319977][ T29] audit: type=1326 audit(1762811817.815:8012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4563 comm="syz.0.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1344c7f6c9 code=0x7ffc0000 [ 61.367160][ T4594] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 61.501656][ T4601] loop3: detected capacity change from 0 to 512 [ 61.525080][ T4601] ext4 filesystem being mounted at /58/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.591332][ T4601] netlink: 'syz.3.277': attribute type 4 has an invalid length. [ 61.606414][ T4607] loop0: detected capacity change from 0 to 128 [ 61.616953][ T4607] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 61.640148][ T4612] netlink: 'syz.3.277': attribute type 4 has an invalid length. [ 61.812068][ T4626] loop3: detected capacity change from 0 to 512 [ 61.847932][ T4626] ext4 filesystem being mounted at /59/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.931484][ T4626] netlink: 'syz.3.283': attribute type 4 has an invalid length. [ 61.976966][ T36] IPVS: starting estimator thread 0... [ 61.985778][ T4649] loop4: detected capacity change from 0 to 512 [ 61.987230][ T4653] netlink: 'syz.3.283': attribute type 4 has an invalid length. [ 62.010924][ T4649] EXT4-fs error (device loop4): ext4_quota_enable:7136: inode #3: comm syz.4.286: unexpected EA_INODE flag [ 62.046699][ T4649] EXT4-fs (loop4): Remounting filesystem read-only [ 62.061365][ T4649] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 62.095800][ T4649] EXT4-fs (loop4): mount failed [ 62.110095][ T4651] IPVS: using max 2352 ests per chain, 117600 per kthread [ 62.175990][ T4649] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 62.183051][ T4670] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 62.295962][ T4682] process 'syz.3.290' launched '/dev/fd/7' with NULL argv: empty string added [ 62.309421][ T4682] atomic_op ffff888104469128 conn xmit_atomic 0000000000000000 [ 62.339865][ T4688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 62.357647][ T4688] team0 (unregistering): Port device team_slave_0 removed [ 62.384232][ T4690] loop3: detected capacity change from 0 to 2048 [ 62.413624][ T4688] team0 (unregistering): Port device team_slave_1 removed [ 62.639825][ T4708] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 62.646404][ T4708] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 62.654688][ T4708] vhci_hcd vhci_hcd.0: Device attached [ 62.657437][ T4718] loop0: detected capacity change from 0 to 1024 [ 62.678024][ T4710] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 62.684682][ T4710] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 62.692930][ T4710] vhci_hcd vhci_hcd.0: Device attached [ 62.701283][ T4708] vhci_hcd vhci_hcd.0: port 0 already used [ 62.727637][ T4729] vhci_hcd vhci_hcd.0: port 0 already used [ 62.739198][ T4718] EXT4-fs error (device loop0): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.0.295: path /65/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 62.770022][ T4735] EXT4-fs error (device loop0): ext4_search_dir:1474: inode #12: block 7: comm syz.0.295: bad entry in directory: inode out of bounds - offset=0, inode=150994957, rec_len=16, size=56 fake=0 [ 62.872918][ T4716] vhci_hcd: connection closed [ 62.873189][ T31] vhci_hcd: stop threads [ 62.882350][ T31] vhci_hcd: release socket [ 62.886987][ T31] vhci_hcd: disconnect device [ 62.966470][ T4720] vhci_hcd: connection closed [ 62.966671][ T31] vhci_hcd: stop threads [ 62.966892][ T2968] usb 4-1: SetAddress Request (6) to port 0 [ 62.971500][ T31] vhci_hcd: release socket [ 62.986155][ T31] vhci_hcd: disconnect device [ 62.986953][ T2968] usb 4-1: new SuperSpeed USB device number 6 using vhci_hcd [ 63.016898][ T2968] usb 4-1: enqueue for inactive port 0 [ 63.022500][ T2968] usb 4-1: enqueue for inactive port 0 [ 63.028661][ T2968] usb 4-1: enqueue for inactive port 0 [ 63.068647][ T4743] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 63.136803][ T2968] usb 4-1: new SuperSpeed USB device number 6 using vhci_hcd [ 63.156786][ T2968] usb 4-1: enqueue for inactive port 0 [ 63.162386][ T2968] usb 4-1: enqueue for inactive port 0 [ 63.169394][ T2968] usb 4-1: enqueue for inactive