last executing test programs: 3.896022615s ago: executing program 3 (id=515): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.772429656s ago: executing program 3 (id=517): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r5 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r6, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="d1c833ae0c4667af8bb0531bda5855cb77c3d84949df2a1f900fe477cf687872e7ac3bb402f5c84e699f3866ff02aaf0780f5db3dc8b471acb4876ecedd56523895733959e2aab0c2152d007245c7c02745fa3fcd79aeff125f3149619e9e59e28", @ANYRES8=r5, @ANYBLOB="059a8bcf134c87aaef3bd9f4538a32cef4143eb86a3a4383b0a63441b066c67859d501646f87759e81cc0e21fd2c2da749cdc36f88d7663a70ce53d09c", @ANYRES8=0x0, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffa}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @generic={0x80, 0x1, 0x1, 0x40, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x9f, &(0x7f0000000140)=""/159, 0x41100, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xf, 0xc, 0x7}, 0x10, r7, r0, 0x9, &(0x7f0000000300)=[r8], &(0x7f0000000340)=[{0x1, 0x5, 0xa, 0x5}, {0x4, 0x4, 0x2, 0x9}, {0x4, 0x5, 0x3, 0x5}, {0x3, 0x5, 0xd, 0x5}, {0x2, 0x3, 0x7, 0x9}, {0x1, 0x2, 0xd, 0x9}, {0x1, 0x4, 0x8, 0x6}, {0x0, 0x3, 0x10, 0x1}, {0x1, 0x1, 0x5, 0x9}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r9 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r9) r10 = eventfd(0x0) read$eventfd(r10, &(0x7f0000000240), 0x8) writev(r10, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r12}, 0x18) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 2.830296361s ago: executing program 3 (id=524): socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_read_part_table(0x5e5, &(0x7f00000006c0)="$eJzs2zFok2kYB/AnNTmLPc4bHA4n6+DkojiaQSWJikKIdhEHBUXEwEEEIUKgoINmUMwgjrccQhatU9MMHY6WFjqX0uGOQodOR7sUujRHm/fgelyhvWsPhN8PwvN9z/t8+ecZMn7BV20gfu/1epmI6B3d/9Mj7ULx2qnypcrtiEzcjYjhX74b2zrJpIk/v/V0uv813f/807Hu67WrufbirfUz96aaA+l8NH2GPnZG/vNyHLpP+enNFy9rpTf1/OOFUmP51fzczc+rhUrnRrM1dj135UGam0k1m+rTqMfzeBL3oxrVeBi1vUdmotfbvhjq5x//a/6H9tK5zZOl9vijixvF7tvJ8+mh8sGtvMPf858Nv7vTalw+++XE+wv1idnKypH+XPVf/LsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj/fcoPpqv844VSY/nV/NzNz6uFSudGszV2PXflQTqdSTWb6tOox/N4EvejGtV4GLV++/tdg77ZLX/6+IuXtdKbej//Q3vp3ObJUnv80cWNYvft5Pk0Vz6AXfeS/2z43Z1W4/LZLyfeX6hPzFZWjvTnqkcP6QcAAAAAAAAAAAAAAAAAAABARBSK106VL1VuR2TibkT8+O3k+Fb/h+zOudP9kon0Hnw2jnVfr13NtRdvrZ+5N9X8LfVHByNGI2LoY2dkuzHwD6GDh7kR+/FHAAAA//+6dJJb") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 2.182685446s ago: executing program 0 (id=534): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x39, 0x0, 0x0) 2.153691696s ago: executing program 0 (id=535): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r5 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r6, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="d1c833ae0c4667af8bb0531bda5855cb77c3d84949df2a1f900fe477cf687872e7ac3bb402f5c84e699f3866ff02aaf0780f5db3dc8b471acb4876ecedd56523895733959e2aab0c2152d007245c7c02745fa3fcd79aeff125f3149619e9e59e28", @ANYRES8=r5, @ANYBLOB="059a8bcf134c87aaef3bd9f4538a32cef4143eb86a3a4383b0a63441b066c67859d501646f87759e81cc0e21fd2c2da749cdc36f88d7663a70ce53d09c", @ANYRES8=0x0, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffa}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @generic={0x80, 0x1, 0x1, 0x40, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x9f, &(0x7f0000000140)=""/159, 0x41100, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xf, 0xc, 0x7}, 0x10, r7, r0, 0x9, &(0x7f0000000300)=[r8], &(0x7f0000000340)=[{0x1, 0x5, 0xa, 0x5}, {0x4, 0x4, 0x2, 0x9}, {0x4, 0x5, 0x3, 0x5}, {0x3, 0x5, 0xd, 0x5}, {0x2, 0x3, 0x7, 0x9}, {0x1, 0x2, 0xd, 0x9}, {0x1, 0x4, 0x8, 0x6}, {0x0, 0x3, 0x10, 0x1}, {0x1, 0x1, 0x5, 0x9}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r9 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r9) r10 = eventfd(0x0) read$eventfd(r10, &(0x7f0000000240), 0x8) writev(r10, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r12}, 0x18) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 2.002265237s ago: executing program 3 (id=536): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 1.938825967s ago: executing program 2 (id=538): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x36}, 0x18) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") (fail_nth: 2) 1.870855818s ago: executing program 2 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 1.715220639s ago: executing program 2 (id=540): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c0000800800034000000002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.694726759s ago: executing program 2 (id=541): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8a", 0x1f, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 1.298180911s ago: executing program 1 (id=546): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0xfffffffc, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xfffffffffffffe2d, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r2, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r3, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) 1.296866951s ago: executing program 0 (id=547): socket$inet6_sctp(0xa, 0x5, 0x84) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_read_part_table(0x5e5, &(0x7f00000006c0)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 1.294692271s ago: executing program 4 (id=548): r0 = inotify_init() r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = creat(&(0x7f0000000340)='./file0\x00', 0xd931d3864d39dcca) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x600000bd) write$binfmt_elf32(r3, 0x0, 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.271577592s ago: executing program 4 (id=549): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) syz_usbip_server_init(0x6) 1.155860932s ago: executing program 3 (id=550): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) syz_usbip_server_init(0x6) 1.068358303s ago: executing program 1 (id=551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 1.054937913s ago: executing program 1 (id=552): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c0000800800034000000002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.033681683s ago: executing program 1 (id=553): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x10007ffffffff}, 0x18) syz_usbip_server_init(0x6) 802.802785ms ago: executing program 2 (id=554): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0x1, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") 715.257475ms ago: executing program 4 (id=555): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000000)={0x1, 0x7f, 0x9}) 698.772475ms ago: executing program 4 (id=556): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB], 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffe, 0x6, 0x2, @scatter={0x0, 0x40000, 0x0}, &(0x7f0000000080)="0000501effd4", 0x0, 0x800004, 0x10030, 0x1, 0x0}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setgroups(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0x5}}, 0x20) 665.117715ms ago: executing program 4 (id=557): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001cc0)={r0, 0xe0, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000001540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001a40)=[0x0, 0x0], 0x0, 0xe2, &(0x7f0000001a80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000001b00), &(0x7f0000001b40), 0x8, 0x71, 0x8, 0x8, &(0x7f0000001b80)}}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) (async) mq_open(0x0, 0x42, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300002c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000040) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000f80)={r4}, &(0x7f0000000080)=0x8) (async) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$usbmon(&(0x7f00000014c0), 0x2, 0x4000) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000001d00)={{0x1, 0x1, 0x18, r7, {0xa43, 0x5}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r8, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x18, 0x1412, 0x100, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x55}, 0xc0) sendto$inet(r7, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) sendmsg$AUDIT_ADD_RULE(r5, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000001600)={0x43c, 0x3f3, 0x720, 0x70bd29, 0x25dfdbfe, {0x2, 0x1, 0x39, [0x1400000, 0x80000000, 0x80000000, 0x1, 0x3d7, 0x6, 0xffff, 0xfb, 0x8b0, 0x8, 0x7, 0x1, 0x5, 0x8, 0x7968, 0x6, 0x8000, 0x937, 0x7, 0x40, 0x556c12c0, 0x2, 0x80000000, 0x5, 0x1, 0x2, 0x10, 0x3, 0x2, 0x90d, 0x5, 0x7f, 0x6, 0x1, 0x6, 0x83, 0x42df, 0x3, 0x5, 0x0, 0x10000, 0x624, 0x0, 0x5, 0x3, 0x10001, 0x80000000, 0x0, 0x6, 0x8, 0x44, 0xbddc, 0x4, 0x8e8, 0xfffffff8, 0xb7, 0x7d4, 0x8, 0x4, 0xcb7, 0x1, 0x0, 0x4, 0xe5], [0x0, 0x0, 0x792, 0x5, 0xfffffffa, 0x2, 0xef4, 0x81, 0x4, 0x7ff, 0x6, 0x2, 0x9, 0x0, 0x4, 0x1, 0x3, 0xffffff81, 0x74b, 0x3, 0x7, 0xfffffff9, 0x18, 0x2, 0x5, 0x5, 0x4c46, 0x5, 0x4, 0x81, 0xfffffff8, 0x0, 0x2, 0x1, 0xf0, 0x57, 0x2, 0x1000, 0xd, 0x8, 0x0, 0x0, 0x7802, 0x1, 0x7ff, 0x2, 0x1, 0x77, 0x3, 0x5, 0x9, 0xffffffe3, 0x1, 0x7, 0x4, 0x400, 0xfffffffc, 0x1, 0x0, 0x9, 0xfffffffd, 0x5e4, 0x3e, 0x8], [0x9, 0x8, 0x7, 0xfffffffe, 0x9, 0x9, 0x8, 0x76, 0xfffffff9, 0x7, 0x4, 0xfffffff9, 0x7e, 0x8, 0x5, 0x0, 0x7fff, 0x101, 0x3, 0x6, 0x2, 0x5, 0x0, 0x80000000, 0x80000001, 0x8, 0x7ff, 0x6, 0xc7, 0x9, 0x6, 0x2, 0x2, 0x8, 0x1000, 0x6, 0x4ee, 0x5, 0x401, 0x7fff, 0xfffffff7, 0x1, 0x1, 0x3, 0x0, 0xc00000, 0xd775, 0xcb, 0x9, 0x6b3a, 0x9, 0x0, 0x7fff, 0x1, 0xffffff81, 0x9, 0x3, 0x7, 0x1, 0x8, 0x80, 0x3, 0x9, 0x6], [0x800, 0x3, 0x4, 0x4, 0x772, 0x0, 0x1000, 0x88d, 0x2, 0x3, 0x0, 0x9, 0xcfb, 0x0, 0xb8, 0x3, 0x0, 0xfffffff2, 0x8, 0x8, 0x7, 0x1, 0xfffffffd, 0x2, 0x3, 0x9, 0x3, 0x5, 0x6, 0x6, 0xb3c7, 0x8, 0xd128089, 0x3, 0x1000, 0xffffffff, 0x4, 0x6, 0x2, 0xad, 0x2, 0xffffffff, 0xe2ce, 0x2, 0x8, 0xfffffffa, 0x1, 0x5, 0x8, 0x0, 0x5, 0x5, 0x2, 0x9, 0x1400, 0x800, 0x800, 0x0, 0x8000, 0x0, 0x6, 0x8, 0x5, 0x1], 0x1b, ['\x00', '\x00', '-[$\xa0!,\x00', '\x00', 'GPL\x00', '\x00', ':-\'.\'&]-.-\x00', '\x00']}, ["", "", ""]}, 0x43c}}, 0x40) (async) ioctl$sock_inet_SIOCSARP(r6, 0x8953, &(0x7f0000000180)={{0x2, 0x4e22, @empty}, {0x0, @random="3ecd108f7a7f"}, 0x20, {0x2, 0x0, @multicast1=0xe000cc02}}) 619.090546ms ago: executing program 3 (id=558): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) r5 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r6, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000800)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x54, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f00000005c0)=ANY=[@ANYBLOB="d1c833ae0c4667af8bb0531bda5855cb77c3d84949df2a1f900fe477cf687872e7ac3bb402f5c84e699f3866ff02aaf0780f5db3dc8b471acb4876ecedd56523895733959e2aab0c2152d007245c7c02745fa3fcd79aeff125f3149619e9e59e28", @ANYRES8=r5, @ANYBLOB="059a8bcf134c87aaef3bd9f4538a32cef4143eb86a3a4383b0a63441b066c67859d501646f87759e81cc0e21fd2c2da749cdc36f88d7663a70ce53d09c", @ANYRES8=0x0, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x9}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffa}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @generic={0x80, 0x1, 0x1, 0x40, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x9f, &(0x7f0000000140)=""/159, 0x41100, 0x4, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0xf, 0xc, 0x7}, 0x10, r7, r0, 0x9, &(0x7f0000000300)=[r8], &(0x7f0000000340)=[{0x1, 0x5, 0xa, 0x5}, {0x4, 0x4, 0x2, 0x9}, {0x4, 0x5, 0x3, 0x5}, {0x3, 0x5, 0xd, 0x5}, {0x2, 0x3, 0x7, 0x9}, {0x1, 0x2, 0xd, 0x9}, {0x1, 0x4, 0x8, 0x6}, {0x0, 0x3, 0x10, 0x1}, {0x1, 0x1, 0x5, 0x9}], 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r9 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc2) write$binfmt_elf32(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r9) r10 = eventfd(0x0) read$eventfd(r10, &(0x7f0000000240), 0x8) writev(r10, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) r11 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r12}, 0x18) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 570.740316ms ago: executing program 4 (id=559): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 499.490907ms ago: executing program 1 (id=560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000040)={0x1, 0xfff, 0x5}) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000000c0)={0x4203, 0x1000}, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r3], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="ba2c4945", @ANYRES16=r2, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000600)='sched_switch\x00', r5, 0x0, 0x80000000000}, 0x18) socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xa8400, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7dc470d00281f324, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="a4d93b69bb96034211f0e503c9d1aaa976a290f1da969c5f4f6679744c46f37826168e9a58a6da9889604e38b0d83c5f7a8ea3a4bf04a5e963178d16e8aa4929a545baf7df101a325a8784e70ba801faa55778385f00d8779416532bab5870d03367a3e994264c1ab2cbdc8aa8ad3fb4647b978192f4914821b7211e96edc1809d306dad35ee2eb4a8a2d70477961a5bd963ceb0abd2edadf3d87a39c79ac6f30cfba3a65f805bb298c2d712371307b3e8a9a4f0840fe805f9ce781107", @ANYRESOCT=r4], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7fff}, 0x18) r12 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff6e) r13 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x814) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r12, 0x0, 0x7}, 0x18) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r6], 0x50) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r0, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r14, @ANYRES32=r16, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32=r12, @ANYRES32=r12, @ANYRES32=r12, @ANYBLOB, @ANYRES8=r9], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="1c00000005000000", @ANYRES32=r8, @ANYBLOB="bc78e377eb632cf31fb0f46f2fbc669a36db7572a3a8d8e83a8e0c852beb16e6c3c74be3f9280bc04a04ebe9b0bbf1fb9472f0e38e5fb254834c481e84387b174a489317b379d60c56fc9c845e32eeb602a2e4650fa86b5b6e553d0060d41b", @ANYRES32=r8, @ANYBLOB, @ANYRES64=r17], 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000200), &(0x7f0000000240)=r8}, 0x20) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r18, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8e) 479.020937ms ago: executing program 1 (id=561): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000020000000000000000180900", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) ioctl$EVIOCRMFF(r0, 0x40095505, 0x0) 413.676037ms ago: executing program 0 (id=562): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 368.734118ms ago: executing program 0 (id=563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 351.154507ms ago: executing program 0 (id=564): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) 0s ago: executing program 2 (id=565): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8a", 0x1f, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) kernel console output (not intermixed with test programs): ave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.338111][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.372658][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.387607][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.454329][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.550660][ T3314] veth0_vlan: entered promiscuous mode [ 29.565636][ T3312] veth0_vlan: entered promiscuous mode [ 29.582871][ T3323] veth0_vlan: entered promiscuous mode [ 29.599564][ T3316] veth0_vlan: entered promiscuous mode [ 29.605726][ T3314] veth1_vlan: entered promiscuous mode [ 29.614692][ T3313] veth0_vlan: entered promiscuous mode [ 29.620815][ T3323] veth1_vlan: entered promiscuous mode [ 29.627253][ T3312] veth1_vlan: entered promiscuous mode [ 29.637383][ T3313] veth1_vlan: entered promiscuous mode [ 29.644473][ T3316] veth1_vlan: entered promiscuous mode [ 29.659706][ T3314] veth0_macvtap: entered promiscuous mode [ 29.674354][ T3323] veth0_macvtap: entered promiscuous mode [ 29.684789][ T3314] veth1_macvtap: entered promiscuous mode [ 29.695944][ T3312] veth0_macvtap: entered promiscuous mode [ 29.702888][ T3323] veth1_macvtap: entered promiscuous mode [ 29.711801][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.723742][ T3312] veth1_macvtap: entered promiscuous mode [ 29.733039][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.742552][ T3313] veth0_macvtap: entered promiscuous mode [ 29.749523][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.763580][ T3313] veth1_macvtap: entered promiscuous mode [ 29.770868][ T3316] veth0_macvtap: entered promiscuous mode [ 29.778319][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.790719][ T3316] veth1_macvtap: entered promiscuous mode [ 29.801135][ T270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.809856][ T270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.826171][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.835369][ T270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.846443][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.862509][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 29.862522][ T29] audit: type=1400 audit(1761857902.002:81): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.XIZSM7/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.862917][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.872671][ T29] audit: type=1400 audit(1761857902.002:82): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.894451][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.899873][ T29] audit: type=1400 audit(1761857902.002:83): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.XIZSM7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.954140][ T29] audit: type=1400 audit(1761857902.002:84): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.976039][ T29] audit: type=1400 audit(1761857902.002:85): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.XIZSM7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.002611][ T29] audit: type=1400 audit(1761857902.002:86): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.XIZSM7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.029922][ T29] audit: type=1400 audit(1761857902.002:87): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.051528][ T29] audit: type=1400 audit(1761857902.182:88): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.059009][ T270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.074281][ T29] audit: type=1400 audit(1761857902.182:89): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=4744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.107250][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.108625][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.132026][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.143914][ T270] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.152635][ T270] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.161715][ T270] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.174741][ T29] audit: type=1400 audit(1761857902.312:90): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.206732][ T270] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.227267][ T270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.245130][ T270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.261590][ T270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.270373][ T270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.299920][ T270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.331615][ T270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.352252][ T270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.364733][ T3492] loop0: detected capacity change from 0 to 512 [ 30.379952][ T270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.381080][ T3492] EXT4-fs: Ignoring removed nobh option [ 30.409448][ T3492] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.434923][ T270] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.450839][ T298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.459861][ T3496] loop4: detected capacity change from 0 to 512 [ 30.471687][ T3497] loop3: detected capacity change from 0 to 512 [ 30.472220][ T3492] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.1: corrupted inode contents [ 30.478037][ T298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.498370][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.507211][ T3482] loop1: detected capacity change from 0 to 8192 [ 30.514339][ T3482] ======================================================= [ 30.514339][ T3482] WARNING: The mand mount option has been deprecated and [ 30.514339][ T3482] and is ignored by this kernel. Remove the mand [ 30.514339][ T3482] option from the mount to silence this warning. [ 30.514339][ T3482] ======================================================= [ 30.514637][ T3492] EXT4-fs (loop0): Remounting filesystem read-only [ 30.576736][ T3492] EXT4-fs (loop0): 1 truncate cleaned up [ 30.588057][ T3496] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 30.588230][ T3492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.605885][ T3497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.616461][ T3496] EXT4-fs (loop4): orphan cleanup on readonly fs [ 30.621607][ T3497] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.640843][ T3492] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.679839][ T3492] syz.0.1 (3492) used greatest stack depth: 9784 bytes left [ 30.694341][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.705645][ T3491] loop2: detected capacity change from 0 to 8192 [ 30.712200][ T3496] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.5: corrupted inode contents [ 30.757727][ T3496] EXT4-fs (loop4): Remounting filesystem read-only [ 30.791402][ T3496] EXT4-fs (loop4): 1 truncate cleaned up [ 30.797301][ T270] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 30.797534][ T3497] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 30.807988][ T270] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 30.827779][ T270] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 30.840745][ T3496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 30.857107][ T3497] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 30.951668][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.038728][ T3508] IPv6: NLM_F_CREATE should be specified when creating new route [ 31.083483][ T3514] loop4: detected capacity change from 0 to 512 [ 31.101654][ T3510] mmap: syz.0.6 (3510) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.124971][ T3514] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 31.141387][ T3514] EXT4-fs (loop4): orphan cleanup on readonly fs [ 31.172420][ T3514] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #16: comm syz.4.8: corrupted inode contents [ 31.215947][ T3514] EXT4-fs (loop4): Remounting filesystem read-only [ 31.249793][ T3514] EXT4-fs (loop4): 1 truncate cleaned up [ 31.259851][ T298] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 31.270404][ T298] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 31.292990][ T298] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 31.304167][ T3514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.364225][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.637202][ T3518] loop0: detected capacity change from 0 to 8192 [ 31.670448][ T3520] loop4: detected capacity change from 0 to 8192 [ 31.795718][ T3524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 31.917603][ T3528] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 31.936772][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 31.945610][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14'. [ 31.999193][ T3533] loop2: detected capacity change from 0 to 512 [ 32.007176][ T3533] EXT4-fs: Ignoring removed nobh option [ 32.037881][ T3533] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #3: comm syz.2.15: corrupted inode contents [ 32.056187][ T3533] EXT4-fs (loop2): Remounting filesystem read-only [ 32.063754][ T3533] EXT4-fs (loop2): 1 truncate cleaned up [ 32.069853][ T3533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.082837][ T3533] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.104924][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.199150][ T3541] netlink: 19 bytes leftover after parsing attributes in process `syz.2.18'. [ 32.305684][ T3534] loop1: detected capacity change from 0 to 8192 [ 32.424699][ T3548] netlink: 19 bytes leftover after parsing attributes in process `syz.2.21'. [ 32.816745][ T3556] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 32.823293][ T3556] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 32.831492][ T3556] vhci_hcd vhci_hcd.0: Device attached [ 32.842406][ T3557] vhci_hcd: connection closed [ 32.849773][ T298] vhci_hcd: stop threads [ 32.858861][ T298] vhci_hcd: release socket [ 32.863330][ T298] vhci_hcd: disconnect device [ 32.971504][ T3562] lo speed is unknown, defaulting to 1000 [ 32.977248][ T3562] lo speed is unknown, defaulting to 1000 [ 32.983409][ T3562] lo speed is unknown, defaulting to 1000 [ 32.989950][ T3562] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.997825][ T3562] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 33.008880][ T3562] lo speed is unknown, defaulting to 1000 [ 33.015302][ T3562] lo speed is unknown, defaulting to 1000 [ 33.021644][ T3562] lo speed is unknown, defaulting to 1000 [ 33.027648][ T3562] lo speed is unknown, defaulting to 1000 [ 33.033920][ T3563] Zero length message leads to an empty skb [ 33.034142][ T3562] lo speed is unknown, defaulting to 1000 [ 33.095808][ T3565] netlink: 7 bytes leftover after parsing attributes in process `syz.4.27'. [ 33.105292][ T3565] netlink: 7 bytes leftover after parsing attributes in process `syz.4.27'. [ 33.116049][ T3560] loop0: detected capacity change from 0 to 8192 [ 33.116084][ T3565] syz.4.27 uses obsolete (PF_INET,SOCK_PACKET) [ 33.117046][ T3565] SELinux: policydb magic number 0xff does not match expected magic number 0xf97cff8c [ 33.138613][ T3565] SELinux: failed to load policy [ 33.307081][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.318976][ T3569] IPv6: NLM_F_CREATE should be specified when creating new route [ 33.366931][ T3573] Illegal XDP return value 1109799596 on prog (id 16) dev N/A, expect packet loss! [ 33.450987][ T3575] IPv6: NLM_F_CREATE should be specified when creating new route [ 33.965492][ T3587] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 33.972023][ T3587] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 33.980133][ T3587] vhci_hcd vhci_hcd.0: Device attached [ 33.990954][ T3588] vhci_hcd: connection closed [ 33.991135][ T31] vhci_hcd: stop threads [ 34.000062][ T31] vhci_hcd: release socket [ 34.004517][ T31] vhci_hcd: disconnect device [ 34.016996][ T3585] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 34.063908][ T3591] loop2: detected capacity change from 0 to 2048 [ 34.313179][ T3591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.321831][ T3591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.349428][ T3595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.358379][ T3597] loop3: detected capacity change from 0 to 512 [ 34.358800][ T3595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.387952][ T3597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.400938][ T3597] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.419089][ T3597] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.428492][ T3597] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 34.510109][ T3604] loop0: detected capacity change from 0 to 512 [ 34.532140][ T3604] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.41: bg 0: block 248: padding at end of block bitmap is not set [ 34.546749][ T3604] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.41: Failed to acquire dquot type 1 [ 34.558305][ T3604] EXT4-fs (loop0): 1 truncate cleaned up [ 34.564424][ T3604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.576913][ T3604] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.744347][ T3606] loop1: detected capacity change from 0 to 8192 [ 34.965902][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 34.965917][ T29] audit: type=1400 audit(1761857907.102:261): avc: denied { write } for pid=3610 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.992446][ T29] audit: type=1400 audit(1761857907.102:262): avc: denied { nlmsg_write } for pid=3610 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 35.014746][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.033521][ T3611] lo speed is unknown, defaulting to 1000 [ 35.065420][ T3614] loop2: detected capacity change from 0 to 128 [ 35.079377][ T3614] serio: Serial port ptm0 [ 35.175168][ T3621] netlink: 19 bytes leftover after parsing attributes in process `syz.3.46'. [ 35.296428][ T3604] syz.0.41 (3604) used greatest stack depth: 9120 bytes left [ 35.309745][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.467420][ T3634] loop0: detected capacity change from 0 to 2048 [ 35.624988][ T29] audit: type=1400 audit(1761857907.762:263): avc: denied { mount } for pid=3638 comm="syz.3.53" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 35.647825][ T29] audit: type=1400 audit(1761857907.762:264): avc: denied { mounton } for pid=3638 comm="syz.3.53" path="/7/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 35.671237][ T29] audit: type=1400 audit(1761857907.782:265): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 35.711185][ T3634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.719721][ T3634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.769953][ T29] audit: type=1400 audit(1761857907.892:266): avc: denied { read write } for pid=3642 comm="syz.2.56" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.793272][ T29] audit: type=1400 audit(1761857907.892:267): avc: denied { open } for pid=3642 comm="syz.2.56" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.816447][ T29] audit: type=1326 audit(1761857907.892:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d45cbefc9 code=0x7ffc0000 [ 35.839725][ T29] audit: type=1326 audit(1761857907.892:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d45cbefc9 code=0x7ffc0000 [ 35.862954][ T29] audit: type=1326 audit(1761857907.892:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.2.56" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d45cbefc9 code=0x7ffc0000 [ 35.937987][ T3646] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 35.959092][ T3649] loop2: detected capacity change from 0 to 512 [ 36.032214][ T3653] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 36.039573][ T3653] vhci_hcd: invalid port number 96 [ 36.045081][ T3653] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 36.052630][ T3649] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.57: bg 0: block 248: padding at end of block bitmap is not set [ 36.068917][ T3653] loop3: detected capacity change from 0 to 128 [ 36.079703][ T3649] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.57: Failed to acquire dquot type 1 [ 36.092462][ T3659] siw: device registration error -23 [ 36.100132][ T3649] EXT4-fs (loop2): 1 truncate cleaned up [ 36.106301][ T3649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.119591][ T3649] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.366143][ T3661] loop1: detected capacity change from 0 to 8192 [ 36.397734][ T3663] loop4: detected capacity change from 0 to 8192 [ 36.405429][ T3667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.420039][ T3667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.738361][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.855678][ T3674] lo speed is unknown, defaulting to 1000 [ 36.892004][ T3674] loop2: detected capacity change from 0 to 128 [ 36.903170][ T3674] serio: Serial port ptm0 [ 37.559455][ T3691] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 37.566051][ T3691] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 37.574275][ T3691] vhci_hcd vhci_hcd.0: Device attached [ 37.580766][ T3692] vhci_hcd: connection closed [ 37.580888][ T31] vhci_hcd: stop threads [ 37.590115][ T31] vhci_hcd: release socket [ 37.594813][ T31] vhci_hcd: disconnect device [ 37.664108][ T3695] loop1: detected capacity change from 0 to 2048 [ 37.672755][ T3697] process 'syz.2.75' launched './file0' with NULL argv: empty string added [ 37.681920][ T3689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.690501][ T3689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.915457][ T3695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.925006][ T3695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.941870][ T3699] loop2: detected capacity change from 0 to 8192 [ 37.963657][ T3702] loop3: detected capacity change from 0 to 512 [ 37.982386][ T3702] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.995039][ T3702] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.010431][ T3702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.019865][ T3702] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 38.162376][ T3712] netlink: 19 bytes leftover after parsing attributes in process `syz.4.80'. [ 38.419744][ T3714] loop4: detected capacity change from 0 to 8192 [ 38.526599][ T3716] loop0: detected capacity change from 0 to 8192 [ 38.574775][ T3716] bridge0: port 3(gretap0) entered blocking state [ 38.581355][ T3716] bridge0: port 3(gretap0) entered disabled state [ 38.591212][ T3716] gretap0: entered allmulticast mode [ 38.598655][ T3716] gretap0: entered promiscuous mode [ 38.604256][ T3716] bridge0: port 3(gretap0) entered blocking state [ 38.610779][ T3716] bridge0: port 3(gretap0) entered forwarding state [ 38.623264][ T3716] xt_policy: output policy not valid in PREROUTING and INPUT [ 38.637237][ T3716] gretap0: left allmulticast mode [ 38.643009][ T3716] gretap0: left promiscuous mode [ 38.648836][ T3716] bridge0: port 3(gretap0) entered disabled state [ 38.747036][ T3719] loop1: detected capacity change from 0 to 8192 [ 39.152780][ T3723] loop2: detected capacity change from 0 to 128 [ 39.159958][ T3723] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.172558][ T3723] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.243871][ T298] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.361892][ T3725] lo speed is unknown, defaulting to 1000 [ 39.396754][ T3725] loop4: detected capacity change from 0 to 128 [ 39.415711][ T3725] serio: Serial port ptm0 [ 39.448254][ T3734] siw: device registration error -23 [ 39.498514][ T3736] loop2: detected capacity change from 0 to 1024 [ 39.507078][ T3736] EXT4-fs: Ignoring removed orlov option [ 39.520477][ T3736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.588303][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.589254][ T3729] loop0: detected capacity change from 0 to 8192 [ 39.905579][ T3742] loop2: detected capacity change from 0 to 8192 [ 40.157124][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 40.157136][ T29] audit: type=1326 audit(1761857912.292:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 40.188245][ T29] audit: type=1326 audit(1761857912.292:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 40.211386][ T29] audit: type=1326 audit(1761857912.292:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 40.234580][ T29] audit: type=1326 audit(1761857912.292:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 40.257866][ T29] audit: type=1326 audit(1761857912.292:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 40.281019][ T29] audit: type=1326 audit(1761857912.292:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 40.305768][ T29] audit: type=1326 audit(1761857912.292:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 40.328909][ T29] audit: type=1326 audit(1761857912.292:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 40.352138][ T29] audit: type=1326 audit(1761857912.292:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 40.375253][ T29] audit: type=1326 audit(1761857912.292:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3752 comm="syz.4.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 40.437261][ T3755] loop4: detected capacity change from 0 to 2048 [ 40.461905][ T3751] loop1: detected capacity change from 0 to 8192 [ 40.737379][ T3755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.745918][ T3755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.871184][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.975160][ T3763] siw: device registration error -23 [ 41.230267][ T3777] lo speed is unknown, defaulting to 1000 [ 41.270930][ T3777] loop3: detected capacity change from 0 to 128 [ 41.291357][ T3777] serio: Serial port ptm0 [ 41.320967][ T3769] loop0: detected capacity change from 0 to 8192 [ 41.370073][ T3775] loop2: detected capacity change from 0 to 8192 [ 41.653685][ T3782] loop4: detected capacity change from 0 to 8192 [ 41.753733][ T3786] loop1: detected capacity change from 0 to 8192 [ 41.781549][ T3786] bridge0: port 3(gretap0) entered blocking state [ 41.788018][ T3786] bridge0: port 3(gretap0) entered disabled state [ 41.795527][ T3786] gretap0: entered allmulticast mode [ 41.801923][ T3786] gretap0: entered promiscuous mode [ 41.807714][ T3786] bridge0: port 3(gretap0) entered blocking state [ 41.814243][ T3786] bridge0: port 3(gretap0) entered forwarding state [ 41.825541][ T3786] xt_policy: output policy not valid in PREROUTING and INPUT [ 41.841934][ T3786] gretap0: left allmulticast mode [ 41.847213][ T3786] gretap0: left promiscuous mode [ 41.853095][ T3786] bridge0: port 3(gretap0) entered disabled state [ 42.120265][ T3791] siw: device registration error -23 [ 42.480308][ T3799] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 42.486874][ T3799] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 42.494989][ T3799] vhci_hcd vhci_hcd.0: Device attached [ 42.497801][ T3797] loop3: detected capacity change from 0 to 8192 [ 42.511239][ T3800] vhci_hcd: connection closed [ 42.511384][ T1086] vhci_hcd: stop threads [ 42.520303][ T1086] vhci_hcd: release socket [ 42.525902][ T1086] vhci_hcd: disconnect device [ 42.953020][ T3817] lo speed is unknown, defaulting to 1000 [ 42.961384][ T3819] netlink: 19 bytes leftover after parsing attributes in process `syz.0.123'. [ 42.988486][ T3817] loop4: detected capacity change from 0 to 128 [ 43.005885][ T3817] serio: Serial port ptm0 [ 43.054587][ T3822] siw: device registration error -23 [ 43.246829][ T3839] loop0: detected capacity change from 0 to 2048 [ 43.433186][ T3838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.442581][ T3838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.517395][ T3839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.526073][ T3839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.627572][ T3841] loop2: detected capacity change from 0 to 8192 [ 43.671105][ T3843] siw: device registration error -23 [ 43.725102][ T3846] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 43.731641][ T3846] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 43.739779][ T3846] vhci_hcd vhci_hcd.0: Device attached [ 43.747665][ T3847] vhci_hcd: connection closed [ 43.747877][ T12] vhci_hcd: stop threads [ 43.756961][ T12] vhci_hcd: release socket [ 43.761402][ T12] vhci_hcd: disconnect device [ 44.020366][ T3855] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 44.026899][ T3855] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 44.035141][ T3855] vhci_hcd vhci_hcd.0: Device attached [ 44.055387][ T3858] vhci_hcd: connection closed [ 44.056006][ T41] vhci_hcd: stop threads [ 44.065041][ T41] vhci_hcd: release socket [ 44.069441][ T41] vhci_hcd: disconnect device [ 44.146589][ T3867] loop0: detected capacity change from 0 to 1024 [ 44.154527][ T3867] EXT4-fs: Ignoring removed orlov option [ 44.172868][ T3867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.217459][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.462595][ T3876] lo speed is unknown, defaulting to 1000 [ 44.502712][ T3876] loop3: detected capacity change from 0 to 128 [ 44.529293][ T3876] serio: Serial port ptm0 [ 44.707961][ T3882] IPv6: NLM_F_CREATE should be specified when creating new route [ 44.746103][ T3887] loop0: detected capacity change from 0 to 128 [ 44.788190][ T3887] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 44.807810][ T3887] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.861477][ T41] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 44.946868][ T3895] loop4: detected capacity change from 0 to 2048 [ 44.964220][ T3893] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 44.975733][ T3893] vhci_hcd: invalid port number 96 [ 44.980901][ T3893] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 44.990460][ T3893] loop0: detected capacity change from 0 to 128 [ 44.998315][ T3899] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 45.004926][ T3899] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 45.013168][ T3901] loop2: detected capacity change from 0 to 1024 [ 45.013107][ T3899] vhci_hcd vhci_hcd.0: Device attached [ 45.025423][ T3902] vhci_hcd: connection closed [ 45.025549][ T3901] EXT4-fs: Ignoring removed orlov option [ 45.038639][ T41] vhci_hcd: stop threads [ 45.042927][ T41] vhci_hcd: release socket [ 45.047362][ T41] vhci_hcd: disconnect device [ 45.055695][ T3901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.090405][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.232201][ T3911] loop0: detected capacity change from 0 to 512 [ 45.252155][ T3911] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.264825][ T3911] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.272251][ T3895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.280309][ T3911] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.293050][ T3895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.301952][ T3911] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 45.371334][ T3906] loop2: detected capacity change from 0 to 8192 [ 45.384427][ T3906] bridge0: port 3(gretap0) entered blocking state [ 45.390948][ T3906] bridge0: port 3(gretap0) entered disabled state [ 45.397440][ T3906] gretap0: entered allmulticast mode [ 45.403377][ T3906] gretap0: entered promiscuous mode [ 45.408693][ T3906] bridge0: port 3(gretap0) entered blocking state [ 45.415137][ T3906] bridge0: port 3(gretap0) entered forwarding state [ 45.424282][ T3906] gretap0: left allmulticast mode [ 45.429315][ T3906] gretap0: left promiscuous mode [ 45.434400][ T3906] bridge0: port 3(gretap0) entered disabled state [ 45.861780][ T3922] loop4: detected capacity change from 0 to 128 [ 45.874548][ T3922] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.887026][ T3922] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 45.891307][ T3924] siw: device registration error -23 [ 45.910184][ T1086] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 46.066870][ T3933] netlink: 19 bytes leftover after parsing attributes in process `syz.3.167'. [ 46.171900][ T3939] netlink: 19 bytes leftover after parsing attributes in process `syz.1.170'. [ 46.183597][ T3930] loop4: detected capacity change from 0 to 8192 [ 46.246857][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 46.246870][ T29] audit: type=1326 audit(1761857918.382:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 46.299376][ T3946] loop1: detected capacity change from 0 to 2048 [ 46.311101][ T29] audit: type=1326 audit(1761857918.412:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 46.334544][ T29] audit: type=1326 audit(1761857918.412:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 46.337707][ T3937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.357927][ T29] audit: type=1326 audit(1761857918.412:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 46.357952][ T29] audit: type=1326 audit(1761857918.412:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 46.357972][ T29] audit: type=1326 audit(1761857918.412:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 46.416609][ T3937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.435894][ T29] audit: type=1326 audit(1761857918.412:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 46.445320][ T3935] loop3: detected capacity change from 0 to 8192 [ 46.466791][ T29] audit: type=1326 audit(1761857918.412:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 46.496384][ T29] audit: type=1326 audit(1761857918.412:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 46.519644][ T29] audit: type=1326 audit(1761857918.412:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3942 comm="syz.1.