last executing test programs: 8m26.268262531s ago: executing program 4 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000080)={0x8, 'ip6erspan0\x00', {'bridge_slave_0\x00'}, 0x6}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x3, 0x3}, 0x180, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c00000000", @ANYRES32], 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0001f400"}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0xf00, 0xf00, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x3, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xfe}, {}, {0x6}, {0x2, 0x3, 0x8}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x40040c0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 8m26.044937625s ago: executing program 4 (id=691): r0 = socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'veth0_macvtap\x00', {0x9}, 0xb85}) sched_setscheduler(0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x204000) removexattr(&(0x7f00000004c0)='./file0\x00', 0x0) r1 = io_uring_setup(0xfc6, &(0x7f00000002c0)={0x0, 0x6c02, 0x0, 0x0, 0x20000004}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 8m25.876767499s ago: executing program 4 (id=695): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r3}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r1, 0x1}}, 0x18) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) (async) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x143a82, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="8004", 0x2}], 0x2, 0x0, 0x0, 0x2663}, 0x4080) (async) keyctl$get_keyring_id(0x0, 0x0, 0x8) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kmem_cache_free\x00', r9}, 0x18) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r8}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) (async) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x69c2, 0x3ff}, 0x0, 0x9, 0x0, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 64) stat(0x0, 0x0) 8m25.8492763s ago: executing program 4 (id=698): close(0xffffffffffffffff) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x406) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000080)) r1 = socket$unix(0x1, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000680)={{r3, 0x7, 0x5, 0x4, 0x300000000000000, 0x8, 0x3, 0x6, 0x7, 0x3, 0x2, 0x4, 0x3, 0xe, 0x4}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) unshare(0x22020600) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x23d5, 0x0, 0x2, 0x10000, 0x9, r5}) connect$unix(r1, &(0x7f0000000000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) 8m24.972790486s ago: executing program 4 (id=717): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x101d1d, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x400020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf250300090080e2ffff01000000000000006960e56de42944af05000600000000000a0000000000000000000000000000000000000000000001090000040000000002000100000000000000070c1700000005000500000000000a000000000000000000000000763dd3b6e4345dfb0000010700003ae119c05ac682ce8eb1b53632c3b447fc264213582618daa0d872a62fcc182e5df61917fb3968846428a4b35d38e068a7622155e85dd477eb50f218b4d8c19697ffffffff782f862c5f746b77e89688736c75178e2ea9ff5266b642193327bd"], 0x88}, 0x1, 0x7}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x18, 0x66, 0x8, 0x5, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_address={0x3, 0x7, 0x3c, 0xc0, 0x0, @in={0x2, 0x4e21, @rand_addr=0x64010100}}]}, 0x28}}, 0xc004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) close_range(r5, r3, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) r9 = socket(0x18, 0x800, 0x0) connect$pppoe(r9, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0xfff9}, {0x10, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x70, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x46, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b0470582e"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x7fff}}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x8, 0x1}, 0x28) pipe2$9p(&(0x7f00000001c0), 0x0) 8m24.824940239s ago: executing program 4 (id=720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "0000000400", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "f6b517b290a5ebaf"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r1, r2, 0x6040000) 8m24.80911656s ago: executing program 32 (id=720): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "0000000400", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "f6b517b290a5ebaf"}, 0x28) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r1, r2, 0x6040000) 4m54.428973789s ago: executing program 5 (id=4328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x4092}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) lstat(&(0x7f0000000440)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000300)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18) r8 = memfd_secret(0x80000) fcntl$setlease(r8, 0x400, 0x0) close(r8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000c000000000000000600040018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x9f) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 4m54.40021747s ago: executing program 5 (id=4329): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4092}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 4m54.329640731s ago: executing program 5 (id=4332): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 4m53.995999508s ago: executing program 5 (id=4341): socketpair(0x9, 0x80003, 0x9, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'xfrm0\x00'}) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000380)={[{@stripe={'stripe', 0x3d, 0x6}}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") r2 = openat(r1, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x40, @vifc_lcl_ifindex, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f00000000c0)={0x17c04, r1, 0x2, 0xfff, 0x6, 0x9}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r6, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c702f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153c8df10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f2d3ce9c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac8326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189", 0xb3}, {&(0x7f0000000000)="9eb8a2c0e241fb0402ac8d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad7a3db73f4f12d0728bada715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c73e7017cf0fe0275d2d6f9531b12f12e29b903f30c3228aa9ab3a503e9512", 0xbd}], 0x2, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)="96f5", 0x578}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x1ec, 0x11, 0x20, 0x70bd2c, 0x25dfdbfb, {0x7}, [@generic="98afda846bcfecf2fb93702128334d7f4085e32c05c30e35645709963451df8661a2027e49d7a43b8ca245436326472a1ce7a2b4ca512b22d5535fe07109e0eaf53fb1f04cc2af0f6b89adeca9daa6358f2d32df120883438d546c3ef8d07ece490178f4f07c625fa565b9", @nested={0x10b, 0x87, 0x0, 0x1, [@typed={0xe0, 0x2f, 0x0, 0x0, @binary="b76f331f32f929ecc870f21fd979b5d012bac6b12b7d5dc44c52ad20ca831b4fa45a8daede63aadf59dcf6d90dd3a9519bb9d77f9bed8ed13a16ffe793fc9c8717fd2e591c0cd3dfd2977795de35e3f2ad29c9202703d763ff40f2cff939bf2a2bf0eddbf0ce3e57c704f4b820a284baee14d1c8d2eaefc084a4c18c6d9e041387f1ee0878681215fe7c602639dd04ff8d2d32aa9dadb19fe8861a655017c2da639f02bafd3828405437cad68bffcf7658446d4718bdb055e2a56b0af267c74b903b12af92c28d909aaf2f4865fd57295132d0c75419f5475ec57cc4"}, @nested={0x4, 0xc6}, @generic="0a950365775e9bba73ad01a4d696eca48999b371e20de823600011", @typed={0x6, 0x137, 0x0, 0x0, @str='&\x00'}]}, @typed={0xc, 0x50, 0x0, 0x0, @u64=0x7}, @generic="c51df3cf68c745be37a1786bf7ba8b91d2898e52843832b8af2af6178e329c38c1c4397ae6140bd4e225922b5221ad029e28efb50cd6d60555d51e2ca919672cbb3961fa65ebe48c97d83f4653be422ff2cbc69fbb"]}, 0x1ec}, 0x1, 0x0, 0x0, 0x10048000}, 0x4048010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) ptrace$pokeuser(0x6, r4, 0x358, 0x0) 4m53.774958022s ago: executing program 5 (id=4346): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) gettid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 4m49.956557386s ago: executing program 5 (id=4468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000214e50810e8eae8314643972e3b8487808c40c3e84f9e27aa6f2a29ab36159e258", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000", @ANYRES32=r1, @ANYRES32=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000300)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) inotify_init() bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000785ceb2500000000002020207b1af8ff00000000bfa100000400000007010000f8ffffffb702000008000000b703000000000000850000002d000000955cb9f4831dcc95cf28e0a3af158067cdc5b4596115f7036c7bd0751c505114d644"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r8, 0x2007ffc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r8, r8, 0x0, 0x800000009) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 4m49.956048806s ago: executing program 33 (id=4468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000214e50810e8eae8314643972e3b8487808c40c3e84f9e27aa6f2a29ab36159e258", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000", @ANYRES32=r1, @ANYRES32=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000300)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) inotify_init() bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000785ceb2500000000002020207b1af8ff00000000bfa100000400000007010000f8ffffffb702000008000000b703000000000000850000002d000000955cb9f4831dcc95cf28e0a3af158067cdc5b4596115f7036c7bd0751c505114d644"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) prctl$PR_GET_FPEMU(0x42, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r3, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r8, 0x2007ffc) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r8, r8, 0x0, 0x800000009) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 2m14.066276612s ago: executing program 6 (id=8263): bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYRES16=0x0], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372000000001400010076657468315f766c616e"], 0xfc}}, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x6, 0xc6, 0xc, 0xf8, 0x0, 0x381, 0x46094, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_config_ext={0xd, 0x100000001}, 0x0, 0xb697, 0x6, 0x4, 0xffffffffffffffff, 0x3, 0x7fff, 0x0, 0x8, 0x0, 0xc}, r3, 0x6, 0xffffffffffffffff, 0x2) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, 0x5c) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11ff0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b95fdfe55ee3b1f3b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x2006, 0x7fc}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000700)={'filter\x00', 0x4}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000001a40)=ANY=[@ANYRES64=r1, @ANYBLOB="cccbae1c02a485429735c60b50e0d5854b0df504f3db278d0df373e7af5ce6ad88332d7aac9b1835", @ANYRES16=r7, @ANYRES32, @ANYRESOCT=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000001ac0)='ext4_free_inode\x00', r8}, 0x18) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000040000000800000001"], 0x48) unshare(0x28040680) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r9}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40283) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f00000001c0)=ANY=[]) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="011f7ea8d49309a5eb881edce8b35ecd386db7e7935f4763caa8c620a1934e70488dd310b8d73b2df206974bfd68ac802e6c5820bb7a336604541e55cfaa5aeab549f2e15dd9fcfac922836c432f76cf2395b477d3cf9125b925dca3a18aef07ff31637858b7a054e484bffcad24bf68e8b9b7f94f5260a4d54505d8c23ad02ee425892099dfa6a72436a56db1e44681c853a75227c2032c06c9d2a3aab3e11dd1602669eccb9fdc9c869769ad0d6941f240effb95e9f4401bfa179c5cee98ed8563833a76b7508906198138942f1c0c82a1c53dffdd51fb74780aaad36193e04d8a99756986032fccb3c251db93e90e48d657ae7e2917cc2a72700e85", 0xfd}, {&(0x7f0000000140)="b391e121db2440c4134339353fb6", 0xe}, {&(0x7f0000000340)="4fc0b90f84ee6098b77356a656e9d5f195252b355d8d60808ffe529a35567d8338a4483296fdad1fe2a3dc229d096d86bca9befcdfefe22018c57aff584be6bebf77ab8d3606f32b58ecfc19b0d04fb9d9b4887791f389ca834ef6e08f671384b2c375e58f3fbfc1b1192412d27acc66c82517ba94f5de3f6066057300a6be635c50a5d8432df24f45d919d7c756973eb3253d983411c0bfe5d38a137c61dcc16b3d3a78ab65f51301484ed5bc9bf7cf3e1dcee0e626518e71396152c94eec696aa72ddce33ee6deec9d3142c1ecc1186997dfcabdecbcb0dfa4196a6a38f87f31a4d86cc0e1bbcaf527fab1a3f8604d1742", 