port 0 [ 63.218181][ T4748] loop3: detected capacity change from 0 to 1024 [ 63.229816][ T4748] EXT4-fs: Ignoring removed orlov option [ 63.299509][ T4752] loop3: detected capacity change from 0 to 1024 [ 63.316061][ T4752] EXT4-fs: Ignoring removed orlov option [ 63.386136][ T4763] bridge0: entered promiscuous mode [ 63.404074][ T4763] bridge0: port 3(macsec1) entered blocking state [ 63.410782][ T4763] bridge0: port 3(macsec1) entered disabled state [ 63.427105][ T4763] macsec1: entered allmulticast mode [ 63.432613][ T4763] bridge0: entered allmulticast mode [ 63.458401][ T4763] macsec1: left allmulticast mode [ 63.463484][ T4763] bridge0: left allmulticast mode [ 63.469280][ T4763] bridge0: left promiscuous mode [ 63.537415][ T4774] loop2: detected capacity change from 0 to 512 [ 63.658526][ T4781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 63.679342][ T4790] loop3: detected capacity change from 0 to 512 [ 63.682493][ T4796] loop1: detected capacity change from 0 to 512 [ 63.746068][ T4796] ext4 filesystem being mounted at /67/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.770980][ T4796] netlink: 'syz.1.308': attribute type 4 has an invalid length. [ 63.828063][ T4812] netlink: 'syz.1.308': attribute type 4 has an invalid length. [ 63.856480][ T4813] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 63.863154][ T4813] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 63.871586][ T4813] vhci_hcd vhci_hcd.0: Device attached [ 63.891417][ T4817] loop3: detected capacity change from 0 to 512 [ 63.903732][ T4813] vhci_hcd vhci_hcd.0: port 0 already used [ 63.943075][ T4817] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.957687][ T4821] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 63.965963][ T4821] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 64.012341][ T4825] loop3: detected capacity change from 0 to 512 [ 64.113039][ T4814] vhci_hcd: connection closed [ 64.113525][ T1816] vhci_hcd: stop threads [ 64.117923][ T4836] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 64.118295][ T1816] vhci_hcd: release socket [ 64.134818][ T1816] vhci_hcd: disconnect device [ 64.135119][ T4834] loop1: detected capacity change from 0 to 512 [ 64.156812][ T1037] usb 10-1: enqueue for inactive port 0 [ 64.183809][ T4838] sch_tbf: burst 21990 is lower than device lo mtu (11337746) ! [ 64.187184][ T2968] usb usb4-port1: attempt power cycle [ 64.249019][ T4844] loop3: detected capacity change from 0 to 128 [ 64.260583][ T4844] vfat: Unknown parameter 'ÿ' [ 64.376817][ T1037] usb 10-1: enqueue for inactive port 0 [ 64.378494][ T4848] loop1: detected capacity change from 0 to 512 [ 64.389605][ T4848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.397804][ T4848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 64.406303][ T4848] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.418225][ T4848] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.327: Allocating blocks 41-42 which overlap fs metadata [ 64.432077][ T4848] EXT4-fs (loop1): Remounting filesystem read-only [ 64.438832][ T4848] EXT4-fs (loop1): 1 truncate cleaned up [ 64.602710][ T4857] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 65.784392][ T4862] loop1: detected capacity change from 0 to 512 [ 66.196783][ T29] kauditd_printk_skb: 1606 callbacks suppressed [ 66.196861][ T29] audit: type=1326 audit(1762811822.855:9615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6716f6c9 code=0x7ffc0000 [ 66.226754][ T29] audit: type=1326 audit(1762811822.855:9616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6716f6c9 code=0x7ffc0000 [ 66.250207][ T29] audit: type=1326 audit(1762811822.855:9617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb6716f6c9 code=0x7ffc0000 [ 66.273676][ T29] audit: type=1326 audit(1762811822.855:9618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6716f6c9 code=0x7ffc0000 [ 66.297118][ T29] audit: type=1326 audit(1762811822.855:9619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6716f6c9 code=0x7ffc0000 [ 66.320682][ T29] audit: type=1326 audit(1762811822.855:9620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb6716f6c9 code=0x7ffc0000 [ 66.344057][ T29] audit: type=1326 