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 46.751575][ T3946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.760042][ T3946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.529591][ T3960] loop4: detected capacity change from 0 to 512 [ 47.545114][ T3962] loop3: detected capacity change from 0 to 128 [ 47.556259][ T3960] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.177: bg 0: block 248: padding at end of block bitmap is not set [ 47.562891][ T3962] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.595453][ T3960] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.177: Failed to acquire dquot type 1 [ 47.614377][ T3962] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.623895][ T3960] EXT4-fs (loop4): 1 truncate cleaned up [ 47.637386][ T3960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.659143][ T3960] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.693438][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 47.745184][ T3970] netlink: 19 bytes leftover after parsing attributes in process `syz.3.181'. [ 47.785188][ T3974] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 47.791839][ T3974] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 47.800028][ T3974] vhci_hcd vhci_hcd.0: Device attached [ 47.811896][ T3975] vhci_hcd: connection closed [ 47.812099][ T31] vhci_hcd: stop threads [ 47.821144][ T31] vhci_hcd: release socket [ 47.825573][ T31] vhci_hcd: disconnect device [ 48.032148][ T3978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.041829][ T3978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.139175][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.215699][ T3989] siw: device registration error -23 [ 48.334508][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.379853][ T3981] loop1: detected capacity change from 0 to 8192 [ 48.886774][ T4001] loop3: detected capacity change from 0 to 8192 [ 49.010751][ T4003] loop0: detected capacity change from 0 to 8192 [ 49.683727][ T4021] loop4: detected capacity change from 0 to 512 [ 49.701968][ T4021] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.200: bg 0: block 248: padding at end of block bitmap is not set [ 49.732340][ T4021] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.200: Failed to acquire dquot type 1 [ 49.744553][ T4021] EXT4-fs (loop4): 1 truncate cleaned up [ 49.750739][ T4021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.764254][ T4021] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.954071][ T4024] loop1: detected capacity change from 0 to 8192 [ 49.982798][ T4024] bridge0: port 3(gretap0) entered blocking state [ 49.989332][ T4024] bridge0: port 3(gretap0) entered disabled state [ 50.023039][ T4024] gretap0: entered allmulticast mode [ 50.032294][ T4024] gretap0: entered promiscuous mode [ 50.039575][ T4032] xt_policy: output policy not valid in PREROUTING and INPUT [ 50.040623][ T4024] bridge0: port 3(gretap0) entered blocking state [ 50.053478][ T4024] bridge0: port 3(gretap0) entered forwarding state [ 50.104545][ T4032] gretap0: left allmulticast mode [ 50.109814][ T4032] gretap0: left promiscuous mode [ 50.115646][ T4032] bridge0: port 3(gretap0) entered disabled state [ 50.200848][ T4036] netlink: 19 bytes leftover after parsing attributes in process `syz.3.205'. [ 50.260190][ T4042] siw: device registration error -23 [ 50.456600][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.515145][ T4047] loop2: detected capacity change from 0 to 8192 [ 50.568860][ T4053] loop0: detected capacity change from 0 to 8192 [ 50.587290][ T4053] bridge0: port 3(gretap0) entered blocking state [ 50.593838][ T4053] bridge0: port 3(gretap0) entered disabled state [ 50.600878][ T4053] gretap0: entered allmulticast mode [ 50.606660][ T4053] gretap0: entered promiscuous mode [ 50.612577][ T4053] bridge0: port 3(gretap0) entered blocking state [ 50.619032][ T4053] bridge0: port 3(gretap0) entered forwarding state [ 50.629410][ T4053] xt_policy: output policy not valid in PREROUTING and INPUT [ 50.663757][ T4053] gretap0: left allmulticast mode [ 50.669088][ T4053] gretap0: left promiscuous mode [ 50.675907][ T4053] bridge0: port 3(gretap0) entered disabled state [ 51.009432][ T4066] loop1: detected capacity change from 0 to 8192 [ 51.141125][ T4069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'. [ 51.150992][ T4069] netlink: 19 bytes leftover after parsing attributes in process `syz.3.219'. [ 51.386460][ T4076] siw: device registration error -23 [ 51.470007][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 51.470019][ T29] audit: type=1326 audit(1761857923.602:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 51.502259][ T29] audit: type=1326 audit(1761857923.642:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 51.525628][ T29] audit: type=1326 audit(1761857923.642:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 51.548927][ T29] audit: type=1326 audit(1761857923.642:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 51.572238][ T29] audit: type=1326 audit(1761857923.642:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 51.595473][ T29] audit: type=1326 audit(1761857923.642:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 51.618744][ T29] audit: type=1326 audit(1761857923.642:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 51.641963][ T29] audit: type=1326 audit(1761857923.642:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 51.665243][ T29] audit: type=1326 audit(1761857923.642:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 51.688469][ T29] audit: type=1326 audit(1761857923.642:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4083 comm="syz.4.226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9511a50f1a code=0x7ffc0000 [ 51.711943][ T4084] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 51.718603][ T4084] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 51.726773][ T4084] vhci_hcd vhci_hcd.0: Device attached [ 51.733066][ T4082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.751302][ T4082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.760460][ T4085] vhci_hcd: connection closed [ 51.763689][ T298] vhci_hcd: stop threads [ 51.772671][ T298] vhci_hcd: release socket [ 51.777514][ T298] vhci_hcd: disconnect device [ 52.085083][ T4094] loop3: detected capacity change from 0 to 2048 [ 52.317948][ T4098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.231'. [ 52.335043][ T4094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.350880][ T4094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.364138][ T4098] netlink: 19 bytes leftover after parsing attributes in process `syz.4.231'. [ 52.435578][ T4100] loop0: detected capacity change from 0 to 1024 [ 52.450395][ T4100] EXT4-fs: Ignoring removed orlov option [ 52.478602][ T4100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.563167][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.641758][ T4114] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 52.649276][ T4114] vhci_hcd: invalid port number 96 [ 52.654411][ T4114] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 52.676517][ T4114] loop0: detected capacity change from 0 to 128 [ 52.716308][ T4115] lo speed is unknown, defaulting to 1000 [ 52.777210][ T4115] loop4: detected capacity change from 0 to 128 [ 52.794536][ T4115] serio: Serial port ptm0 [ 53.066188][ T4106] loop1: detected capacity change from 0 to 8192 [ 53.076822][ T4124] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 53.083351][ T4124] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 53.091602][ T4124] vhci_hcd vhci_hcd.0: Device attached [ 53.105888][ T4125] vhci_hcd: connection closed [ 53.106033][ T298] vhci_hcd: stop threads [ 53.114979][ T298] vhci_hcd: release socket [ 53.119385][ T298] vhci_hcd: disconnect device [ 53.151519][ T4118] loop0: detected capacity change from 0 to 8192 [ 53.263794][ T4122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.273187][ T4122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.642116][ T4132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.244'. [ 53.651942][ T4132] netlink: 19 bytes leftover after parsing attributes in process `syz.3.244'. [ 53.652037][ T4130] loop4: detected capacity change from 0 to 8192 [ 53.825750][ T4139] siw: device registration error -23 [ 53.920345][ T4145] netlink: 'syz.1.249': attribute type 10 has an invalid length. [ 53.931435][ T4143] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.940212][ T4143] vhci_hcd: invalid port number 96 [ 53.945409][ T4143] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 53.971387][ T4143] loop2: detected capacity change from 0 to 128 [ 54.015700][ T4137] loop3: detected capacity change from 0 to 8192 [ 54.049960][ T4137] bridge0: port 3(gretap0) entered blocking state [ 54.054765][ T4149] loop2: detected capacity change from 0 to 2048 [ 54.056464][ T4137] bridge0: port 3(gretap0) entered disabled state [ 54.069754][ T4137] gretap0: entered allmulticast mode [ 54.078812][ T4137] gretap0: entered promiscuous mode [ 54.084482][ T4137] bridge0: port 3(gretap0) entered blocking state [ 54.090953][ T4137] bridge0: port 3(gretap0) entered forwarding state [ 54.105539][ T4150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.251'. [ 54.145857][ T4137] gretap0: left allmulticast mode [ 54.150966][ T4137] gretap0: left promiscuous mode [ 54.156057][ T4137] bridge0: port 3(gretap0) entered disabled state [ 54.321283][ T4149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.330763][ T4149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.641505][ T4159] loop5: detected capacity change from 0 to 7 [ 54.648185][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.657350][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 54.665788][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.674945][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 54.682769][ T3303] loop5: unable to read partition table [ 54.689294][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.698488][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 54.706783][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.715927][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 54.723786][ T4159] loop5: unable to read partition table [ 54.729491][ T4159] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 54.729916][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.746785][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 54.755771][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.764948][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 54.773124][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.782260][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 54.790419][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.799575][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 54.810550][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.819689][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 54.934720][ T4172] loop5: detected capacity change from 0 to 7 [ 54.946040][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 54.955241][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 54.964470][ T4172] loop5: unable to read partition table [ 54.970129][ T4172] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 55.020113][ T4178] vlan2: entered allmulticast mode [ 55.073742][ T4178] loop2: detected capacity change from 0 to 512 [ 55.099505][ T4178] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.259: couldn't read orphan inode 26 (err -116) [ 55.132774][ T4178] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.148484][ T4178] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.192703][ T4170] loop1: detected capacity change from 0 to 8192 [ 55.363067][ T4189] loop0: detected capacity change from 0 to 1024 [ 55.369902][ T4189] EXT4-fs: inline encryption not supported [ 55.390125][ T4189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.432130][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.464001][ T4193] loop0: detected capacity change from 0 to 1024 [ 55.472068][ T4193] EXT4-fs: inline encryption not supported [ 55.482142][ T4193] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.550772][ T4184] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 55.657009][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.738746][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.973397][ T4210] loop3: detected capacity change from 0 to 2048 [ 56.002617][ T4202] loop2: detected capacity change from 0 to 8192 [ 56.074403][ T4212] lo speed is unknown, defaulting to 1000 [ 56.136021][ T4212] loop0: detected capacity change from 0 to 128 [ 56.195857][ T4214] netlink: 16 bytes leftover after parsing attributes in process `syz.4.271'. [ 56.215193][ T4212] serio: Serial port ptm0 [ 56.435071][ T4210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.452929][ T4210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.526799][ T4223] netlink: 'syz.1.274': attribute type 21 has an invalid length. [ 56.534816][ T4223] netlink: 156 bytes leftover after parsing attributes in process `syz.1.274'. [ 56.543782][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 56.554484][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 56.554498][ T29] audit: type=1326 audit(1761857928.692:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 56.584898][ T29] audit: type=1326 audit(1761857928.692:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 56.596862][ T4223] loop1: detected capacity change from 0 to 512 [ 56.608592][ T29] audit: type=1326 audit(1761857928.692:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 56.638220][ T29] audit: type=1326 audit(1761857928.692:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 56.661554][ T29] audit: type=1326 audit(1761857928.692:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 56.684849][ T29] audit: type=1326 audit(1761857928.692:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 56.708147][ T29] audit: type=1326 audit(1761857928.722:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 56.734342][ T29] audit: type=1326 audit(1761857928.722:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 56.736521][ T4223] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.274: inode has both inline data and extents flags [ 56.757829][ T29] audit: type=1326 audit(1761857928.722:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f630f41efc9 code=0x7ffc0000 [ 56.794078][ T29] audit: type=1326 audit(1761857928.722:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4222 comm="syz.1.274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f630f41f003 code=0x7ffc0000 [ 56.818741][ T4223] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.274: couldn't read orphan inode 15 (err -117) [ 56.831754][ T4223] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.950907][ T4240] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.145031][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.150419][ T4249] IPv6: NLM_F_CREATE should be specified when creating new route [ 57.201520][ T4254] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.219117][ T4254] vhci_hcd: invalid port number 96 [ 57.224305][ T4254] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 57.252631][ T4254] loop1: detected capacity change from 0 to 128 [ 57.388342][ T4260] siw: device registration error -23 [ 57.579559][ T4265] lo speed is unknown, defaulting to 1000 [ 57.610228][ T4277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.287'. [ 57.627825][ T4265] loop1: detected capacity change from 0 to 128 [ 57.635030][ T4279] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 57.641543][ T4279] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 57.649692][ T4279] vhci_hcd vhci_hcd.0: Device attached [ 57.657768][ T4265] serio: Serial port ptm0 [ 57.669385][ T4280] vhci_hcd: connection closed [ 57.669593][ T1086] vhci_hcd: stop threads [ 57.678571][ T1086] vhci_hcd: release socket [ 57.683000][ T1086] vhci_hcd: disconnect device [ 57.790981][ T4285] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 57.797506][ T4285] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 57.805622][ T4285] vhci_hcd vhci_hcd.0: Device attached [ 57.811581][ T4286] vhci_hcd: connection closed [ 57.811914][ T41] vhci_hcd: stop threads [ 57.820884][ T41] vhci_hcd: release socket [ 57.825284][ T41] vhci_hcd: disconnect device [ 58.044697][ T4289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.053462][ T4289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.224953][ T4293] siw: device registration error -23 [ 58.408406][ T4309] loop2: detected capacity change from 0 to 1024 [ 58.415138][ T4309] EXT4-fs: Ignoring removed orlov option [ 58.423061][ T4309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.439494][ T4312] loop4: detected capacity change from 0 to 512 [ 58.447096][ T4295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.455809][ T4295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.473264][ T4312] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.486125][ T4312] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.486484][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.500621][ T4312] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.514086][ T4312] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.599878][ T4323] tipc: Started in network mode [ 58.603394][ T4322] siw: device registration error -23 [ 58.604853][ T4323] tipc: Node identity ac14140f, cluster identity 4711 [ 58.617000][ T4323] tipc: New replicast peer: 255.255.255.255 [ 58.623282][ T4323] tipc: Enabled bearer , priority 10 [ 58.772161][ T4326] lo speed is unknown, defaulting to 1000 [ 58.803260][ T4326] loop0: detected capacity change from 0 to 128 [ 58.813425][ T4326] serio: Serial port ptm0 [ 59.238085][ T4333] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 59.244616][ T4333] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 59.252781][ T4333] vhci_hcd vhci_hcd.0: Device attached [ 59.258673][ T4334] vhci_hcd: connection closed [ 59.258841][ T41] vhci_hcd: stop threads [ 59.267776][ T41] vhci_hcd: release socket [ 59.272259][ T41] vhci_hcd: disconnect device [ 59.429608][ T4341] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 59.436167][ T4341] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 59.444289][ T4341] vhci_hcd vhci_hcd.0: Device attached [ 59.450220][ T4342] vhci_hcd: connection closed [ 59.450394][ T12] vhci_hcd: stop threads [ 59.459339][ T12] vhci_hcd: release socket [ 59.463799][ T12] vhci_hcd: disconnect device [ 59.748348][ T4349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.756775][ T36] tipc: Node number set to 2886997007 [ 59.756874][ T4349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.848602][ T4355] pim6reg1: entered promiscuous mode [ 59.854009][ T4355] pim6reg1: entered allmulticast mode [ 60.011605][ T4359] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.018964][ T4359] vhci_hcd: invalid port number 96 [ 60.024133][ T4359] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 60.032502][ T4359] loop2: detected capacity change from 0 to 128 [ 60.108552][ T4361] loop2: detected capacity change from 0 to 1024 [ 60.115412][ T4361] EXT4-fs: Ignoring removed orlov option [ 60.134568][ T4361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.169254][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.181215][ T4364] loop1: detected capacity change from 0 to 1024 [ 60.198350][ T4364] EXT4-fs: Ignoring removed orlov option [ 60.220108][ T4364] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.259311][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.326852][ T4380] netlink: 176 bytes leftover after parsing attributes in process `syz.0.333'. [ 60.377043][ T4378] lo speed is unknown, defaulting to 1000 [ 60.378815][ T4388] tmpfs: Bad value for 'mpol' [ 60.396278][ T4388] xt_hashlimit: max too large, truncated to 1048576 [ 60.407091][ T4388] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 60.416329][ T4378] loop2: detected capacity change from 0 to 128 [ 60.421360][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 60.431395][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'. [ 60.443200][ T4378] serio: Serial port ptm0 [ 60.484029][ T4394] netlink: 19 bytes leftover after parsing attributes in process `syz.1.337'. [ 60.508338][ T4396] siw: device registration error -23 [ 60.541621][ T4401] ip6gre1: entered allmulticast mode [ 60.631398][ T4407] netlink: 48 bytes leftover after parsing attributes in process `syz.1.344'. [ 60.656019][ T4409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.345'. [ 60.669222][ T4409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.683264][ T4409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.690829][ T4409] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 60.702115][ T4409] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 60.738179][ T4402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.747355][ T4402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.847752][ T4419] loop3: detected capacity change from 0 to 512 [ 60.881950][ T4419] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.347: bg 0: block 248: padding at end of block bitmap is not set [ 60.896453][ T4419] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.347: Failed to acquire dquot type 1 [ 60.908315][ T4419] EXT4-fs (loop3): 1 truncate cleaned up [ 60.914431][ T4419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.927143][ T4419] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.102454][ T4430] bridge_slave_1: left allmulticast mode [ 61.108142][ T4430] bridge_slave_1: left promiscuous mode [ 61.114019][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.124597][ T4430] bridge_slave_0: left allmulticast mode [ 61.130249][ T4430] bridge_slave_0: left promiscuous mode [ 61.136187][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.159846][ T4435] siw: device registration error -23 [ 61.279789][ T4444] __nla_validate_parse: 13 callbacks suppressed [ 61.279884][ T4444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.356'. [ 61.356564][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.437437][ T4460] vlan2: entered allmulticast mode [ 61.442651][ T4460] bridge_slave_0: entered allmulticast mode [ 61.462116][ T4459] tipc: Started in network mode [ 61.467176][ T4459] tipc: Node identity ac14140f, cluster identity 4711 [ 61.474514][ T4459] tipc: New replicast peer: 255.255.255.255 [ 61.480664][ T4459] tipc: Enabled bearer , priority 10 [ 61.492900][ T4462] loop1: detected capacity change from 0 to 512 [ 61.522338][ T4462] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.359: couldn't read orphan inode 26 (err -116) [ 61.535229][ T4462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.548558][ T4462] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.563090][ T29] kauditd_printk_skb: 665 callbacks suppressed [ 61.563107][ T29] audit: type=1326 audit(1761857933.702:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9511a45e67 code=0x7ffc0000 [ 61.610307][ T4465] lo speed is unknown, defaulting to 1000 [ 61.672611][ T4465] loop2: detected capacity change from 0 to 128 [ 61.696448][ T4465] serio: Serial port ptm0 [ 61.739828][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.788648][ T29] audit: type=1326 audit(1761857933.822:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95119eb099 code=0x7ffc0000 [ 61.812197][ T29] audit: type=1326 audit(1761857933.822:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9511a45e67 code=0x7ffc0000 [ 61.835457][ T29] audit: type=1326 audit(1761857933.822:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95119eb099 code=0x7ffc0000 [ 61.858743][ T29] audit: type=1326 audit(1761857933.822:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 61.882065][ T29] audit: type=1326 audit(1761857933.842:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9511a45e67 code=0x7ffc0000 [ 61.905322][ T29] audit: type=1326 audit(1761857933.842:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95119eb099 code=0x7ffc0000 [ 61.928615][ T29] audit: type=1326 audit(1761857933.842:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f9511a4efc9 code=0x7ffc0000 [ 61.952027][ T29] audit: type=1326 audit(1761857933.842:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9511a45e67 code=0x7ffc0000 [ 61.975363][ T29] audit: type=1326 audit(1761857933.842:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4453 comm="syz.4.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f95119eb099 code=0x7ffc0000 [ 62.001455][ T4470] netlink: 19 bytes leftover after parsing attributes in process `syz.3.363'. [ 62.166252][ T4477] loop3: detected capacity change from 0 to 1024 [ 62.173368][ T4477] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.200878][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.278188][ T4477] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.366: Invalid block bitmap block 0 in block_group 0 [ 62.293502][ T4477] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.366: Failed to acquire dquot type 0 [ 62.305229][ T4477] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.366: Freeing blocks not in datazone - block = 0, count = 4096 [ 62.320734][ T4477] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.366: Invalid inode bitmap blk 0 in block_group 0 [ 62.327592][ T41] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 62.345016][ T4477] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 62.384533][ T4477] EXT4-fs (loop3): 1 orphan inode deleted [ 62.409823][ T4477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.440679][ T4496] netlink: 19 bytes leftover after parsing attributes in process `syz.2.375'. [ 62.476666][ T4477] netlink: 23 bytes leftover after parsing attributes in process `syz.3.366'. [ 62.487872][ T4500] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 62.494391][ T4500] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 62.502550][ T4500] vhci_hcd vhci_hcd.0: Device attached [ 62.508087][ T36] tipc: Node number set to 2886997007 [ 62.513668][ T4498] loop1: detected capacity change from 0 to 1024 [ 62.514650][ T4501] vhci_hcd: connection closed [ 62.526292][ T12] vhci_hcd: stop threads [ 62.535267][ T12] vhci_hcd: release socket [ 62.539676][ T12] vhci_hcd: disconnect device [ 62.550987][ T4498] EXT4-fs: Ignoring removed orlov option [ 62.560058][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.569946][ T4498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.617452][ T4505] loop9: detected capacity change from 0 to 7 [ 62.626214][ T4505] buffer_io_error: 6 callbacks suppressed [ 62.626228][ T4505] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.639980][ T4505] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.647992][ T4505] loop9: unable to read partition table [ 62.653877][ T4505] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 62.653877][ T4505] ) failed (rc=-5) [ 62.654917][ T3303] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.695341][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.708625][ T4508] FAULT_INJECTION: forcing a failure. [ 62.708625][ T4508] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 62.721912][ T4508] CPU: 0 UID: 0 PID: 4508 Comm: syz.3.379 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.721940][ T4508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 62.721950][ T4508] Call Trace: [ 62.721955][ T4508] [ 62.721962][ T4508] __dump_stack+0x1d/0x30 [ 62.721980][ T4508] dump_stack_lvl+0xe8/0x140 [ 62.722011][ T4508] dump_stack+0x15/0x1b [ 62.722026][ T4508] should_fail_ex+0x265/0x280 [ 62.722052][ T4508] should_fail+0xb/0x20 [ 62.722068][ T4508] should_fail_usercopy+0x1a/0x20 [ 62.722165][ T4508] _copy_from_user+0x1c/0xb0 [ 62.722188][ T4508] lo_ioctl+0x383/0x12b0 [ 62.722211][ T4508] ? avc_has_extended_perms+0x73d/0x940 [ 62.722279][ T4508] ? blkdev_common_ioctl+0xad6/0x1ad0 [ 62.722298][ T4508] ? do_vfs_ioctl+0x866/0xe10 [ 62.722323][ T4508] ? selinux_file_ioctl+0x308/0x3a0 [ 62.722357][ T4508] ? __pfx_lo_ioctl+0x10/0x10 [ 62.722421][ T4508] ? __pfx_blkdev_ioctl+0x10/0x10 [ 62.722438][ T4508] blkdev_ioctl+0x356/0x440 [ 62.722455][ T4508] ? __pfx_blkdev_ioctl+0x10/0x10 [ 62.722475][ T4508] __se_sys_ioctl+0xce/0x140 [ 62.722495][ T4508] __x64_sys_ioctl+0x43/0x50 [ 62.722513][ T4508] x64_sys_call+0x1816/0x3000 [ 62.722534][ T4508] do_syscall_64+0xd2/0x200 [ 62.722551][ T4508] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 62.722622][ T4508] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 62.722646][ T4508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.722664][ T4508] RIP: 0033:0x7ff83ecfefc9 [ 62.722676][ T4508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.722754][ T4508] RSP: 002b:00007ff83d75f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.722852][ T4508] RAX: ffffffffffffffda RBX: 00007ff83ef55fa0 RCX: 00007ff83ecfefc9 [ 62.722862][ T4508] RDX: 0000200000001600 RSI: 0000000000004c0a RDI: 0000000000000007 [ 62.722883][ T4508] RBP: 00007ff83d75f090 R08: 0000000000000000 R09: 0000000000000000 [ 62.722892][ T4508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.722902][ T4508] R13: 00007ff83ef56038 R14: 00007ff83ef55fa0 R15: 00007ffe8fbcc7d8 [ 62.722920][ T4508] [ 62.725199][ T3303] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.867843][ T4512] loop3: detected capacity change from 0 to 512 [ 62.880744][ T3303] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.962013][ T3303] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.970101][ T3303] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.011852][ T4512] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.381: couldn't read orphan inode 26 (err -116) [ 63.031266][ T4512] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.045812][ T4512] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.057411][ T4524] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.064839][ T4524] vhci_hcd: invalid port number 96 [ 63.070037][ T4524] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 63.095256][ T4524] loop1: detected capacity change from 0 to 128 [ 63.104423][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 63.122487][ T4530] loop4: detected capacity change from 0 to 1024 [ 63.139473][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.159930][ T4530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.164725][ T4532] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.179844][ T4532] vhci_hcd: invalid port number 96 [ 63.184993][ T4532] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 63.224213][ T4532] loop2: detected capacity change from 0 to 128 [ 63.322314][ T4547] loop2: detected capacity change from 0 to 1024 [ 63.369381][ T4547] ext2: Unknown parameter 'obj_user' [ 63.411929][ T4547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.396'. [ 63.434026][ T4534] loop0: detected capacity change from 0 to 8192 [ 63.989190][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.058265][ T4560] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 64.064789][ T4560] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 64.072950][ T4560] vhci_hcd vhci_hcd.0: Device attached [ 64.080011][ T4561] vhci_hcd: connection closed [ 64.080894][ T270] vhci_hcd: stop threads [ 64.089842][ T270] vhci_hcd: release socket [ 64.094405][ T270] vhci_hcd: disconnect device [ 64.163165][ T4566] loop1: detected capacity change from 0 to 512 [ 64.182493][ T4566] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.402: couldn't read orphan inode 26 (err -116) [ 64.194925][ T4566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.212476][ T4566] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.274604][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.303861][ T4572] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 64.314719][ T4572] vhci_hcd: invalid port number 96 [ 64.319850][ T4572] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 64.328236][ T4572] loop3: detected capacity change from 0 to 128 [ 64.384527][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 64.392270][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 64.400176][ T36] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 64.408809][ T36] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 64.421443][ T4576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 64.506007][ T4577] fido_id[4577]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 64.544704][ T4570] loop2: detected capacity change from 0 to 8192 [ 64.627214][ T4580] loop4: detected capacity change from 0 to 1024 [ 64.664513][ T4580] EXT4-fs: Ignoring removed orlov option [ 64.729073][ T4580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.859678][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.876259][ T4590] netlink: 56 bytes leftover after parsing attributes in process `syz.3.411'. [ 64.966966][ T4602] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.968537][ T4603] loop3: detected capacity change from 0 to 512 [ 65.001777][ T4605] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 65.008308][ T4605] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 65.016503][ T4605] vhci_hcd vhci_hcd.0: Device attached [ 65.020952][ T4588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.031540][ T4606] vhci_hcd: connection closed [ 65.032175][ T1086] vhci_hcd: stop threads [ 65.041103][ T1086] vhci_hcd: release socket [ 65.043412][ T4588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.045577][ T1086] vhci_hcd: disconnect device [ 65.062399][ T4603] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.416: couldn't read orphan inode 26 (err -116) [ 65.081491][ T4603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.101269][ T4603] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.129838][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.610111][ T4623] loop1: detected capacity change from 0 to 1024 [ 65.638203][ T4623] EXT4-fs: Ignoring removed orlov option [ 65.651100][ T4623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.698475][ T4629] FAULT_INJECTION: forcing a failure. [ 65.698475][ T4629] name failslab, interval 1, probability 0, space 0, times 0 [ 65.711215][ T4629] CPU: 1 UID: 0 PID: 4629 Comm: syz.0.425 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.711258][ T4629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.711270][ T4629] Call Trace: [ 65.711276][ T4629] [ 65.711285][ T4629] __dump_stack+0x1d/0x30 [ 65.711306][ T4629] dump_stack_lvl+0xe8/0x140 [ 65.711322][ T4629] dump_stack+0x15/0x1b [ 65.711417][ T4629] should_fail_ex+0x265/0x280 [ 65.711434][ T4629] ? sctp_association_new+0x71/0x1200 [ 65.711454][ T4629] should_failslab+0x8c/0xb0 [ 65.711526][ T4629] __kmalloc_cache_noprof+0x4c/0x4a0 [ 65.711599][ T4629] sctp_association_new+0x71/0x1200 [ 65.711622][ T4629] ? __ipv6_addr_type+0x1ed/0x210 [ 65.711719][ T4629] sctp_connect_new_asoc+0x1a8/0x3a0 [ 65.711745][ T4629] sctp_sendmsg+0xf10/0x18d0 [ 65.711824][ T4629] ? selinux_socket_sendmsg+0xb1/0x1b0 [ 65.711846][ T4629] ? __pfx_sctp_sendmsg+0x10/0x10 [ 65.711864][ T4629] inet_sendmsg+0xc5/0xd0 [ 65.711883][ T4629] __sock_sendmsg+0x102/0x180 [ 65.711958][ T4629] ____sys_sendmsg+0x31e/0x4e0 [ 65.712009][ T4629] ___sys_sendmsg+0x17b/0x1d0 [ 65.712048][ T4629] __x64_sys_sendmsg+0xd4/0x160 [ 65.712076][ T4629] x64_sys_call+0x191e/0x3000 [ 65.712097][ T4629] do_syscall_64+0xd2/0x200 [ 65.712112][ T4629] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.712134][ T4629] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.712157][ T4629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.712307][ T4629] RIP: 0033:0x7f7177e2efc9 [ 65.712320][ T4629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.712335][ T4629] RSP: 002b:00007f717686e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.712354][ T4629] RAX: ffffffffffffffda RBX: 00007f7178086090 RCX: 00007f7177e2efc9 [ 65.712366][ T4629] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000003 [ 65.712377][ T4629] RBP: 00007f717686e090 R08: 0000000000000000 R09: 0000000000000000 [ 65.712463][ T4629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.712473][ T4629] R13: 00007f7178086128 R14: 00007f7178086090 R15: 00007ffd6e82f338 [ 65.712489][ T4629] [ 65.984260][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.031928][ T4632] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 66.039457][ T4632] vhci_hcd: invalid port number 96 [ 66.044636][ T4632] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 66.057622][ T4638] binfmt_misc: register: failed to install interpreter file ./file0 [ 66.068296][ T4632] loop3: detected capacity change from 0 to 128 [ 66.145288][ T4651] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 66.148504][ T4649] loop3: detected capacity change from 0 to 2048 [ 66.151822][ T4651] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 66.152025][ T4651] vhci_hcd vhci_hcd.0: Device attached [ 66.177445][ T4652] vhci_hcd: connection closed [ 66.177763][ T298] vhci_hcd: stop threads [ 66.186806][ T298] vhci_hcd: release socket [ 66.191248][ T298] vhci_hcd: disconnect device [ 66.211763][ T4649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.223891][ T4649] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.236101][ T4649] EXT4-fs (loop3): shut down requested (2) [ 66.242739][ T4649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 66.251642][ T4649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 66.260574][ T4649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 66.269363][ T4649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 66.278337][ T4649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 66.288167][ T4649] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=13 [ 66.304997][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.343588][ T4661] loop3: detected capacity change from 0 to 1024 [ 66.354364][ T4661] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.366057][ T4661] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.436: Invalid block bitmap block 0 in block_group 0 [ 66.376867][ T4655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.380052][ T4661] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.436: Failed to acquire dquot type 0 [ 66.389059][ T4655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.400710][ T4661] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.436: Freeing blocks not in datazone - block = 0, count = 4096 [ 66.420062][ T4661] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.436: Invalid inode bitmap blk 0 in block_group 0 [ 66.432730][ T298] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 66.434995][ T4661] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 66.452766][ T4661] EXT4-fs (loop3): 1 orphan inode deleted [ 66.458762][ T4661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.496053][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.526901][ T4666] loop3: detected capacity change from 0 to 1024 [ 66.533883][ T4666] EXT4-fs: Ignoring removed orlov option [ 66.541897][ T4664] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 66.546061][ T4666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.549216][ T4664] vhci_hcd: invalid port number 96 [ 66.566873][ T4664] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 66.576718][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 66.576731][ T29] audit: type=1326 audit(1761857938.712:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83ecfefc9 code=0x7ffc0000 [ 66.578922][ T4664] loop0: detected capacity change from 0 to 128 [ 66.583431][ T29] audit: type=1326 audit(1761857938.722:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83ecfefc9 code=0x7ffc0000 [ 66.612912][ T29] audit: type=1326 audit(1761857938.742:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff83ecfefc9 code=0x7ffc0000 [ 66.659265][ T29] audit: type=1326 audit(1761857938.742:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83ecfefc9 code=0x7ffc0000 [ 66.682696][ T29] audit: type=1326 audit(1761857938.742:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83ecfefc9 code=0x7ffc0000 [ 66.706128][ T29] audit: type=1326 audit(1761857938.742:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7ff83ecfefc9 code=0x7ffc0000 [ 66.729483][ T29] audit: type=1326 audit(1761857938.742:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83ecfefc9 code=0x7ffc0000 [ 66.752812][ T29] audit: type=1326 audit(1761857938.742:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7ff83ecfefc9 code=0x7ffc0000 [ 66.776188][ T29] audit: type=1326 audit(1761857938.742:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff83ecfefc9 code=0x7ffc0000 [ 66.799493][ T29] audit: type=1326 audit(1761857938.742:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4665 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff83ecfefc9 code=0x7ffc0000 [ 66.832062][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.933679][ T4691] loop2: detected capacity change from 0 to 1024 [ 66.947391][ T4691] EXT4-fs: Ignoring removed orlov option [ 67.015799][ T4691] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.050734][ T4704] wireguard0: entered promiscuous mode [ 67.056266][ T4704] wireguard0: entered allmulticast mode [ 67.064318][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.131960][ T4711] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.139505][ T4714] loop4: detected capacity change from 0 to 512 [ 67.151460][ T4711] vhci_hcd: invalid port number 96 [ 67.156598][ T4711] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 67.166976][ T4711] loop1: detected capacity change from 0 to 128 [ 67.172078][ T4714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.190610][ T4714] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.206327][ T4721] siw: device registration error -23 [ 67.222607][ T4714] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.231951][ T4714] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 67.253025][ T4724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 67.292653][ T4725] vlan2: entered allmulticast mode [ 67.300284][ T4727] loop3: detected capacity change from 0 to 1024 [ 67.312602][ T4727] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.333335][ T4727] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.455: Invalid block bitmap block 0 in block_group 0 [ 67.347060][ T4731] loop2: detected capacity change from 0 to 512 [ 67.347033][ T4727] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.455: Failed to acquire dquot type 0 [ 67.347230][ T4727] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.455: Freeing blocks not in datazone - block = 0, count = 4096 [ 67.378355][ T4727] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.455: Invalid inode bitmap blk 0 in block_group 0 [ 67.391230][ T298] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 67.391309][ T4727] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 67.404568][ T4731] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.450: couldn't read orphan inode 26 (err -116) [ 67.413903][ T4727] EXT4-fs (loop3): 1 orphan inode deleted [ 67.423851][ T4731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.428910][ T4727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.441273][ T4731] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.482053][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.534990][ T4733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.543572][ T4733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.640030][ T4742] loop3: detected capacity change from 0 to 512 [ 67.652618][ T4742] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.460: bg 0: block 248: padding at end of block bitmap is not set [ 67.667139][ T4742] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.460: Failed to acquire dquot type 1 [ 67.679063][ T4742] EXT4-fs (loop3): 1 truncate cleaned up [ 67.684980][ T4742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.697491][ T4742] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.792557][ T4749] siw: device registration error -23 [ 67.830570][ T4753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.464'. [ 67.842225][ T4753] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 67.849855][ T4753] team0: Device ipvlan2 is already an upper device of the team interface [ 67.995638][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.013599][ T4757] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 68.020177][ T4757] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 68.028372][ T4757] vhci_hcd vhci_hcd.0: Device attached [ 68.034377][ T4758] vhci_hcd: connection closed [ 68.034487][ T31] vhci_hcd: stop threads [ 68.043542][ T31] vhci_hcd: release socket [ 68.047932][ T31] vhci_hcd: disconnect device [ 68.084817][ T4761] netlink: 43 bytes leftover after parsing attributes in process `syz.1.466'. [ 68.110070][ T4765] loop1: detected capacity change from 0 to 128 [ 68.162396][ T4770] loop1: detected capacity change from 0 to 256 [ 68.175485][ T4770] FAT-fs (loop1): Directory bread(block 64) failed [ 68.182268][ T4770] FAT-fs (loop1): Directory bread(block 65) failed [ 68.188992][ T4770] FAT-fs (loop1): Directory bread(block 66) failed [ 68.203540][ T4770] FAT-fs (loop1): Directory bread(block 67) failed [ 68.210183][ T4770] FAT-fs (loop1): Directory bread(block 68) failed [ 68.217102][ T4770] FAT-fs (loop1): Directory bread(block 69) failed [ 68.223813][ T4770] FAT-fs (loop1): Directory bread(block 70) failed [ 68.230882][ T4770] FAT-fs (loop1): Directory bread(block 71) failed [ 68.237466][ T4770] FAT-fs (loop1): Directory bread(block 72) failed [ 68.244386][ T4770] FAT-fs (loop1): Directory bread(block 73) failed [ 68.263715][ T4770] syz.1.469: attempt to access beyond end of device [ 68.263715][ T4770] loop1: rw=524288, sector=1160, nr_sectors = 4 limit=256 [ 68.277479][ T4770] syz.1.469: attempt to access beyond end of device [ 68.277479][ T4770] loop1: rw=0, sector=1160, nr_sectors = 4 limit=256 [ 68.328846][ T4773] loop1: detected capacity change from 0 to 256 [ 68.340925][ T4773] FAT-fs (loop1): Directory bread(block 64) failed [ 68.355887][ T4773] FAT-fs (loop1): Directory bread(block 65) failed [ 68.362579][ T4773] FAT-fs (loop1): Directory bread(block 66) failed [ 68.369078][ T4773] FAT-fs (loop1): Directory bread(block 67) failed [ 68.376072][ T4773] FAT-fs (loop1): Directory bread(block 68) failed [ 68.382937][ T4773] FAT-fs (loop1): Directory bread(block 69) failed [ 68.389523][ T4773] FAT-fs (loop1): Directory bread(block 70) failed [ 68.396360][ T4773] FAT-fs (loop1): Directory bread(block 71) failed [ 68.403157][ T4773] FAT-fs (loop1): Directory bread(block 72) failed [ 68.409740][ T4773] FAT-fs (loop1): Directory bread(block 73) failed [ 68.429570][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.439674][ T4773] FAULT_INJECTION: forcing a failure. [ 68.439674][ T4773] name failslab, interval 1, probability 0, space 0, times 0 [ 68.452361][ T4773] CPU: 0 UID: 0 PID: 4773 Comm: syz.1.470 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.452431][ T4773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.452442][ T4773] Call Trace: [ 68.452448][ T4773] [ 68.452455][ T4773] __dump_stack+0x1d/0x30 [ 68.452473][ T4773] dump_stack_lvl+0xe8/0x140 [ 68.452489][ T4773] dump_stack+0x15/0x1b [ 68.452503][ T4773] should_fail_ex+0x265/0x280 [ 68.452570][ T4773] should_failslab+0x8c/0xb0 [ 68.452667][ T4773] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 68.452722][ T4773] ? __get_vm_area_node+0x106/0x1d0 [ 68.452749][ T4773] ? __rcu_read_unlock+0x4f/0x70 [ 68.452825][ T4773] __get_vm_area_node+0x106/0x1d0 [ 68.452849][ T4773] __vmalloc_node_range_noprof+0x28c/0xed0 [ 68.452873][ T4773] ? kernel_read_file+0x2c3/0x500 [ 68.452972][ T4773] ? avc_has_perm+0xf7/0x180 [ 68.452992][ T4773] ? selinux_kernel_load_from_file+0x1f5/0x230 [ 68.453022][ T4773] ? kernel_read_file+0x2c3/0x500 [ 68.453048][ T4773] vmalloc_noprof+0x82/0xc0 [ 68.453085][ T4773] ? kernel_read_file+0x2c3/0x500 [ 68.453161][ T4773] kernel_read_file+0x2c3/0x500 [ 68.453186][ T4773] __se_sys_finit_module+0x2d3/0x460 [ 68.453210][ T4773] __x64_sys_finit_module+0x3e/0x50 [ 68.453227][ T4773] x64_sys_call+0x2a96/0x3000 [ 68.453305][ T4773] do_syscall_64+0xd2/0x200 [ 68.453324][ T4773] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.453367][ T4773] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 68.453393][ T4773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.453413][ T4773] RIP: 0033:0x7f630f41efc9 [ 68.453428][ T4773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.453499][ T4773] RSP: 002b:00007f630de7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 68.453515][ T4773] RAX: ffffffffffffffda RBX: 00007f630f675fa0 RCX: 00007f630f41efc9 [ 68.453525][ T4773] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 68.453534][ T4773] RBP: 00007f630de7f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.453544][ T4773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.453555][ T4773] R13: 00007f630f676038 R14: 00007f630f675fa0 R15: 00007ffee9206be8 [ 68.453571][ T4773] [ 68.453579][ T4773] syz.1.470: vmalloc error: size 2, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 68.593813][ T4776] loop0: detected capacity change from 0 to 128 [ 68.595511][ T4773] ,cpuset= [ 68.627195][ T4776] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.634049][ T4773] /,mems_allowed=0 [ 68.634071][ T4773] CPU: 0 UID: 0 PID: 4773 Comm: syz.1.470 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.634132][ T4773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.634144][ T4773] Call Trace: [ 68.634151][ T4773] [ 68.634159][ T4773] __dump_stack+0x1d/0x30 [ 68.634192][ T4773] dump_stack_lvl+0xe8/0x140 [ 68.634210][ T4773] dump_stack+0x15/0x1b [ 68.634299][ T4773] warn_alloc+0x12b/0x1a0 [ 68.634330][ T4773] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 68.634362][ T4773] ? avc_has_perm+0xf7/0x180 [ 68.634412][ T4773] ? selinux_kernel_load_from_file+0x1f5/0x230 [ 68.634441][ T4773] ? kernel_read_file+0x2c3/0x500 [ 68.634467][ T4773] vmalloc_noprof+0x82/0xc0 [ 68.634496][ T4773] ? kernel_read_file+0x2c3/0x500 [ 68.634522][ T4773] kernel_read_file+0x2c3/0x500 [ 68.634608][ T4773] __se_sys_finit_module+0x2d3/0x460 [ 68.634635][ T4773] __x64_sys_finit_module+0x3e/0x50 [ 68.634654][ T4773] x64_sys_call+0x2a96/0x3000 [ 68.634807][ T4773] do_syscall_64+0xd2/0x200 [ 68.634824][ T4773] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 68.634848][ T4773] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 68.634874][ T4773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.634954][ T4773] RIP: 0033:0x7f630f41efc9 [ 68.634968][ T4773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.634985][ T4773] RSP: 002b:00007f630de7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 68.635002][ T4773] RAX: ffffffffffffffda RBX: 00007f630f675fa0 RCX: 00007f630f41efc9 [ 68.635014][ T4773] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 68.635025][ T4773] RBP: 00007f630de7f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.635037][ T4773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.635049][ T4773] R13: 00007f630f676038 R14: 00007f630f675fa0 R15: 00007ffee9206be8 [ 68.635066][ T4773] [ 68.635135][ T4773] Mem-Info: [ 68.667974][ T4776] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.674063][ T4773] active_anon:6698 inactive_anon:0 isolated_anon:0 [ 68.674063][ T4773] active_file:9326 inactive_file:2398 isolated_file:0 [ 68.674063][ T4773] unevictable:0 dirty:191 writeback:0 [ 68.674063][ T4773] slab_reclaimable:3200 slab_unreclaimable:14287 [ 68.674063][ T4773] mapped:29939 shmem:314 pagetables:1165 [ 68.674063][ T4773] sec_pagetables:0 bounce:0 [ 68.674063][ T4773] kernel_misc_reclaimable:0 [ 68.674063][ T4773] free:1889002 free_pcp:18571 free_cma:0 [ 68.814139][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.472'. [ 68.818536][ T4773] Node 0 active_anon:26792kB inactive_anon:0kB active_file:37304kB inactive_file:9592kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119756kB dirty:764kB writeback:0kB shmem:1256kB kernel_stack:3456kB pagetables:4660kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 68.818606][ T4773] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 69.050919][ T4773] lowmem_reserve[]: 0 2881 7859 7859 [ 69.056240][ T4773] Node 0 DMA32 free:2946744kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950272kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 69.087633][ T4773] lowmem_reserve[]: 0 0 4978 4978 [ 69.092711][ T4773] Node 0 Normal free:4593904kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26792kB inactive_anon:0kB active_file:37304kB inactive_file:9592kB unevictable:0kB writepending:876kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:70664kB local_pcp:38428kB free_cma:0kB [ 69.125556][ T4773] lowmem_reserve[]: 0 0 0 0 [ 69.130128][ T4773] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 69.142816][ T4773] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 6*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946744kB [ 69.158816][ T4773] Node 0 Normal: 3*4kB (UME) 255*8kB (UM) 303*16kB (UM) 93*32kB (UME) 33*64kB (UM) 17*128kB (UM) 6*256kB (UME) 2*512kB (UM) 2*1024kB (UM) 4*2048kB (UME) 1115*4096kB (M) = 4594004kB [ 69.176880][ T4773] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 69.186169][ T4773] 12089 total pagecache pages [ 69.190873][ T4773] 27 pages in swap cache [ 69.195094][ T4773] Free swap = 124996kB [ 69.199224][ T4773] Total swap = 124996kB [ 69.203378][ T4773] 2097051 pages RAM [ 69.207166][ T4773] 0 pages HighMem/MovableOnly [ 69.211853][ T4773] 81083 pages reserved [ 69.255343][ T3313] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 69.273340][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.474'. [ 69.286097][ T4786] loop3: detected capacity change from 0 to 1024 [ 69.307348][ T4793] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 69.308831][ T4786] EXT4-fs: Ignoring removed orlov option [ 69.313871][ T4793] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 69.314002][ T4793] vhci_hcd vhci_hcd.0: Device attached [ 69.321336][ T4786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.330722][ T4794] vhci_hcd: connection closed [ 69.346478][ T31] vhci_hcd: stop threads [ 69.355446][ T31] vhci_hcd: release socket [ 69.359876][ T31] vhci_hcd: disconnect device [ 69.372036][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.419093][ T4800] loop1: detected capacity change from 0 to 2048 [ 69.454887][ T3303] Alternate GPT is invalid, using primary GPT. [ 69.461189][ T3303] loop1: p1 p2 p3 [ 69.464945][ T3303] loop1: partition table partially beyond EOD, truncated [ 69.479640][ T4800] Alternate GPT is invalid, using primary GPT. [ 69.485496][ T4808] siw: device registration error -23 [ 69.485986][ T4800] loop1: p1 p2 p3 [ 69.494800][ T4800] loop1: partition table partially beyond EOD, truncated [ 69.498766][ T4791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.521211][ T4791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.529695][ T3003] Alternate GPT is invalid, using primary GPT. [ 69.535987][ T3003] loop1: p1 p2 p3 [ 69.539707][ T3003] loop1: partition table partially beyond EOD, truncated [ 69.564793][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 69.576472][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 69.582379][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 69.600025][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 69.603523][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 69.611617][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 69.633232][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 69.633401][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 69.653789][ T3501] udevd[3501]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 69.674474][ T4815] vlan2: entered allmulticast mode [ 69.683507][ T4812] loop1: detected capacity change from 0 to 512 [ 69.703828][ T4812] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.716487][ T4812] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.731727][ T4812] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.740445][ T4818] loop3: detected capacity change from 0 to 512 [ 69.741103][ T4812] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 69.761648][ T4818] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.481: couldn't read orphan inode 26 (err -116) [ 69.773912][ T4818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.786389][ T4818] ext4 filesystem being mounted at /105/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.996315][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.019031][ T4829] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 70.076091][ T4835] siw: device registration error -23 [ 70.113547][ T4839] loop4: detected capacity change from 0 to 1024 [ 70.120177][ T4839] EXT4-fs: Ignoring removed orlov option [ 70.139375][ T4839] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.178811][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.385077][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.417775][ T4855] loop3: detected capacity change from 0 to 128 [ 70.429501][ T4855] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.442014][ T4845] loop2: detected capacity change from 0 to 8192 [ 70.467541][ T4845] xt_policy: output policy not valid in PREROUTING and INPUT [ 70.793150][ T4860] netlink: 16 bytes leftover after parsing attributes in process `syz.0.496'. [ 71.014349][ T4862] FAULT_INJECTION: forcing a failure. [ 71.014349][ T4862] name failslab, interval 1, probability 0, space 0, times 0 [ 71.026995][ T4862] CPU: 0 UID: 0 PID: 4862 Comm: syz.2.497 Not tainted syzkaller #0 PREEMPT(voluntary) [ 71.027022][ T4862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 71.027104][ T4862] Call Trace: [ 71.027111][ T4862] [ 