0xf2}, {&(0x7f0000000440)="c5fee67f50b336e609615c3a8e0bed67ce7a42f3ea6a459e9c59a0488ccd3810be8776735c38709b528f11d27fed7c2122bba302f43d7adbd0edad189ee5838854b2d7c16bffc178de72f21a3e4644582c68394460eac2f3564c053c674c3e97dbf27c4934d5af787d09bc71c047e7bef5be3290a3f08a2effb0a158c37b4d20bc31c658fd178dbe53a839bee8e192eefafa335db636b0ceea5b08563eae7ed53ef714d2b21c494d97792df22af8", 0xae}, {&(0x7f0000000600)="cae59b8974140284610d24e396f119ff4a79d3fdf673942583b186386d20408afc97944afc9c22f73312f28a410d828a631c83594f168842b415bfbbbfa1cdeaf38682834fcd4b880a59a59a90a40b9d7d41615fd4081be4eb", 0x59}], 0x5, &(0x7f0000000800)=[{0xb8, 0x88, 0x5, "ced48fc5df7405c23df1d593c42c7f9a61aa1efb66858caa890c3300801d2f99047c9f1aaa48e8747f50ee6f6554d0d063e919c405c61d0f9a557e2447cff1cadc879204d33c1a6a841d40ab7379a0a13f27499cc6f677d02df874aaefa0db2c994d6f9ee29cf6a4751e754e31e23e25e1ab83e845a1f6124acddb1469351fb4972bd965e37ce4c081d01a13f8d8b58ffcb4a81b7f01cbe485c86a4f01cfcbcd19"}, {0x38, 0x109, 0x8, "4d349269037b160913d09ac82530d8c1fc93f70fc8ee618b4bd79ef201161fc95cfd99"}, {0x88, 0x107, 0xee, "daa8f59d31176c2081683afc54f3b28da9d9590c96cc2e28497597df133c0a00b17e8ab03491a313b42abe0cf2bee2b97d52335f6d76f0bb3df96c0d51e80123cfc131f66f408623c288924550499746bc13a59a8799d2fcfbd1bf83b4a9553a1ae496600673c9c4363007d839cbd5993cfe75fb05"}, {0x1010, 0x13f, 0x8, "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"}, {0x58, 0x40, 0x80000001, "186eedc9228955eb36c3922e266aa40472f33c300049e49c6c160a79d469faf7c095d6e3714cffb14cfa04ddf09416464ccb38e0c2064175dc051b7e0a0202f083d73c"}], 0x11e0}, 0x20008050) 2m13.952194194s ago: executing program 6 (id=8264): socket$packet(0x11, 0x3, 0x300) creat(&(0x7f00000000c0)='./file0\x00', 0x43) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fadvise64(r1, 0x9, 0xc729, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r2, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000400)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r2, r2, 0x0) 2m13.882982465s ago: executing program 6 (id=8266): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x2a) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) 2m13.852738576s ago: executing program 6 (id=8267): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x52, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) vmsplice(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r7 = creat(&(0x7f0000000080)='./file1\x00', 0x110) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x484, &(0x7f0000000100)={0x21, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x4, 'nq\x00', 0x5, 0x5, 0x30}, 0x2c) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r6, 0x0, 0xbf5, 0x2000402) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000023c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x80, 0x3, 0x4, 0x0, 0x0, 0x6, 0x20202, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x100000001, 0x400}, 0x5010, 0x102, 0x9, 0x5, 0x8, 0x100, 0x9, 0x0, 0x200, 0x0, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8946, &(0x7f0000000080)) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000240)={0x2, 0x80}) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0xc, r6, 0xffffffe4, 0x0, 0x0, 0xfffffffffdffffff}) 2m13.65049393s ago: executing program 6 (id=8273): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x2301) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000180)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) 2m13.211046818s ago: executing program 6 (id=8281): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000000)={0x2000000000002000, 0x1, 0x53, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b0, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0x0, 0x9e1, 0x0, 0x802}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000002, 0x2, 0x0, 0x5, 0x4, 0x80000001, 0x7fffffffffffffff}, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) 2m13.186913529s ago: executing program 34 (id=8281): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000000)={0x2000000000002000, 0x1, 0x53, 0x5}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b0, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x300, 0x3, 0x0, 0x9e1, 0x0, 0x802}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1000000000002, 0x2, 0x0, 0x5, 0x4, 0x80000001, 0x7fffffffffffffff}, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) 1m33.735259289s ago: executing program 3 (id=9167): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000008e40)=[{{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002d00)="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", 0x6c1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000006a80)=[{0x10, 0x119, 0x6}, {0x18, 0x1, 0x1, "a2c1f16fcda7"}], 0x28}}], 0x2, 0x20000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x0, 0x1ff, 0x10100000}) 1m33.733125689s ago: executing program 3 (id=9169): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4092}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) lstat(&(0x7f0000000440)='./file0\x00', 0x0) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m33.71781321s ago: executing program 3 (id=9171): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x3) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee01}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x158, r2, 0x900, 0x70bd2c, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}]}, 0x158}, 0x1, 0x0, 0x0, 0x1}, 0x40000) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1m33.292979878s ago: executing program 3 (id=9175): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000040040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030010850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000500), 0x1, 0x4f8, &(0x7f0000001900)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/28], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES8=r1, @ANYRESOCT=r5, @ANYRESDEC=r2, @ANYRESOCT=r3, @ANYRES64=r2, @ANYRESHEX=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r6}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r7}, 0x8) write$cgroup_int(r8, &(0x7f00000001c0), 0xfffffdef) ioctl$TUNSETOFFLOAD(r8, 0x541b, 0x4000000000000000) r9 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES8=r9, @ANYRES32=r4, @ANYRESOCT], &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x44, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r11}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYRES8=r12], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r13}, 0x18) r14 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r14, 0x0, 0x0, 0x4008804) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) open(0x0, 0x66842, 0x21) r15 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r15, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x1, 0x0) 1m32.899100476s ago: executing program 3 (id=9181): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4092}, 0x18) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) lstat(&(0x7f0000000440)='./file0\x00', 0x0) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m31.746413598s ago: executing program 3 (id=9198): r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m31.746117638s ago: executing program 35 (id=9198): r0 = gettid() process_vm_writev(r0, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.135985428s ago: executing program 8 (id=10750): acct(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 2.135497149s ago: executing program 8 (id=10751): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000040000"], 0x39) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}}, 0x24}}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) unshare(0x24060400) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') bind$bt_sco(r2, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2da46d8347a6de4c4ef6d820c79ef4d95aec6f2c3cf29b24add008a8375f0c3d446d094ef791620e3013906350558495a4255af5695cc962310321a7004b802d6f79a44e7", 0x46}], 0x1) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/70, 0x46}], 0x1}, 0x4c2103a0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 2.111063179s ago: executing program 8 (id=10752): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./bus\x00', 0x1000848, &(0x7f0000000080)=ANY=[], 0x1, 0x358, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x401c2, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1.994032621s ago: executing program 1 (id=10753): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = gettid() socket$kcm(0x21, 0x2, 0xa) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5, r0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) unshare(0x2040400) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netfs_failure\x00', r4, 0x0, 0x1ffd}, 0x18) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x0) 1.934284203s ago: executing program 8 (id=10754): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x3000042, &(0x7f00000000c0), 0x82, 0x58f, &(0x7f0000000b00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x24, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) 1.862954744s ago: executing program 8 (id=10756): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000)=0x20000004, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xa86, 0x0) 1.833387074s ago: executing program 8 (id=10758): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00', @ANYRES16=r3, @ANYBLOB="01005ee1fadefcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1.812611134s ago: executing program 0 (id=10759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d7132a40d119ad9a2333aebe4df8d5ddd6662eba258f645635fb1f6291e387490f85e9880101500000000050000007e2fa943a8b3d216342f1576c2f7496f819c49cb7d922a5d99a4d1578c217c0000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xf, &(0x7f0000001140)={@mcast2, 0x0}, &(0x7f0000001180)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001280)={'syztnl2\x00', &(0x7f00000011c0)={'syztnl0\x00', r4, 0x10, 0x700, 0x40, 0xfffffffc, {{0x27, 0x4, 0x1, 0x2, 0x9c, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0x59, 0xffffffffffffffff, [{0x7, 0x6, "f179d241"}, {0x0, 0x8, "ac8abd7f9457"}, {0x6, 0x8, "ce3f55b287df"}, {0x5, 0x11, "714001465f7ad10dbb8397b7ce6f55"}, {0x5, 0x10, "dc859a2ada3bd7c7f5179443ced5"}, {0x1, 0x11, "3880d7668723165a99108dbf6d880e"}, {0x5, 0x2}, {0x6, 0x9, "0ed170819077f3"}]}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x63, [@empty, @loopback, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x35}, @local]}, @ssrr={0x89, 0xf, 0x6a, [@multicast2, @multicast2, @broadcast]}, @noop]}}}}}) syz_read_part_table(0x1047, &(0x7f0000000000)="$eJzsz8GpAjEUhtE/mRfejCsrECuwG/txoc3YZEQmgwvXIsI5m4Tkg8sNX1VT9/nLlKWvptOc1GV8955kt7X/JUl5Vjm0kRzbdZrX62V0pb4NeZ311rbnkvP9k7sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK94BAAA//9SmRBk") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3000000, &(0x7f0000000000)={[{@nobarrier}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x1, 0x527, &(0x7f0000000300)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 1.458650912s ago: executing program 1 (id=10764): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = gettid() socket$kcm(0x21, 0x2, 0xa) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5, r0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) unshare(0x2040400) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netfs_failure\x00', r5, 0x0, 0x1ffd}, 0x18) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r6, 0xffffffffffffffff, 0x200000000000000) fsmount(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x0) 1.423953052s ago: executing program 2 (id=10765): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="9f020000001e0000c204000000070708000000000008fa00"], 0x18) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 1.421643402s ago: executing program 0 (id=10766): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x2, &(0x7f0000000000)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r2, &(0x7f0000000000)='.