audit(1762811822.855:9621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6716f6c9 code=0x7ffc0000 [ 66.367404][ T29] audit: type=1326 audit(1762811822.855:9622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6716f6c9 code=0x7ffc0000 [ 66.390935][ T29] audit: type=1326 audit(1762811822.855:9623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fbb6716f6c9 code=0x7ffc0000 [ 66.414396][ T29] audit: type=1326 audit(1762811822.855:9624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4867 comm="syz.3.333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb6716f6c9 code=0x7ffc0000 [ 66.465028][ T4870] loop3: detected capacity change from 0 to 512 [ 66.488408][ T4874] syzkaller1: entered promiscuous mode [ 66.493985][ T4874] syzkaller1: entered allmulticast mode [ 66.501117][ T1037] usb usb10-port1: attempt power cycle [ 66.564476][ T4879] loop3: detected capacity change from 0 to 1024 [ 66.572719][ T4879] EXT4-fs: Ignoring removed orlov option [ 66.619729][ T4885] netlink: 54775 bytes leftover after parsing attributes in process `syz.1.339'. [ 66.642617][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.339'. [ 66.757336][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.341'. [ 66.780281][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 66.813782][ T4905] loop2: detected capacity change from 0 to 1024 [ 66.821085][ T4905] EXT4-fs: Ignoring removed orlov option [ 66.839267][ T4898] team0 (unregistering): Port device team_slave_0 removed [ 66.854619][ T4898] team0 (unregistering): Port device team_slave_1 removed [ 66.882081][ T4910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.347'. [ 66.920191][ T4891] ip6gretap0: entered promiscuous mode [ 66.926414][ T4913] loop2: detected capacity change from 0 to 512 [ 66.927310][ T4891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.340'. [ 66.966425][ T4915] loop2: detected capacity change from 0 to 512 [ 66.992317][ T4915] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.069746][ T4928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.354'. [ 67.192608][ T4937] SELinux: Context system_u:object is not valid (left unmapped). [ 67.201841][ T4937] FAULT_INJECTION: forcing a failure. [ 67.201841][ T4937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.215306][ T4937] CPU: 0 UID: 0 PID: 4937 Comm: syz.2.356 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.215333][ T4937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 67.215345][ T4937] Call Trace: [ 67.215350][ T4937] [ 67.215360][ T4937] __dump_stack+0x1d/0x30 [ 67.215388][ T4937] dump_stack_lvl+0xe8/0x140 [ 67.215409][ T4937] dump_stack+0x15/0x1b [ 67.215465][ T4937] should_fail_ex+0x265/0x280 [ 67.215490][ T4937] should_fail+0xb/0x20 [ 67.215511][ T4937] should_fail_usercopy+0x1a/0x20 [ 67.215613][ T4937] _copy_from_iter+0xd2/0xe80 [ 67.215648][ T4937] ? alloc_pages_mpol+0x217/0x260 [ 67.215683][ T4937] copy_page_from_iter+0x178/0x2a0 [ 67.215718][ T4937] tun_get_user+0x679/0x26e0 [ 67.215813][ T4937] ? ref_tracker_alloc+0x1f2/0x2f0 [ 67.215896][ T4937] tun_chr_write_iter+0x15e/0x210 [ 67.215927][ T4937] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 67.216012][ T4937] vfs_write+0x52a/0x960 [ 67.216054][ T4937] ksys_write+0xda/0x1a0 [ 67.216091][ T4937] __x64_sys_write+0x40/0x50 [ 67.216197][ T4937] x64_sys_call+0x2802/0x3000 [ 67.216274][ T4937] do_syscall_64+0xd2/0x200 [ 67.216296][ T4937] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 67.216338][ T4937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.216436][ T4937] RIP: 0033:0x7f6eb847e17f [ 67.216456][ T4937] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 67.216480][ T4937] RSP: 002b:00007f6eb6edf000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 67.216515][ T4937] RAX: ffffffffffffffda RBX: 00007f6eb86d5fa0 RCX: 00007f6eb847e17f [ 67.216528][ T4937] RDX: 000000000000003a RSI: 0000200000000000 RDI: 00000000000000c8 [ 67.216540][ T4937] RBP: 00007f6eb6edf090 R08: 0000000000000000 R09: 0000000000000000 [ 67.216552][ T4937] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 67.216568][ T4937] R13: 00007f6eb86d6038 R14: 00007f6eb86d5fa0 R15: 00007ffd9282c528 [ 67.216593][ T4937] [ 67.453556][ T4941] netlink: 256 bytes leftover