71.027119][ T4862] __dump_stack+0x1d/0x30 [ 71.027138][ T4862] dump_stack_lvl+0xe8/0x140 [ 71.027159][ T4862] dump_stack+0x15/0x1b [ 71.027172][ T4862] should_fail_ex+0x265/0x280 [ 71.027183][ T4862] should_failslab+0x8c/0xb0 [ 71.027238][ T4862] kmem_cache_alloc_noprof+0x50/0x480 [ 71.027324][ T4862] ? alloc_empty_file+0x76/0x200 [ 71.027341][ T4862] ? fast_dput+0x44/0x2c0 [ 71.027355][ T4862] alloc_empty_file+0x76/0x200 [ 71.027371][ T4862] dentry_open+0x2d/0x90 [ 71.027381][ T4862] ptm_open_peer+0x113/0x180 [ 71.027419][ T4862] tty_ioctl+0x3bc/0xb80 [ 71.027431][ T4862] ? __pfx_tty_ioctl+0x10/0x10 [ 71.027476][ T4862] __se_sys_ioctl+0xce/0x140 [ 71.027487][ T4862] __x64_sys_ioctl+0x43/0x50 [ 71.027498][ T4862] x64_sys_call+0x1816/0x3000 [ 71.027510][ T4862] do_syscall_64+0xd2/0x200 [ 71.027537][ T4862] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 71.027552][ T4862] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 71.027567][ T4862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.027593][ T4862] RIP: 0033:0x7f1d45cbefc9 [ 71.027673][ T4862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.027682][ T4862] RSP: 002b:00007f1d44727038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.027693][ T4862] RAX: ffffffffffffffda RBX: 00007f1d45f15fa0 RCX: 00007f1d45cbefc9 [ 71.027708][ T4862] RDX: 0000000000000000 RSI: 0000000000005441 RDI: 0000000000000003 [ 71.027715][ T4862] RBP: 00007f1d44727090 R08: 0000000000000000 R09: 0000000000000000 [ 71.027722][ T4862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.027728][ T4862] R13: 00007f1d45f16038 R14: 00007f1d45f15fa0 R15: 00007ffcf8195198 [ 71.027809][ T4862] [ 71.252731][ T4866] siw: device registration error -23 [ 71.314797][ T4875] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 71.321327][ T4875] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 71.329486][ T4875] vhci_hcd vhci_hcd.0: Device attached [ 71.337459][ T4876] vhci_hcd: connection closed [ 71.337560][ T1086] vhci_hcd: stop threads [ 71.346627][ T1086] vhci_hcd: release socket [ 71.351098][ T1086] vhci_hcd: disconnect device [ 71.395208][ T4881] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 71.401817][ T4881] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 71.401903][ T4881] vhci_hcd vhci_hcd.0: Device attached [ 71.402725][ T4882] vhci_hcd: connection closed [ 71.402821][ T1086] vhci_hcd: stop threads [ 71.402831][ T1086] vhci_hcd: release socket [ 71.402837][ T1086] vhci_hcd: disconnect device [ 71.683425][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 71.683440][ T29] audit: type=1326 audit(1761857943.822:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7177e2efc9 code=0x7ffc0000 [ 71.712910][ T29] audit: type=1326 audit(1761857943.822:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7177e2efc9 code=0x7ffc0000 [ 71.746654][ T29] audit: type=1326 audit(1761857943.872:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7177e2efc9 code=0x7ffc0000 [ 71.770000][ T29] audit: type=1326 audit(1761857943.872:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7177e2efc9 code=0x7ffc0000 [ 71.793556][ T29] audit: type=1326 audit(1761857943.872:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7177e2efc9 code=0x7ffc0000 [ 71.817101][ T29] audit: type=1326 audit(1761857943.872:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7177e2efc9 code=0x7ffc0000 [ 71.840547][ T29] audit: type=1326 audit(1761857943.872:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7177e2efc9 code=0x7ffc0000 [ 71.863963][ T29] audit: type=1326 audit(1761857943.872:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7177e2efc9 code=0x7ffc0000 [ 71.887356][ T29] audit: type=1326 audit(1761857943.872:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7177e2efc9 code=0x7ffc0000 [ 71.910774][ T29] audit: type=1326 audit(1761857943.872:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4885 comm="syz.0.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7177e2efc9 code=0x7ffc0000 [ 72.205423][ T4888] loop0: detected capacity change from 0 to 8192 [ 72.269574][ T4893] loop2: detected capacity change from 0 to 8192 [ 72.568003][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.658945][ T4904] siw: device registration error -23 [ 72.725303][ T4907] siw: device registration error -23 [ 73.161231][ T4918] netlink: 16 bytes leftover after parsing attributes in process `syz.3.517'. [ 73.303711][ T4922] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 73.310241][ T4922] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 73.318430][ T4922] vhci_hcd vhci_hcd.0: Device attached [ 73.324508][ T4914] loop4: detected capacity change from 0 to 8192 [ 73.331525][ T4923] vhci_hcd: connection closed [ 73.331763][ T12] vhci_hcd: stop threads [ 73.334307][ T4914] bridge0: port 3(gretap0) entered blocking state [ 73.336456][ T12] vhci_hcd: release socket [ 73.340722][ T4914] bridge0: port 3(gretap0) entered disabled state [ 73.347099][ T12] vhci_hcd: disconnect device [ 73.363075][ T4914] gretap0: entered allmulticast mode [ 73.368883][ T4914] gretap0: entered promiscuous mode [ 73.374732][ T4914] bridge0: port 3(gretap0) entered blocking state [ 73.381197][ T4914] bridge0: port 3(gretap0) entered forwarding state [ 73.413144][ T4914] gretap0: left allmulticast mode [ 73.418263][ T4914] gretap0: left promiscuous mode [ 73.423430][ T4914] bridge0: port 3(gretap0) entered disabled state [ 73.637957][ T4927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.648329][ T4927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.017971][ T4936] loop3: detected capacity change from 0 to 2048 [ 74.202252][ T4941] loop4: detected capacity change from 0 to 1024 [ 74.209980][ T4941] EXT4-fs: Ignoring removed orlov option [ 74.222835][ T4941] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.255891][ T4945] loop2: detected capacity change from 0 to 1024 [ 74.273025][ T4936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.281675][ T4936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.325833][ T4945] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.356063][ T4945] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.526: Invalid block bitmap block 0 in block_group 0 [ 74.384461][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.398159][ T4945] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.526: Failed to acquire dquot type 0 [ 74.410172][ T4945] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.526: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.427654][ T4945] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.526: Invalid inode bitmap blk 0 in block_group 0 [ 74.442665][ T298] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 74.456459][ T4945] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 74.465105][ T4945] EXT4-fs (loop2): 1 orphan inode deleted [ 74.471243][ T4945] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.515353][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.532975][ T4950] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 74.539585][ T4950] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 74.547710][ T4950] vhci_hcd vhci_hcd.0: Device attached [ 74.558525][ T4953] vhci_hcd: connection closed [ 74.558974][ T41] vhci_hcd: stop threads [ 74.567920][ T41] vhci_hcd: release socket [ 74.572520][ T41] vhci_hcd: disconnect device [ 74.602138][ T4961] loop1: detected capacity change from 0 to 512 [ 74.625221][ T4961] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.532: bg 0: block 248: padding at end of block bitmap is not set [ 74.650580][ T4961] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.532: Failed to acquire dquot type 1 [ 74.672265][ T4961] EXT4-fs (loop1): 1 truncate cleaned up [ 74.678343][ T4961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.691249][ T4961] ext4 filesystem being mounted at /116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.741025][ T4969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.535'. [ 74.869781][ T4973] siw: device registration error -23 [ 74.888204][ T4975] FAULT_INJECTION: forcing a failure. [ 74.888204][ T4975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.901324][ T4975] CPU: 1 UID: 0 PID: 4975 Comm: syz.2.538 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.901348][ T4975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 74.901359][ T4975] Call Trace: [ 74.901365][ T4975] [ 74.901370][ T4975] __dump_stack+0x1d/0x30 [ 74.901383][ T4975] dump_stack_lvl+0xe8/0x140 [ 74.901469][ T4975] dump_stack+0x15/0x1b [ 74.901479][ T4975] should_fail_ex+0x265/0x280 [ 74.901490][ T4975] should_fail+0xb/0x20 [ 74.901532][ T4975] should_fail_usercopy+0x1a/0x20 [ 74.901544][ T4975] strncpy_from_user+0x25/0x230 [ 74.901560][ T4975] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 74.901649][ T4975] __se_sys_memfd_create+0x1ff/0x590 [ 74.901663][ T4975] __x64_sys_memfd_create+0x31/0x40 [ 74.901675][ T4975] x64_sys_call+0x2ac2/0x3000 [ 74.901687][ T4975] do_syscall_64+0xd2/0x200 [ 74.901697][ T4975] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.901741][ T4975] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 74.901808][ T4975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.901819][ T4975] RIP: 0033:0x7f1d45cbefc9 [ 74.901829][ T4975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.901838][ T4975] RSP: 002b:00007f1d44726d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 74.901858][ T4975] RAX: ffffffffffffffda RBX: 00000000000005c2 RCX: 00007f1d45cbefc9 [ 74.901865][ T4975] RDX: 00007f1d44726dec RSI: 0000000000000000 RDI: 00007f1d45d42960 [ 74.901872][ T4975] RBP: 0000200000000000 R08: 00007f1d44726b07 R09: 0000000000000000 [ 74.901878][ T4975] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 74.901885][ T4975] R13: 00007f1d44726dec R14: 00007f1d44726df0 R15: 00007ffcf8195198 [ 74.901895][ T4975] [ 75.090380][ T4971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.099359][ T4971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.389160][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.448003][ T4989] siw: device registration error -23 [ 75.560739][ T4999] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 75.567323][ T4999] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 75.575507][ T4999] vhci_hcd vhci_hcd.0: Device attached [ 75.575716][ T4997] loop0: detected capacity change from 0 to 2048 [ 75.581846][ T5000] vhci_hcd: connection closed [ 75.592386][ T298] vhci_hcd: stop threads [ 75.601404][ T298] vhci_hcd: release socket [ 75.605811][ T298] vhci_hcd: disconnect device [ 75.630834][ T5004] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 75.637415][ T5004] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 75.645607][ T5004] vhci_hcd vhci_hcd.0: Device attached [ 75.656086][ T5005] vhci_hcd: connection closed [ 75.656254][ T41] vhci_hcd: stop threads [ 75.665231][ T41] vhci_hcd: release socket [ 75.669635][ T41] vhci_hcd: disconnect device [ 75.794441][ T5013] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 75.800963][ T5013] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 75.809132][ T5013] vhci_hcd vhci_hcd.0: Device attached [ 75.815207][ T5014] vhci_hcd: connection closed [ 75.815425][ T12] vhci_hcd: stop threads [ 75.824439][ T12] vhci_hcd: release socket [ 75.828845][ T12] vhci_hcd: disconnect device [ 75.883913][ T4997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.892546][ T4997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.032130][ T5018] loop2: detected capacity change from 0 to 512 [ 76.044437][ T5018] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.554: bg 0: block 248: padding at end of block bitmap is not set [ 76.058909][ T5018] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.554: Failed to acquire dquot type 1 [ 76.070876][ T5018] EXT4-fs (loop2): 1 truncate cleaned up [ 76.076870][ T5018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.089595][ T5018] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.163292][ T5026] netlink: 16 bytes leftover after parsing attributes in process `syz.4.557'. [ 76.174195][ T5026] netlink: 'syz.4.557': attribute type 12 has an invalid length. [ 76.175168][ T5027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=5027 comm=yU9O [ 76.268702][ T5033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.558'. [ 76.329037][ T5035] siw: device registration error -23 [ 76.447440][ T5032] loop4: detected capacity change from 0 to 8192 [ 76.547935][ T5037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.556581][ T5037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.722548][ T5043] loop0: detected capacity change from 0 to 8192 [ 76.820454][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.836805][ T3303] ================================================================== [ 76.844906][ T3303] BUG: KCSAN: data-race in set_nlink / set_nlink [ 76.851238][ T3303] [ 76.853552][ T3303] read to 0xffff8881070cc518 of 4 bytes by task 3003 on cpu 0: [ 76.861099][ T3303] set_nlink+0x29/0xb0 [ 76.865170][ T3303] kernfs_iop_permission+0x1e2/0x220 [ 76.870456][ T3303] inode_permission+0x1ca/0x310 [ 76.875316][ T3303] link_path_walk+0x162/0x900 [ 76.880000][ T3303] path_lookupat+0x63/0x2a0 [ 76.884514][ T3303] filename_lookup+0x147/0x340 [ 76.889283][ T3303] vfs_statx+0x9d/0x390 [ 76.893455][ T3303] vfs_fstatat+0x115/0x170 [ 76.897892][ T3303] __se_sys_newfstatat+0x55/0x260 [ 76.903009][ T3303] __x64_sys_newfstatat+0x55/0x70 [ 76.908039][ T3303] x64_sys_call+0x135a/0x3000 [ 76.912709][ T3303] do_syscall_64+0xd2/0x200 [ 76.917206][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.923094][ T3303] [ 76.925407][ T3303] write to 0xffff8881070cc518 of 4 bytes by task 3303 on cpu 1: [ 76.933021][ T3303] set_nlink+0x99/0xb0 [ 76.937093][ T3303] kernfs_iop_permission+0x1e2/0x220 [ 76.942384][ T3303] inode_permission+0x1ca/0x310 [ 76.947283][ T3303] link_path_walk+0x162/0x900 [ 76.951964][ T3303] path_openat+0x1de/0x2170 [ 76.956464][ T3303] do_filp_open+0x109/0x230 [ 76.960965][ T3303] do_sys_openat2+0xa6/0x110 [ 76.965550][ T3303] __x64_sys_openat+0xf2/0x120 [ 76.970314][ T3303] x64_sys_call+0x2eab/0x3000 [ 76.974984][ T3303] do_syscall_64+0xd2/0x200 [ 76.979485][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.985371][ T3303] [ 76.987679][ T3303] value changed: 0x00000009 -> 0x00000008 [ 76.993386][ T3303] [ 76.995695][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 77.001833][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.011119][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 77.021218][ T3303] ==================================================================