\x00', 0x0) 751.287626ms ago: executing program 1 (id=10773): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, 0x0, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) 642.087178ms ago: executing program 1 (id=10774): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = gettid() socket$kcm(0x21, 0x2, 0xa) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5, r0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) unshare(0x2040400) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netfs_failure\x00', r4, 0x0, 0x1ffd}, 0x18) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x24}}, 0x0) 601.019589ms ago: executing program 2 (id=10775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000040000"], 0x39) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}}, 0x24}}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) unshare(0x24060400) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') bind$bt_sco(r2, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2da46d8347a6de4c4ef6d820c79ef4d95aec6f2c3cf29b24add008a8375f0c3d446d094ef791620e3013906350558495a4255af5695cc962310321a7004b802d6f79a44e7", 0x46}], 0x1) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/70, 0x46}], 0x1}, 0x4c2103a0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 579.216849ms ago: executing program 2 (id=10776): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000800000000000000040000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5121b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a0100000000000000e28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c251112e2a59ea0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe91bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6c597eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e64103602000000db47d7990d5a007faccb2f86660079f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab2127cd472a2e4a7f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d8418351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000007c0)="cb1db739fdccdc84f31066bc43b4a7ba158f9e55376518f303729030d1cd5ca0d5d6ac0e6a4d9307d5dbdf1809", 0x2d}], 0x1}}], 0x2, 0x28048005) writev(r0, &(0x7f00000037c0)=[{&(0x7f00000036c0)="7d29dbe640bf91367e7f68f8", 0xc}], 0x1) 561.923339ms ago: executing program 2 (id=10777): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) sync() r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {r2}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}) 516.5176ms ago: executing program 0 (id=10779): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 447.253512ms ago: executing program 2 (id=10781): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000007c0)="cb1db739fdccdc84f31066bc43b4a7ba158f9e55376518f303729030d1cd5ca0d5d6ac0e6a4d9307d5dbdf180955f6799e63729f6e0bfb6eea705400dc4b924157d8f9", 0x43}], 0x1}}], 0x2, 0x28048005) writev(r0, &(0x7f00000037c0)=[{&(0x7f00000036c0)="7d29dbe640bf91367e7f68f8", 0xc}], 0x1) 446.490892ms ago: executing program 0 (id=10782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4092}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b000000"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 403.165792ms ago: executing program 2 (id=10784): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="9f020000001e0000c204000000070708000000000008fa00"], 0x18) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 376.575473ms ago: executing program 0 (id=10785): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, 0x0, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) 291.298085ms ago: executing program 0 (id=10786): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000010"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="9f020000001e0000c204000000070708000000000008fa00"], 0x18) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 242.446226ms ago: executing program 7 (id=10788): r0 = socket$inet6(0xa, 0x2, 0x0) writev(r0, &(0x7f00000037c0)=[{&(0x7f00000036c0)="7d29dbe640bf91367e7f68f8", 0xc}], 0x1) 188.802676ms ago: executing program 7 (id=10789): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r4, 0x0) 132.009098ms ago: executing program 7 (id=10790): unshare(0x20020000) unshare(0x2c020400) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x88000) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x11, 0x141002) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) close(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x418442, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x22, &(0x7f0000000680)=@raw=[@ldst={0x1, 0x0, 0x2, 0x9, 0x8, 0xfffffffffffffffc, 0x4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0xc2}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfbba, 0x0, 0xfffffffe, 0x3}, &(0x7f0000000480), &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r7}, 0x18) r8 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x50010, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x2a, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r8, 0x0) r9 = msgget(0x0, 0x366) msgctl$IPC_RMID(r9, 0x0) 118.504528ms ago: executing program 1 (id=10791): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) (fail_nth: 6) 48.455739ms ago: executing program 1 (id=10792): sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x20, 0x4, 0xa, 0xa06, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x44090}, 0x44080) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xb, 0x42032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRES32=r3], 0x28}}], 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_DEFRAGMENT(r1, 0xc010f508, &(0x7f0000000380)={0x6, 0x10000}) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r7, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa048ac44c63ed287a665f2c34b9e2278e78a", 0x48) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7fffeffd) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r6, &(0x7f0000001100)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2030000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00001400f2800400b3800400378008001c00", @ANYRES32=r0, @ANYBLOB="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"], 0x42c}, 0x1, 0x0, 0x0, 0x894}, 0x40040) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x17, 0xc, &(0x7f00000009c0)=ANY=[@ANYRES64=r1, @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRESDEC=r5], 0x0, 0x7a, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @cgroup_sysctl=0x12, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x200001f0, &(0x7f0000000440)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', r9, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r10, 0x0, 0xfffffffffffffffc}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) sendto$inet6(r8, &(0x7f00000004c0)="a4cbea5da222be985ed2", 0xa, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @loopback, 0xffffffff}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000600080000000100000080000000d8d12a8f2215731b7fe12461ef92898e19a2544dcca2bd6b299161d24ba2b281f1d0bf4db3d5ac8d9bebb3a8eb439e69a2d24ccb8fd8288c87e7aaaff1c221d2c2e30ae88b071c4ce448111b0f6e390b15179c6e926b35c54c3a696343b33a3b9a7c82bc2a057adaeea51bf7ae38d6150a798b8db5c6021ef698e17e610be53d298e5d4abcf67d82bf0cbea0ec9a5a7c53c7b176a7a31b372b895701f5bc7f", @ANYRES32=0x1, @ANYBLOB='z\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500"/28], 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x6, 0x5, 0x40, @empty, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x700, 0x80, 0x7, 0xffffff3e}}) 35.265969ms ago: executing program 7 (id=10793): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}}, 0x24}}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) unshare(0x24060400) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') bind$bt_sco(r2, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2da46d8347a6de4c4ef6d820c79ef4d95aec6f2c3cf29b24add008a8375f0c3d446d094ef791620e3013906350558495a4255af5695cc962310321a7004b802d6f79a44e7", 0x46}], 0x1) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/70, 0x46}], 0x1}, 0x4c2103a0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) 16.44672ms ago: executing program 7 (id=10794): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000007c0)="cb1db739fdccdc84f31066bc43b4a7ba158f9e55376518f303729030d1cd5ca0d5d6ac0e6a4d9307d5dbdf180955f6799e63729f6e0bfb6e", 0x38}], 0x1}}], 0x2, 0x28048005) writev(r0, &(0x7f00000037c0)=[{&(0x7f00000036c0)="7d29dbe640bf91367e7f68f8", 0xc}], 0x1) 0s ago: executing program 7 (id=10795): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000000)=0x7, 0x4) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): 474] R13: 00007f9ea6296038 R14: 00007f9ea6295fa0 R15: 00007ffc8e0e0878 [ 550.843846][T31474] [ 550.843933][T31474] syzkaller0: refused to change device tx_queue_len [ 550.848410][T31472] FAT-fs (loop1): Directory bread(block 65) failed [ 551.114225][T31472] FAT-fs (loop1): Directory bread(block 66) failed [ 551.122162][T31472] FAT-fs (loop1): Directory bread(block 67) failed [ 551.129753][T31472] FAT-fs (loop1): Directory bread(block 68) failed [ 551.136504][T31472] FAT-fs (loop1): Directory bread(block 69) failed [ 551.143355][T31472] FAT-fs (loop1): Directory bread(block 70) failed [ 551.150174][T31472] FAT-fs (loop1): Directory bread(block 71) failed [ 551.156914][T31472] FAT-fs (loop1): Directory bread(block 72) failed [ 551.163701][T31472] FAT-fs (loop1): Directory bread(block 73) failed [ 551.262772][T31488] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 551.270282][T31488] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 551.378638][ T9] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 551.386677][ T9] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 551.496820][T31503] ref_ctr increment failed for inode: 0x836 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e5c00 [ 551.519203][T31502] uprobe: syz.7.10096:31502 failed to unregister, leaking uprobe [ 551.617518][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 551.617538][ T29] audit: type=1326 audit(575.534:48384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31499 comm="syz.1.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 551.672158][ T29] audit: type=1326 audit(575.565:48385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31499 comm="syz.1.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 551.695300][ T29] audit: type=1326 audit(575.565:48386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31499 comm="syz.1.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 551.717317][T31509] loop7: detected capacity change from 0 to 256 [ 551.718414][ T29] audit: type=1326 audit(575.565:48387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31499 comm="syz.1.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 551.747759][ T29] audit: type=1326 audit(575.565:48388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31499 comm="syz.1.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 551.766551][T31509] FAT-fs (loop7): Directory bread(block 64) failed [ 551.770897][ T29] audit: type=1326 audit(575.565:48389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31499 comm="syz.1.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 551.800535][ T29] audit: type=1326 audit(575.565:48390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31499 comm="syz.1.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 551.806729][T31509] FAT-fs (loop7): Directory bread(block 65) failed [ 551.823737][ T29] audit: type=1326 audit(575.565:48391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31499 comm="syz.1.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 551.853395][ T29] audit: type=1326 audit(575.565:48392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31499 comm="syz.1.