after parsing attributes in process `syz.4.357'. [ 67.495643][ T4949] loop4: detected capacity change from 0 to 512 [ 67.521629][ T4950] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 67.549154][ T4954] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 67.571479][ T4952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.361'. [ 67.587619][ T4946] loop3: detected capacity change from 0 to 128 [ 67.597727][ T4946] vfat: Unknown parameter 'ÿ' [ 67.617235][ T2968] usb usb4-port1: unable to enumerate USB device [ 67.968156][ T4982] loop0: detected capacity change from 0 to 512 [ 68.044229][ T4994] netlink: 'syz.0.372': attribute type 16 has an invalid length. [ 68.052312][ T4994] netlink: 156 bytes leftover after parsing attributes in process `syz.0.372'. [ 68.387200][ T1037] usb usb10-port1: unable to enumerate USB device [ 68.421487][ T5025] xt_hashlimit: size too large, truncated to 1048576 [ 69.006651][ T5032] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.042204][ T5034] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 69.328099][ T5044] atomic_op ffff88811a70c528 conn xmit_atomic 0000000000000000 [ 69.373397][ T5052] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 69.553403][ T5073] capability: warning: `syz.1.392' uses deprecated v2 capabilities in a way that may be insecure [ 69.580958][ T5071] loop0: detected capacity change from 0 to 128 [ 69.591052][ T5071] vfat: Unknown parameter 'ÿ' [ 69.639755][ T5084] loop3: detected capacity change from 0 to 256 [ 69.649479][ T5084] ================================================================== [ 69.657631][ T5084] BUG: KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event [ 69.666715][ T5084] [ 69.669096][ T5084] write to 0xffff8881044ccc24 of 4 bytes by task 3571 on cpu 1: [ 69.676752][ T5084] fsnotify_detach_mark+0xba/0x160 [ 69.681915][ T5084] fsnotify_destroy_mark+0x70/0x150 [ 69.687166][ T5084] __se_sys_inotify_rm_watch+0xe8/0x170 [ 69.692779][ T5084] __x64_sys_inotify_rm_watch+0x31/0x40 [ 69.698379][ T5084] x64_sys_call+0x2e95/0x3000 [ 69.703094][ T5084] do_syscall_64+0xd2/0x200 [ 69.707618][ T5084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.713534][ T5084] [ 69.715865][ T5084] read to 0xffff8881044ccc24 of 4 bytes by task 5084 on cpu 0: [ 69.723501][ T5084] inotify_handle_inode_event+0x34e/0x3d0 [ 69.729248][ T5084] fsnotify_handle_inode_event+0x1c0/0x220 [ 69.735069][ T5084] fsnotify+0x13cf/0x14b0 [ 69.739414][ T5084] __fsnotify_parent+0x2ed/0x330 [ 69.744540][ T5084] __fput+0x1de/0x650 [ 69.748536][ T5084] fput_close_sync+0x6e/0x120 [ 69.753234][ T5084] __x64_sys_close+0x56/0xf0 [ 69.757929][ T5084] x64_sys_call+0x273c/0x3000 [ 69.762622][ T5084] do_syscall_64+0xd2/0x200 [ 69.767146][ T5084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.773140][ T5084] [ 69.775472][ T5084] value changed: 0x00000003 -> 0x00000000 [ 69.781207][ T5084] [ 69.783536][ T5084] Reported by Kernel Concurrency Sanitizer on: [ 69.789691][ T5084] CPU: 0 UID: 0 PID: 5084 Comm: syz.3.394 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.799335][ T5084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.809406][ T5084] ================================================================== [ 69.848847][ T5084] FAT-fs (loop3): Directory bread(block 64) failed [ 69.855500][ T5084] FAT-fs (loop3): Directory bread(block 65) failed [ 69.862156][ T5084] FAT-fs (loop3): Directory bread(block 66) failed [ 69.868768][ T5084] FAT-fs (loop3): Directory bread(block 67) failed [ 69.875352][ T5084] FAT-fs (loop3): Directory bread(block 68) failed [ 69.881969][ T5084] FAT-fs (loop3): Directory bread(block 69) failed [ 69.888773][ T5084] FAT-fs (loop3): Directory bread(block 70) failed [ 69.895382][ T5084] FAT-fs (loop3): Directory bread(block 71) failed [ 69.901998][ T5084] FAT-fs (loop3): Directory bread(block 72) failed [ 69.908644][ T5084] FAT-fs (loop3): Directory bread(block 73) failed [ 69.929067][ T5084] syz.3.394: attempt to access beyond end of device [ 69.929067][ T5084] loop3: rw=0, sector=1800, nr_sectors = 4 limit=256 [ 69.942655][ T5084] syz.3.394: attempt to access beyond end of device [ 69.942655][ T5084] loop3: rw=0, sector=1804, nr_sectors = 4 limit=256