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 551.876376][ T29] audit: type=1326 audit(575.565:48393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31499 comm="syz.1.10095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 551.876594][T31509] FAT-fs (loop7): Directory bread(block 66) failed [ 551.906510][T31509] FAT-fs (loop7): Directory bread(block 67) failed [ 551.913183][T31509] FAT-fs (loop7): Directory bread(block 68) failed [ 551.919707][T31509] FAT-fs (loop7): Directory bread(block 69) failed [ 551.926478][T31509] FAT-fs (loop7): Directory bread(block 70) failed [ 551.933080][T31509] FAT-fs (loop7): Directory bread(block 71) failed [ 551.939707][T31509] FAT-fs (loop7): Directory bread(block 72) failed [ 551.946298][T31509] FAT-fs (loop7): Directory bread(block 73) failed [ 551.955114][T31518] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 551.962472][T31518] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 552.252447][T31531] FAULT_INJECTION: forcing a failure. [ 552.252447][T31531] name failslab, interval 1, probability 0, space 0, times 0 [ 552.265326][T31531] CPU: 0 UID: 0 PID: 31531 Comm: syz.7.10107 Not tainted syzkaller #0 PREEMPT(voluntary) [ 552.265437][T31531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 552.265453][T31531] Call Trace: [ 552.265463][T31531] [ 552.265473][T31531] __dump_stack+0x1d/0x30 [ 552.265499][T31531] dump_stack_lvl+0xe8/0x140 [ 552.265582][T31531] dump_stack+0x15/0x1b [ 552.265604][T31531] should_fail_ex+0x265/0x280 [ 552.265627][T31531] ? audit_log_d_path+0x8d/0x150 [ 552.265657][T31531] should_failslab+0x8c/0xb0 [ 552.265710][T31531] __kmalloc_cache_noprof+0x4c/0x320 [ 552.265741][T31531] audit_log_d_path+0x8d/0x150 [ 552.265780][T31531] audit_log_d_path_exe+0x42/0x70 [ 552.265867][T31531] audit_log_task+0x1e9/0x250 [ 552.265904][T31531] audit_seccomp+0x61/0x100 [ 552.265958][T31531] ? __seccomp_filter+0x68c/0x10d0 [ 552.266051][T31531] __seccomp_filter+0x69d/0x10d0 [ 552.266080][T31531] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 552.266123][T31531] ? vfs_write+0x7e8/0x960 [ 552.266202][T31531] ? __rcu_read_unlock+0x4f/0x70 [ 552.266223][T31531] ? __fget_files+0x184/0x1c0 [ 552.266257][T31531] __secure_computing+0x82/0x150 [ 552.266282][T31531] syscall_trace_enter+0xcf/0x1e0 [ 552.266325][T31531] do_syscall_64+0xac/0x200 [ 552.266362][T31531] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 552.266392][T31531] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 552.266456][T31531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.266481][T31531] RIP: 0033:0x7f5016c2ebe9 [ 552.266501][T31531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.266585][T31531] RSP: 002b:00007f5015697038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bb [ 552.266609][T31531] RAX: ffffffffffffffda RBX: 00007f5016e65fa0 RCX: 00007f5016c2ebe9 [ 552.266627][T31531] RDX: 0000000000000009 RSI: 0000000000000005 RDI: ffffffffffffffff [ 552.266640][T31531] RBP: 00007f5015697090 R08: 0000000000000000 R09: 0000000000000000 [ 552.266652][T31531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.266728][T31531] R13: 00007f5016e66038 R14: 00007f5016e65fa0 R15: 00007ffca8eae7f8 [ 552.266753][T31531] [ 552.501726][T31533] ref_ctr increment failed for inode: 0x3e0 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e33c0 [ 552.513163][T31532] uprobe: syz.8.10108:31532 failed to unregister, leaking uprobe [ 552.597351][T31538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.606683][T31538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.704612][T31549] syzkaller0: entered promiscuous mode [ 552.710126][T31549] syzkaller0: entered allmulticast mode [ 552.751517][T31555] 9pnet_fd: Insufficient options for proto=fd [ 553.195199][T31565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.204074][T31565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.231390][T17832] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.246105][T17838] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.254792][T17838] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.265979][ T5376] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.539704][T31583] netlink: 'syz.2.10124': attribute type 1 has an invalid length. [ 553.803891][T31587] 9pnet: Could not find request transport: fd0x0000000000000004 [ 554.263391][ T9] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 554.415878][ T9] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 554.929427][T31610] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10134'. [ 554.939679][T31606] loop1: detected capacity change from 0 to 512 [ 554.979809][T31610] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10134'. [ 555.043282][T31606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.166477][T31615] netlink: 'syz.2.10133': attribute type 1 has an invalid length. [ 555.287651][T31620] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 555.317036][T31620] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 555.336182][T31621] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10132: bg 0: block 361: padding at end of block bitmap is not set [ 555.361839][T31598] siw: device registration error -23 [ 555.418104][T31627] 9pnet: Could not find request transport: fd0x0000000000000004 [ 555.467305][T31629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.475892][T31629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.532286][T31641] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.585659][T31643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10140'. [ 555.595329][T31643] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10140'. [ 555.606944][T31641] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.646880][T31641] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.690782][T28398] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.706617][T31641] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.757724][T17838] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.774243][T17838] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.793121][T31653] netlink: 'syz.7.10144': attribute type 1 has an invalid length. [ 555.802087][T17838] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.831949][T17838] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.729153][T31694] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.770201][T31694] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.784345][T31698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10163'. [ 556.784404][T31697] loop1: detected capacity change from 0 to 128 [ 556.823302][T31698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10163'. [ 556.875681][T31703] 9pnet_fd: p9_fd_create_tcp (31703): problem connecting socket to 127.0.0.1 [ 556.889146][T31694] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.905564][T31707] ref_ctr increment failed for inode: 0x794 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e6d40 [ 556.909245][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 556.909266][ T29] audit: type=1326 audit(581.087:48509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31704 comm="syz.8.10168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea605ebe9 code=0x7ffc0000 [ 556.923503][T31706] uprobe: syz.2.10167:31706 failed to unregister, leaking uprobe [ 556.946009][ T29] audit: type=1326 audit(581.087:48510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31704 comm="syz.8.10168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea605ebe9 code=0x7ffc0000 [ 556.960900][ T29] audit: type=1326 audit(581.098:48511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31704 comm="syz.8.10168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ea605ebe9 code=0x7ffc0000 [ 557.000279][ T29] audit: type=1326 audit(581.098:48512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31704 comm="syz.8.10168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea605ebe9 code=0x7ffc0000 [ 557.023369][ T29] audit: type=1326 audit(581.098:48513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31704 comm="syz.8.10168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea605ebe9 code=0x7ffc0000 [ 557.046576][ T29] audit: type=1326 audit(581.129:48514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31704 comm="syz.8.10168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ea605ebe9 code=0x7ffc0000 [ 557.069914][ T29] audit: type=1326 audit(581.140:48515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31704 comm="syz.8.10168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea605ebe9 code=0x7ffc0000 [ 557.093188][ T29] audit: type=1326 audit(581.140:48516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31704 comm="syz.8.10168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea605ebe9 code=0x7ffc0000 [ 557.116482][ T29] audit: type=1326 audit(581.140:48517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31704 comm="syz.8.10168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9ea605ebe9 code=0x7ffc0000 [ 557.118571][T31713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.139483][ T29] audit: type=1326 audit(581.140:48518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31704 comm="syz.8.10168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ea605ebe9 code=0x7ffc0000 [ 557.148811][T31713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.180084][T31694] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.210603][T31720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.219366][T31720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.238260][T17814] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.264986][T17814] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.273914][T17814] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.282284][T17814] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.359288][T31727] ref_ctr increment failed for inode: 0x894 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e1700 [ 557.370669][T31726] uprobe: syz.7.10172:31726 failed to unregister, leaking uprobe [ 557.485424][T31733] 9pnet_fd: Insufficient options for proto=fd [ 557.564736][T31740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.573497][T31740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.632776][T31747] 9pnet_fd: p9_fd_create_tcp (31747): problem connecting socket to 127.0.0.1 [ 557.748215][T31760] ref_ctr increment failed for inode: 0x44a offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e1cc0 [ 557.763349][T31759] uprobe: syz.8.10184:31759 failed to unregister, leaking uprobe [ 557.776947][T31765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.785786][T31765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.819719][T31752] lo speed is unknown, defaulting to 1000 [ 557.868530][T31774] 9pnet_fd: Insufficient options for proto=fd [ 557.915973][T31779] FAULT_INJECTION: forcing a failure. [ 557.915973][T31779] name failslab, interval 1, probability 0, space 0, times 0 [ 557.928690][T31779] CPU: 0 UID: 0 PID: 31779 Comm: syz.2.10189 Not tainted syzkaller #0 PREEMPT(voluntary) [ 557.928724][T31779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 557.928742][T31779] Call Trace: [ 557.928751][T31779] [ 557.928761][T31779] __dump_stack+0x1d/0x30 [ 557.928786][T31779] dump_stack_lvl+0xe8/0x140 [ 557.928838][T31779] dump_stack+0x15/0x1b [ 557.928860][T31779] should_fail_ex+0x265/0x280 [ 557.928888][T31779] should_failslab+0x8c/0xb0 [ 557.928914][T31779] __kmalloc_noprof+0xa5/0x3e0 [ 557.928971][T31779] ? copy_splice_read+0xc2/0x660 [ 557.928999][T31779] copy_splice_read+0xc2/0x660 [ 557.929030][T31779] ? _parse_integer_limit+0x170/0x190 [ 557.929063][T31779] ? __pfx_copy_splice_read+0x10/0x10 [ 557.929085][T31779] splice_file_to_pipe+0x241/0x3a0 [ 557.929180][T31779] do_splice+0xc4d/0x10b0 [ 557.929213][T31779] ? proc_fail_nth_write+0x13b/0x160 [ 557.929288][T31779] ? __rcu_read_unlock+0x4f/0x70 [ 557.929317][T31779] ? __fget_files+0x184/0x1c0 [ 557.929347][T31779] __se_sys_splice+0x26c/0x3a0 [ 557.929405][T31779] __x64_sys_splice+0x78/0x90 [ 557.929425][T31779] x64_sys_call+0x28a3/0x2ff0 [ 557.929446][T31779] do_syscall_64+0xd2/0x200 [ 557.929481][T31779] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 557.929592][T31779] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 557.929626][T31779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.929738][T31779] RIP: 0033:0x7f748d43ebe9 [ 557.929886][T31779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.929903][T31779] RSP: 002b:00007f748be9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 557.929925][T31779] RAX: ffffffffffffffda RBX: 00007f748d675fa0 RCX: 00007f748d43ebe9 [ 557.929942][T31779] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 000000000000000a [ 557.930024][T31779] RBP: 00007f748be9f090 R08: 0000000000000003 R09: 000000000000000b [ 557.930039][T31779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.930056][T31779] R13: 00007f748d676038 R14: 00007f748d675fa0 R15: 00007ffcd99a3a28 [ 557.930079][T31779] [ 558.156631][T31777] lo speed is unknown, defaulting to 1000 [ 558.201292][T31786] $Hÿ: renamed from bond0 (while UP) [ 558.207125][T31786] FAULT_INJECTION: forcing a failure. [ 558.207125][T31786] name failslab, interval 1, probability 0, space 0, times 0 [ 558.219870][T31786] CPU: 0 UID: 0 PID: 31786 Comm: syz.2.10192 Not tainted syzkaller #0 PREEMPT(voluntary) [ 558.219904][T31786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.219919][T31786] Call Trace: [ 558.219927][T31786] [ 558.219937][T31786] __dump_stack+0x1d/0x30 [ 558.219964][T31786] dump_stack_lvl+0xe8/0x140 [ 558.220111][T31786] dump_stack+0x15/0x1b [ 558.220129][T31786] should_fail_ex+0x265/0x280 [ 558.220151][T31786] ? kobject_uevent_env+0x1c0/0x570 [ 558.220173][T31786] should_failslab+0x8c/0xb0 [ 558.220297][T31786] __kmalloc_cache_noprof+0x4c/0x320 [ 558.220334][T31786] kobject_uevent_env+0x1c0/0x570 [ 558.220360][T31786] kobject_rename+0x2d6/0x350 [ 558.220420][T31786] ? sysfs_rename_link_ns+0x106/0x120 [ 558.220459][T31786] device_rename+0x11f/0x180 [ 558.220570][T31786] netif_change_name+0x1eb/0x6b0 [ 558.220603][T31786] ? nla_strscpy+0xec/0x120 [ 558.220634][T31786] do_setlink+0x80b/0x2810 [ 558.220703][T31786] ? selinux_capable+0x31/0x40 [ 558.220733][T31786] ? security_capable+0x83/0x90 [ 558.220764][T31786] ? ns_capable+0x7d/0xb0 [ 558.220867][T31786] ? netlink_ns_capable+0x86/0xa0 [ 558.220964][T31786] rtnl_newlink+0xe75/0x12d0 [ 558.221083][T31786] ? xas_load+0x413/0x430 [ 558.221117][T31786] ? xas_load+0x413/0x430 [ 558.221146][T31786] ? __memcg_slab_free_hook+0x135/0x230 [ 558.221215][T31786] ? __rcu_read_unlock+0x4f/0x70 [ 558.221319][T31786] ? avc_has_perm_noaudit+0x1b1/0x200 [ 558.221420][T31786] ? cred_has_capability+0x210/0x280 [ 558.221447][T31786] ? selinux_capable+0x31/0x40 [ 558.221483][T31786] ? security_capable+0x83/0x90 [ 558.221513][T31786] ? ns_capable+0x7d/0xb0 [ 558.221565][T31786] ? __pfx_rtnl_newlink+0x10/0x10 [ 558.221659][T31786] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 558.221700][T31786] netlink_rcv_skb+0x120/0x220 [ 558.221727][T31786] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 558.221846][T31786] rtnetlink_rcv+0x1c/0x30 [ 558.221871][T31786] netlink_unicast+0x5c0/0x690 [ 558.221892][T31786] netlink_sendmsg+0x58b/0x6b0 [ 558.221987][T31786] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.222037][T31786] __sock_sendmsg+0x142/0x180 [ 558.222071][T31786] ____sys_sendmsg+0x31e/0x4e0 [ 558.222135][T31786] ___sys_sendmsg+0x17b/0x1d0 [ 558.222179][T31786] __x64_sys_sendmsg+0xd4/0x160 [ 558.222212][T31786] x64_sys_call+0x191e/0x2ff0 [ 558.222240][T31786] do_syscall_64+0xd2/0x200 [ 558.222276][T31786] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 558.222302][T31786] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 558.222328][T31786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.222407][T31786] RIP: 0033:0x7f748d43ebe9 [ 558.222428][T31786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.222451][T31786] RSP: 002b:00007f748be9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.222476][T31786] RAX: ffffffffffffffda RBX: 00007f748d675fa0 RCX: 00007f748d43ebe9 [ 558.222489][T31786] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 558.222532][T31786] RBP: 00007f748be9f090 R08: 0000000000000000 R09: 0000000000000000 [ 558.222607][T31786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 558.222619][T31786] R13: 00007f748d676038 R14: 00007f748d675fa0 R15: 00007ffcd99a3a28 [ 558.222639][T31786] [ 558.224984][T31786] $Hÿ: entered promiscuous mode [ 558.327423][T31784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10191'. [ 558.327762][T31786] bond_slave_0: entered promiscuous mode [ 558.567580][T31786] bond_slave_1: entered promiscuous mode [ 558.599570][T31793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.610448][T31793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.641063][T31802] program syz.0.10196 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 558.679887][T31807] ref_ctr increment failed for inode: 0x40b offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e7300 [ 558.682713][T11476] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 558.698874][T31805] uprobe: syz.0.10198:31805 failed to unregister, leaking uprobe [ 558.732068][T11476] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 558.756383][T31811] loop1: detected capacity change from 0 to 512 [ 558.769215][T31811] ext4: Unknown parameter '"yzkaller0' [ 558.850869][T31819] ref_ctr increment failed for inode: 0x477 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e1700 [ 558.870988][T31818] uprobe: syz.1.10205:31818 failed to unregister, leaking uprobe [ 558.971341][T31804] siw: device registration error -23 [ 559.005168][T31831] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10209'. [ 559.127337][ T8099] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 559.135605][ T8099] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 559.436610][T31855] loop7: detected capacity change from 0 to 256 [ 559.446128][T31856] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 559.480334][T31856] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 559.502333][T31855] FAT-fs (loop7): Directory bread(block 64) failed [ 559.522671][T31855] FAT-fs (loop7): Directory bread(block 65) failed [ 559.570141][T31855] FAT-fs (loop7): Directory bread(block 66) failed [ 559.618099][T31855] FAT-fs (loop7): Directory bread(block 67) failed [ 559.627724][T31859] ref_ctr increment failed for inode: 0x464 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e5080 [ 559.643697][T31860] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.654071][T31855] FAT-fs (loop7): Directory bread(block 68) failed [ 559.661786][T31857] uprobe: syz.8.10218:31857 failed to unregister, leaking uprobe [ 559.671677][T31855] FAT-fs (loop7): Directory bread(block 69) failed [ 559.678601][T31855] FAT-fs (loop7): Directory bread(block 70) failed [ 559.685328][T31855] FAT-fs (loop7): Directory bread(block 71) failed [ 559.692084][T31855] FAT-fs (loop7): Directory bread(block 72) failed [ 559.699237][T31855] FAT-fs (loop7): Directory bread(block 73) failed [ 559.700103][T31861] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10219'. [ 559.717166][T31860] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.768717][T31860] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.808889][T31860] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.879210][T31871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.889427][T31874] 9pnet_fd: Insufficient options for proto=fd [ 559.918712][T31871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.920968][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.947078][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.955662][T17814] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.974003][T17814] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.989544][T31880] 9pnet_fd: Insufficient options for proto=fd [ 560.125271][T31887] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 560.132953][T31887] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 560.215223][T31894] ref_ctr increment failed for inode: 0x7f3 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e1700 [ 560.252611][T31893] uprobe: syz.2.10232:31893 failed to unregister, leaking uprobe [ 560.276128][T31896] netlink: 'syz.1.10231': attribute type 1 has an invalid length. [ 560.396657][T31900] SELinux: ebitmap: truncated map [ 560.426710][T31900] SELinux: failed to load policy [ 560.457548][T31905] 9pnet_fd: Insufficient options for proto=fd [ 560.494978][T31907] 9pnet_fd: Insufficient options for proto=fd [ 560.547424][T31916] ref_ctr increment failed for inode: 0x8ea offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881189ec500 [ 560.559773][T31915] uprobe: syz.7.10242:31915 failed to unregister, leaking uprobe [ 560.955085][T31919] FAULT_INJECTION: forcing a failure. [ 560.955085][T31919] name failslab, interval 1, probability 0, space 0, times 0 [ 560.968129][T31919] CPU: 1 UID: 0 PID: 31919 Comm: syz.2.10243 Not tainted syzkaller #0 PREEMPT(voluntary) [ 560.968158][T31919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 560.968230][T31919] Call Trace: [ 560.968237][T31919] [ 560.968245][T31919] __dump_stack+0x1d/0x30 [ 560.968309][T31919] dump_stack_lvl+0xe8/0x140 [ 560.968330][T31919] dump_stack+0x15/0x1b [ 560.968346][T31919] should_fail_ex+0x265/0x280 [ 560.968367][T31919] should_failslab+0x8c/0xb0 [ 560.968407][T31919] kmem_cache_alloc_noprof+0x50/0x310 [ 560.968508][T31919] ? getname_flags+0x80/0x3b0 [ 560.968545][T31919] getname_flags+0x80/0x3b0 [ 560.968575][T31919] user_path_at+0x28/0x130 [ 560.968638][T31919] do_faccessat+0x380/0x800 [ 560.968666][T31919] __x64_sys_faccessat2+0x51/0x60 [ 560.968701][T31919] x64_sys_call+0x200f/0x2ff0 [ 560.968738][T31919] do_syscall_64+0xd2/0x200 [ 560.968773][T31919] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 560.968805][T31919] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 560.968838][T31919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.968866][T31919] RIP: 0033:0x7f748d43ebe9 [ 560.968937][T31919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.968960][T31919] RSP: 002b:00007f748be9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 560.968980][T31919] RAX: ffffffffffffffda RBX: 00007f748d675fa0 RCX: 00007f748d43ebe9 [ 560.968996][T31919] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 560.969015][T31919] RBP: 00007f748be9f090 R08: 0000000000000000 R09: 0000000000000000 [ 560.969027][T31919] R10: 0000000000001300 R11: 0000000000000246 R12: 0000000000000001 [ 560.969115][T31919] R13: 00007f748d676038 R14: 00007f748d675fa0 R15: 00007ffcd99a3a28 [ 560.969134][T31919] [ 561.313268][T31924] 9pnet_fd: p9_fd_create_tcp (31924): problem connecting socket to 127.0.0.1 [ 561.349822][T31926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.363298][T31926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.386972][T31926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.395992][T31926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.411960][T31933] 9pnet_fd: Insufficient options for proto=fd [ 561.420870][T31934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.427767][T31937] 9pnet_fd: Insufficient options for proto=fd [ 561.436190][T31934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.459297][T31929] syzkaller0: entered promiscuous mode [ 561.464900][T31929] syzkaller0: entered allmulticast mode [ 561.495702][T31946] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=31946 comm=syz.0.10253 [ 561.508564][T31946] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=31946 comm=syz.0.10253 [ 561.726974][T31962] netlink: 'syz.1.10257': attribute type 1 has an invalid length. [ 561.792010][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 561.792074][ T29] audit: type=1326 audit(586.210:48824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31960 comm="syz.0.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f22eebeebe9 code=0x7ffc0000 [ 561.881584][ T3378] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 561.998357][ T3378] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 562.059645][ T29] audit: type=1326 audit(586.252:48825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31964 comm="syz.0.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eebeebe9 code=0x7ffc0000 [ 562.083092][ T29] audit: type=1326 audit(586.263:48826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31964 comm="syz.0.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eebeebe9 code=0x7ffc0000 [ 562.106272][ T29] audit: type=1326 audit(586.273:48827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31964 comm="syz.0.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f22eebeebe9 code=0x7ffc0000 [ 562.129418][ T29] audit: type=1326 audit(586.273:48828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31964 comm="syz.0.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eebeebe9 code=0x7ffc0000 [ 562.152492][ T29] audit: type=1326 audit(586.273:48829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31964 comm="syz.0.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eebeebe9 code=0x7ffc0000 [ 562.175615][ T29] audit: type=1326 audit(586.273:48830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31964 comm="syz.0.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f22eebeebe9 code=0x7ffc0000 [ 562.198579][ T29] audit: type=1326 audit(586.273:48831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31964 comm="syz.0.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eebeebe9 code=0x7ffc0000 [ 562.221962][ T29] audit: type=1326 audit(586.284:48832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31964 comm="syz.0.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eebeebe9 code=0x7ffc0000 [ 562.245203][ T29] audit: type=1326 audit(586.284:48833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31964 comm="syz.0.10260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f22eebeebe9 code=0x7ffc0000 [ 562.418224][T31970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.456881][T31970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.494518][T31978] 9pnet_fd: Insufficient options for proto=fd [ 562.605712][T31991] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 562.613120][T31991] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 562.654917][T31966] siw: device registration error -23 [ 562.673658][T31998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.692801][T31998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.804051][T32008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.822722][T32008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.833482][T32013] 9pnet_fd: Insufficient options for proto=fd [ 563.043622][T32022] syzkaller0: entered promiscuous mode [ 563.049580][T32022] syzkaller0: entered allmulticast mode [ 563.128666][T32030] loop1: detected capacity change from 0 to 256 [ 563.135849][T32032] 9pnet_fd: p9_fd_create_tcp (32032): problem connecting socket to 127.0.0.1 [ 563.142653][T32030] FAT-fs (loop1): Directory bread(block 64) failed [ 563.151572][T32030] FAT-fs (loop1): Directory bread(block 65) failed [ 563.158268][T32030] FAT-fs (loop1): Directory bread(block 66) failed [ 563.165068][T32030] FAT-fs (loop1): Directory bread(block 67) failed [ 563.171818][T32030] FAT-fs (loop1): Directory bread(block 68) failed [ 563.178584][T32030] FAT-fs (loop1): Directory bread(block 69) failed [ 563.185734][T32030] FAT-fs (loop1): Directory bread(block 70) failed [ 563.192379][T32030] FAT-fs (loop1): Directory bread(block 71) failed [ 563.199127][T32030] FAT-fs (loop1): Directory bread(block 72) failed [ 563.205690][T32030] FAT-fs (loop1): Directory bread(block 73) failed [ 563.240393][ T3378] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 563.256049][ T3378] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 563.284350][T32042] loop1: detected capacity change from 0 to 512 [ 563.311259][T32042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.334892][T32042] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10289: bg 0: block 361: padding at end of block bitmap is not set [ 563.401819][T28398] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.455003][T32049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.522035][T32049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.568505][T32060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.577189][T32060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.589685][T32059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.598286][T32059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.676521][T32038] siw: device registration error -23 [ 563.749072][T32072] 9pnet_fd: p9_fd_create_tcp (32072): problem connecting socket to 127.0.0.1 [ 564.067482][T32079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.076340][T32079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.122898][T32088] vhci_hcd: invalid port number 66 [ 564.123617][T32090] loop7: detected capacity change from 0 to 512 [ 564.128078][T32088] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0 [ 564.163555][T32090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.188288][T32088] loop1: detected capacity change from 0 to 8192 [ 564.199069][T32090] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10302: bg 0: block 361: padding at end of block bitmap is not set [ 564.226836][T32088] loop1: p1 p2 p3 p4 [ 564.230993][T32088] loop1: p1 start 51379968 is beyond EOD, truncated [ 564.238417][T32088] loop1: p3 size 15991040 extends beyond EOD, truncated [ 564.245790][T26313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.255556][T32088] loop1: p4 start 16711680 is beyond EOD, truncated [ 564.271431][T32088] netlink: 'syz.1.10301': attribute type 1 has an invalid length. [ 564.279492][T32088] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10301'. [ 564.289871][T32088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10301'. [ 564.290276][T32102] 9pnet_fd: p9_fd_create_tcp (32102): problem connecting socket to 127.0.0.1 [ 564.328136][T32104] bridge_slave_0: left allmulticast mode [ 564.333937][T32104] bridge_slave_0: left promiscuous mode [ 564.339658][T32104] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.362201][T32104] bridge_slave_1: left allmulticast mode [ 564.367888][T32104] bridge_slave_1: left promiscuous mode [ 564.373596][T32104] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.386550][T32104] bond0: (slave bond_slave_0): Releasing backup interface [ 564.388301][T32108] loop7: detected capacity change from 0 to 256 [ 564.407680][T32104] bond0: (slave bond_slave_1): Releasing backup interface [ 564.407739][T32108] FAT-fs (loop7): Directory bread(block 64) failed [ 564.415131][T32108] FAT-fs (loop7): Directory bread(block 65) failed [ 564.428538][T32108] FAT-fs (loop7): Directory bread(block 66) failed [ 564.435145][T32108] FAT-fs (loop7): Directory bread(block 67) failed [ 564.440970][T32104] team0: Port device team_slave_0 removed [ 564.441888][T32108] FAT-fs (loop7): Directory bread(block 68) failed [ 564.454124][T32108] FAT-fs (loop7): Directory bread(block 69) failed [ 564.460762][T32108] FAT-fs (loop7): Directory bread(block 70) failed [ 564.462736][T32104] team0: Port device team_slave_1 removed [ 564.467544][T32108] FAT-fs (loop7): Directory bread(block 71) failed [ 564.479900][T32108] FAT-fs (loop7): Directory bread(block 72) failed [ 564.486577][T32108] FAT-fs (loop7): Directory bread(block 73) failed [ 564.651992][T32114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.661812][T32118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.671560][T32114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.679870][T32118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.923311][T32142] loop1: detected capacity change from 0 to 256 [ 564.935107][T32140] program syz.8.10321 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 564.938124][T32142] FAT-fs (loop1): Directory bread(block 64) failed [ 564.951081][T32142] FAT-fs (loop1): Directory bread(block 65) failed [ 564.957678][T32142] FAT-fs (loop1): Directory bread(block 66) failed [ 564.964364][T32142] FAT-fs (loop1): Directory bread(block 67) failed [ 564.971544][T32142] FAT-fs (loop1): Directory bread(block 68) failed [ 564.979438][T32142] FAT-fs (loop1): Directory bread(block 69) failed [ 564.986733][T32142] FAT-fs (loop1): Directory bread(block 70) failed [ 564.994216][T32142] FAT-fs (loop1): Directory bread(block 71) failed [ 565.001009][T32142] FAT-fs (loop1): Directory bread(block 72) failed [ 565.007581][T32142] FAT-fs (loop1): Directory bread(block 73) failed [ 565.050828][T32148] blktrace: Concurrent blktraces are not allowed on loop3 [ 565.075409][T32150] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.124405][T32153] netlink: 60 bytes leftover after parsing attributes in process `syz.8.10326'. [ 565.134582][T32150] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.253859][T32150] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.341145][T32159] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 565.349280][T32159] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 565.372232][T32150] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.383350][T32160] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 565.405966][T32160] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 565.476123][T32162] syzkaller0: entered promiscuous mode [ 565.481766][T32162] syzkaller0: entered allmulticast mode [ 565.514245][T32164] 9pnet_fd: p9_fd_create_tcp (32164): problem connecting socket to 127.0.0.1 [ 565.542212][T17817] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.599115][T17832] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.607727][T17832] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.624408][T17832] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.638062][T32167] loop7: detected capacity change from 0 to 512 [ 565.658696][T32167] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.675434][T32167] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10331: bg 0: block 361: padding at end of block bitmap is not set [ 565.704754][T26313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.752099][T32181] ref_ctr increment failed for inode: 0x969 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881189edc00 [ 565.763835][T32180] uprobe: syz.7.10337:32180 failed to unregister, leaking uprobe [ 565.836161][T32191] 9pnet_fd: p9_fd_create_tcp (32191): problem connecting socket to 127.0.0.1 [ 565.860344][T32196] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 565.875122][ T8099] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 565.882712][T32196] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 565.887324][ T8099] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 565.973770][T32208] loop7: detected capacity change from 0 to 512 [ 566.014888][T32208] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.050460][T32208] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10346: bg 0: block 361: padding at end of block bitmap is not set [ 566.078525][T26313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 566.090044][T32218] program syz.8.10350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.138840][T32223] 9pnet_fd: p9_fd_create_tcp (32223): problem connecting socket to 127.0.0.1 [ 566.149003][T32225] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10353'. [ 566.197795][T32229] ref_ctr increment failed for inode: 0x509 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881189eb3c0 [ 566.211745][T32226] uprobe: syz.8.10354:32226 failed to unregister, leaking uprobe [ 566.227439][T32197] siw: device registration error -23 [ 566.241658][T32232] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 566.249247][T32232] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 566.435803][T32241] FAULT_INJECTION: forcing a failure. [ 566.435803][T32241] name failslab, interval 1, probability 0, space 0, times 0 [ 566.448562][T32241] CPU: 0 UID: 0 PID: 32241 Comm: syz.1.10357 Not tainted syzkaller #0 PREEMPT(voluntary) [ 566.448634][T32241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 566.448652][T32241] Call Trace: [ 566.448659][T32241] [ 566.448668][T32241] __dump_stack+0x1d/0x30 [ 566.448729][T32241] dump_stack_lvl+0xe8/0x140 [ 566.448748][T32241] dump_stack+0x15/0x1b [ 566.448764][T32241] should_fail_ex+0x265/0x280 [ 566.448854][T32241] should_failslab+0x8c/0xb0 [ 566.448878][T32241] __kmalloc_noprof+0xa5/0x3e0 [ 566.448905][T32241] ? __register_sysctl_table+0x54/0xc00 [ 566.449003][T32241] __register_sysctl_table+0x54/0xc00 [ 566.449029][T32241] ? __kmalloc_node_track_caller_noprof+0x1e5/0x410 [ 566.449066][T32241] register_pidns_sysctls+0xe0/0x140 [ 566.449097][T32241] copy_pid_ns+0x351/0x550 [ 566.449167][T32241] ? __cond_resched+0x4e/0x90 [ 566.449191][T32241] create_new_namespaces+0x176/0x3d0 [ 566.449235][T32241] unshare_nsproxy_namespaces+0xe8/0x120 [ 566.449344][T32241] ksys_unshare+0x3d0/0x6d0 [ 566.449381][T32241] ? ksys_write+0x15f/0x1a0 [ 566.449409][T32241] __x64_sys_unshare+0x1f/0x30 [ 566.449485][T32241] x64_sys_call+0x2911/0x2ff0 [ 566.449509][T32241] do_syscall_64+0xd2/0x200 [ 566.449544][T32241] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 566.449648][T32241] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 566.449674][T32241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.449695][T32241] RIP: 0033:0x7fbe00ceebe9 [ 566.449728][T32241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.449748][T32241] RSP: 002b:00007fbdff757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 566.449772][T32241] RAX: ffffffffffffffda RBX: 00007fbe00f25fa0 RCX: 00007fbe00ceebe9 [ 566.449784][T32241] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024040200 [ 566.449829][T32241] RBP: 00007fbdff757090 R08: 0000000000000000 R09: 0000000000000000 [ 566.449841][T32241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.449852][T32241] R13: 00007fbe00f26038 R14: 00007fbe00f25fa0 R15: 00007ffd887435c8 [ 566.449870][T32241] [ 566.793541][T32254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.838591][T32254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.867463][T32260] 9pnet_fd: p9_fd_create_tcp (32260): problem connecting socket to 127.0.0.1 [ 566.967412][T32264] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.000202][T32264] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.010414][T32265] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 567.018136][T32265] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 567.058009][T32264] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.096558][T32272] FAULT_INJECTION: forcing a failure. [ 567.096558][T32272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.109708][T32272] CPU: 1 UID: 0 PID: 32272 Comm: syz.0.10370 Not tainted syzkaller #0 PREEMPT(voluntary) [ 567.109801][T32272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.109813][T32272] Call Trace: [ 567.109820][T32272] [ 567.109829][T32272] __dump_stack+0x1d/0x30 [ 567.109850][T32272] dump_stack_lvl+0xe8/0x140 [ 567.109869][T32272] dump_stack+0x15/0x1b [ 567.109961][T32272] should_fail_ex+0x265/0x280 [ 567.109990][T32272] should_fail+0xb/0x20 [ 567.110010][T32272] should_fail_usercopy+0x1a/0x20 [ 567.110032][T32272] _copy_from_iter+0xd2/0xe80 [ 567.110057][T32272] ? kernel_fpu_begin_mask+0x211/0x290 [ 567.110101][T32272] ? kernel_fpu_end+0x85/0xd0 [ 567.110200][T32272] ? blake2s_update+0x134/0x160 [ 567.110298][T32272] write_pool_user+0x7c/0x1e0 [ 567.110326][T32272] ? import_ubuf+0xe8/0x120 [ 567.110353][T32272] ? __pfx_random_ioctl+0x10/0x10 [ 567.110430][T32272] random_ioctl+0x2cc/0x400 [ 567.110454][T32272] __se_sys_ioctl+0xce/0x140 [ 567.110505][T32272] __x64_sys_ioctl+0x43/0x50 [ 567.110521][T32272] x64_sys_call+0x1816/0x2ff0 [ 567.110544][T32272] do_syscall_64+0xd2/0x200 [ 567.110635][T32272] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 567.110659][T32272] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 567.110689][T32272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.110769][T32272] RIP: 0033:0x7f22eebeebe9 [ 567.110785][T32272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.110803][T32272] RSP: 002b:00007f22ed657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 567.110824][T32272] RAX: ffffffffffffffda RBX: 00007f22eee25fa0 RCX: 00007f22eebeebe9 [ 567.110841][T32272] RDX: 000020000000fec0 RSI: 0000000040085203 RDI: 0000000000000003 [ 567.110929][T32272] RBP: 00007f22ed657090 R08: 0000000000000000 R09: 0000000000000000 [ 567.110945][T32272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 567.110962][T32272] R13: 00007f22eee26038 R14: 00007f22eee25fa0 R15: 00007ffcab183e78 [ 567.110986][T32272] [ 567.318050][T32264] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.370896][T32280] $Hÿ: renamed from bond0 (while UP) [ 567.378281][T32280] $Hÿ: entered promiscuous mode [ 567.412084][T17832] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.426977][T17832] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.445464][T17832] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.447350][T32284] loop8: detected capacity change from 0 to 512 [ 567.456118][T17832] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.472305][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 567.472324][ T29] audit: type=1400 audit(592.173:49075): avc: denied { connect } for pid=32281 comm="syz.0.10375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 567.509597][T32290] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.538366][T32284] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.558067][T32294] netlink: 'syz.0.10378': attribute type 1 has an invalid length. [ 567.566040][T32294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10378'. [ 567.577534][T32284] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.10376: bg 0: block 361: padding at end of block bitmap is not set [ 567.610600][T32290] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.634440][T28978] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.648405][T32290] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.736336][ T29] audit: type=1400 audit(592.446:49076): avc: denied { create } for pid=32304 comm="syz.8.10383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 567.755507][ T29] audit: type=1400 audit(592.446:49077): avc: denied { setopt } for pid=32304 comm="syz.8.10383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 567.785765][T32290] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.797391][T32307] FAULT_INJECTION: forcing a failure. [ 567.797391][T32307] name failslab, interval 1, probability 0, space 0, times 0 [ 567.810106][T32307] CPU: 0 UID: 0 PID: 32307 Comm: syz.8.10383 Not tainted syzkaller #0 PREEMPT(voluntary) [ 567.810139][T32307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.810155][T32307] Call Trace: [ 567.810164][T32307] [ 567.810175][T32307] __dump_stack+0x1d/0x30 [ 567.810203][T32307] dump_stack_lvl+0xe8/0x140 [ 567.810228][T32307] dump_stack+0x15/0x1b [ 567.810247][T32307] should_fail_ex+0x265/0x280 [ 567.810269][T32307] should_failslab+0x8c/0xb0 [ 567.810299][T32307] kmem_cache_alloc_bulk_noprof+0x5b/0x410 [ 567.810335][T32307] ? should_failslab+0x8c/0xb0 [ 567.810365][T32307] ? kmem_cache_alloc_noprof+0x186/0x310 [ 567.810399][T32307] ? mas_alloc_nodes+0x265/0x520 [ 567.810439][T32307] mas_alloc_nodes+0x333/0x520 [ 567.810475][T32307] mas_preallocate+0x33e/0x520 [ 567.810510][T32307] __split_vma+0x240/0x650 [ 567.810548][T32307] vma_modify+0x3f2/0xc80 [ 567.810581][T32307] vma_modify_policy+0x101/0x130 [ 567.810618][T32307] mbind_range+0x1b8/0x440 [ 567.810643][T32307] ? mas_find+0x5d5/0x700 [ 567.810678][T32307] __se_sys_mbind+0x648/0xac0 [ 567.810724][T32307] __x64_sys_mbind+0x78/0x90 [ 567.810760][T32307] x64_sys_call+0x2932/0x2ff0 [ 567.810781][T32307] do_syscall_64+0xd2/0x200 [ 567.810835][T32307] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 567.810862][T32307] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 567.810910][T32307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.810938][T32307] RIP: 0033:0x7f9ea605ebe9 [ 567.810957][T32307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.810975][T32307] RSP: 002b:00007f9ea4aa6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 567.810993][T32307] RAX: ffffffffffffffda RBX: 00007f9ea6296090 RCX: 00007f9ea605ebe9 [ 567.811008][T32307] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 567.811024][T32307] RBP: 00007f9ea4aa6090 R08: 0000000000000000 R09: 0000000000000002 [ 567.811045][T32307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.811056][T32307] R13: 00007f9ea6296128 R14: 00007f9ea6296090 R15: 00007ffc8e0e0878 [ 567.811075][T32307] [ 568.080434][T17832] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.093187][T17832] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.110269][T17832] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.121902][T17832] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.173078][T32316] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.211963][T32318] binfmt_misc: register: failed to install interpreter file ./bus [ 568.221086][ T29] audit: type=1326 audit(592.971:49078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32317 comm="syz.0.10388" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f22eebeebe9 code=0x0 [ 568.311915][T32316] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.353182][T32316] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.412326][T32316] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.448734][T32325] 9pnet_fd: p9_fd_create_tcp (32325): problem connecting socket to 127.0.0.1 [ 568.533883][T32331] blktrace: Concurrent blktraces are not allowed on loop3 [ 568.543179][T32331] program syz.1.10393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 568.621600][T32335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.630402][T32335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.068332][T32341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.077271][T32341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.188357][T32348] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.220018][T32348] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.237657][T32349] netlink: 'syz.1.10397': attribute type 1 has an invalid length. [ 569.245518][T32349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10397'. [ 569.257919][T32348] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.315619][T32348] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.379427][T17832] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.399861][T17832] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.425637][T17832] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.434285][T17832] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.481068][T32362] 9pnet_fd: p9_fd_create_tcp (32362): problem connecting socket to 127.0.0.1 [ 569.492454][ T29] audit: type=1326 audit(594.304:49079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32363 comm="syz.2.10403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748d43ebe9 code=0x7ffc0000 [ 569.515699][ T29] audit: type=1326 audit(594.304:49080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32363 comm="syz.2.10403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748d43ebe9 code=0x7ffc0000 [ 569.529819][ T3391] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 569.539099][ T29] audit: type=1326 audit(594.336:49081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32363 comm="syz.2.10403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f748d43ebe9 code=0x7ffc0000 [ 569.569760][ T29] audit: type=1326 audit(594.336:49082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32363 comm="syz.2.10403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748d43ebe9 code=0x7ffc0000 [ 569.590282][ T3391] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 569.592959][ T29] audit: type=1326 audit(594.336:49083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32363 comm="syz.2.10403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f748d43ebe9 code=0x7ffc0000 [ 569.625449][ T29] audit: type=1326 audit(594.336:49084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32363 comm="syz.2.10403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748d43ebe9 code=0x7ffc0000 [ 569.661054][T17832] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.704469][T17832] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.729779][T17832] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.752358][T17832] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.838777][T32364] siw: device registration error -23 [ 570.011761][T32388] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.023503][T32390] 9pnet_fd: p9_fd_create_tcp (32390): problem connecting socket to 127.0.0.1 [ 570.061297][T32388] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.081026][T32391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.085839][T32399] syzkaller1: entered promiscuous mode [ 570.094944][T32399] syzkaller1: entered allmulticast mode [ 570.099008][T32391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.118429][T32388] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.207515][T32388] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.246649][T17832] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.264537][T17832] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.296325][T17832] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.307759][T17832] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.777349][T32419] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10425'. [ 570.788090][T32419] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10425'. [ 571.058792][T32436] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 571.112031][T32437] netlink: 'syz.8.10429': attribute type 1 has an invalid length. [ 571.126312][T32436] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 571.669145][ T3378] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 571.706379][ T3378] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 571.815870][T32460] loop7: detected capacity change from 0 to 512 [ 571.840014][T32460] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.855387][T32460] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10441: bg 0: block 361: padding at end of block bitmap is not set [ 571.887103][T26313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.928253][T32451] siw: device registration error -23 [ 571.965585][T32469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.990407][T32469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.006713][T32475] FAULT_INJECTION: forcing a failure. [ 572.006713][T32475] name failslab, interval 1, probability 0, space 0, times 0 [ 572.019505][T32475] CPU: 1 UID: 0 PID: 32475 Comm: syz.1.10444 Not tainted syzkaller #0 PREEMPT(voluntary) [ 572.019539][T32475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 572.019554][T32475] Call Trace: [ 572.019563][T32475] [ 572.019573][T32475] __dump_stack+0x1d/0x30 [ 572.019599][T32475] dump_stack_lvl+0xe8/0x140 [ 572.019656][T32475] dump_stack+0x15/0x1b [ 572.019675][T32475] should_fail_ex+0x265/0x280 [ 572.019696][T32475] ? selinux_bpf_prog_load+0x36/0xf0 [ 572.019718][T32475] should_failslab+0x8c/0xb0 [ 572.019808][T32475] __kmalloc_cache_noprof+0x4c/0x320 [ 572.019840][T32475] selinux_bpf_prog_load+0x36/0xf0 [ 572.019892][T32475] security_bpf_prog_load+0x54/0xa0 [ 572.019913][T32475] bpf_prog_load+0xe6b/0x1070 [ 572.019952][T32475] ? security_bpf+0x2b/0x90 [ 572.020030][T32475] __sys_bpf+0x462/0x7b0 [ 572.020124][T32475] __x64_sys_bpf+0x41/0x50 [ 572.020206][T32475] x64_sys_call+0x2aea/0x2ff0 [ 572.020228][T32475] do_syscall_64+0xd2/0x200 [ 572.020264][T32475] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 572.020359][T32475] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 572.020387][T32475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.020409][T32475] RIP: 0033:0x7fbe00ceebe9 [ 572.020425][T32475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.020443][T32475] RSP: 002b:00007fbdff757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 572.020466][T32475] RAX: ffffffffffffffda RBX: 00007fbe00f25fa0 RCX: 00007fbe00ceebe9 [ 572.020529][T32475] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 572.020542][T32475] RBP: 00007fbdff757090 R08: 0000000000000000 R09: 0000000000000000 [ 572.020555][T32475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.020567][T32475] R13: 00007fbe00f26038 R14: 00007fbe00f25fa0 R15: 00007ffd887435c8 [ 572.020587][T32475] [ 572.255969][T32482] blktrace: Concurrent blktraces are not allowed on loop3 [ 572.264876][T32482] program syz.1.10447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.322604][T32488] 9pnet_fd: p9_fd_create_tcp (32488): problem connecting socket to 127.0.0.1 [ 572.496583][T32498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.505878][T32498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.648724][T32503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.684431][T32503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.961021][T32521] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 572.968538][T32521] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 573.125667][T32529] loop7: detected capacity change from 0 to 512 [ 573.153933][T32529] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.168995][T32529] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10462: bg 0: block 361: padding at end of block bitmap is not set [ 573.206449][T32537] program syz.2.10465 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 573.216951][T26313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.257698][T32541] program syz.2.10468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 573.365700][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 573.365718][ T29] audit: type=1400 audit(598.367:49207): avc: denied { write } for pid=32549 comm="syz.7.10472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 573.407484][ T29] audit: type=1400 audit(598.398:49208): avc: denied { setopt } for pid=32549 comm="syz.7.10472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 573.516088][T32561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.524798][T32561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.716169][T32576] loop1: detected capacity change from 0 to 512 [ 573.735532][T32576] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.768018][ T29] audit: type=1326 audit(598.787:49209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.2.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748d43ebe9 code=0x7ffc0000 [ 573.791330][ T29] audit: type=1326 audit(598.787:49210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.2.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748d43ebe9 code=0x7ffc0000 [ 573.814429][ T29] audit: type=1326 audit(598.787:49211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.2.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f748d43ebe9 code=0x7ffc0000 [ 573.837534][ T29] audit: type=1326 audit(598.787:49212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.2.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748d43ebe9 code=0x7ffc0000 [ 573.860637][ T29] audit: type=1326 audit(598.787:49213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.2.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748d43ebe9 code=0x7ffc0000 [ 573.883978][ T29] audit: type=1326 audit(598.787:49214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.2.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f748d43ebe9 code=0x7ffc0000 [ 573.907216][ T29] audit: type=1326 audit(598.787:49215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.2.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748d43ebe9 code=0x7ffc0000 [ 573.930358][ T29] audit: type=1326 audit(598.787:49216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32565 comm="syz.2.10476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f748d43ebe9 code=0x7ffc0000 [ 573.955134][T32571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.968843][T32571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.994410][T32576] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10478: bg 0: block 361: padding at end of block bitmap is not set [ 574.024122][T28398] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.170301][T32588] netlink: 'syz.7.10481': attribute type 1 has an invalid length. [ 574.178213][T32588] netlink: 224 bytes leftover after parsing attributes in process `syz.7.10481'. [ 574.202081][T32590] loop7: detected capacity change from 0 to 256 [ 574.216665][T32590] FAT-fs (loop7): Directory bread(block 64) failed [ 574.223389][T32590] FAT-fs (loop7): Directory bread(block 65) failed [ 574.230018][T32590] FAT-fs (loop7): Directory bread(block 66) failed [ 574.236543][T32590] FAT-fs (loop7): Directory bread(block 67) failed [ 574.243318][T32590] FAT-fs (loop7): Directory bread(block 68) failed [ 574.249952][T32590] FAT-fs (loop7): Directory bread(block 69) failed [ 574.256482][T32590] FAT-fs (loop7): Directory bread(block 70) failed [ 574.263075][T32590] FAT-fs (loop7): Directory bread(block 71) failed [ 574.269684][T32590] FAT-fs (loop7): Directory bread(block 72) failed [ 574.276202][T32590] FAT-fs (loop7): Directory bread(block 73) failed [ 575.058098][T32626] ref_ctr increment failed for inode: 0x588 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e6780 [ 575.070858][T32625] uprobe: syz.8.10499:32625 failed to unregister, leaking uprobe [ 575.221990][T32627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.231328][T32627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.507778][T32648] vhci_hcd: invalid port number 66 [ 575.512957][T32648] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0 [ 575.547920][T32648] loop7: detected capacity change from 0 to 8192 [ 575.600545][T32648] loop7: p1 p2 p3 p4 [ 575.604794][T32648] loop7: p1 start 51379968 is beyond EOD, truncated [ 575.611983][T32648] loop7: p3 size 15991040 extends beyond EOD, truncated [ 575.619546][T32648] loop7: p4 start 16711680 is beyond EOD, truncated [ 575.630072][T32648] netlink: 'syz.7.10504': attribute type 1 has an invalid length. [ 575.637960][T32648] netlink: 224 bytes leftover after parsing attributes in process `syz.7.10504'. [ 575.648465][T32648] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10504'. [ 575.684523][T32650] loop7: detected capacity change from 0 to 256 [ 575.699377][T32650] FAT-fs (loop7): Directory bread(block 64) failed [ 575.706192][T32650] FAT-fs (loop7): Directory bread(block 65) failed [ 575.712757][T32650] FAT-fs (loop7): Directory bread(block 66) failed [ 575.719457][T32650] FAT-fs (loop7): Directory bread(block 67) failed [ 575.726026][T32650] FAT-fs (loop7): Directory bread(block 68) failed [ 575.732638][T32650] FAT-fs (loop7): Directory bread(block 69) failed [ 575.739261][T32650] FAT-fs (loop7): Directory bread(block 70) failed [ 575.745913][T32650] FAT-fs (loop7): Directory bread(block 71) failed [ 575.752455][T32650] FAT-fs (loop7): Directory bread(block 72) failed [ 575.759143][T32650] FAT-fs (loop7): Directory bread(block 73) failed [ 575.885830][T32663] 9pnet_fd: p9_fd_create_tcp (32663): problem connecting socket to 127.0.0.1 [ 575.942017][T32666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.950937][T32666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.969853][T32674] ref_ctr increment failed for inode: 0x559 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881189edc00 [ 575.982008][T32673] uprobe: syz.0.10513:32673 failed to unregister, leaking uprobe [ 576.018794][T32683] loop7: detected capacity change from 0 to 256 [ 576.032252][T32683] FAT-fs (loop7): Directory bread(block 64) failed [ 576.039372][T32683] FAT-fs (loop7): Directory bread(block 65) failed [ 576.046033][T32683] FAT-fs (loop7): Directory bread(block 66) failed [ 576.052709][T32683] FAT-fs (loop7): Directory bread(block 67) failed [ 576.059646][T32683] FAT-fs (loop7): Directory bread(block 68) failed [ 576.066259][T32683] FAT-fs (loop7): Directory bread(block 69) failed [ 576.072927][T32683] FAT-fs (loop7): Directory bread(block 70) failed [ 576.079623][T32683] FAT-fs (loop7): Directory bread(block 71) failed [ 576.086453][T32683] FAT-fs (loop7): Directory bread(block 72) failed [ 576.093323][T32683] FAT-fs (loop7): Directory bread(block 73) failed [ 576.110339][T32684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.128245][T32684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.157912][T32693] loop7: detected capacity change from 0 to 512 [ 576.173803][T32693] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.189343][T32693] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10519: bg 0: block 361: padding at end of block bitmap is not set [ 576.217310][T26313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.285408][T32702] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 576.292988][T32702] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 576.320622][T32704] 9pnet_fd: p9_fd_create_tcp (32704): problem connecting socket to 127.0.0.1 [ 576.342713][T32705] netlink: 'syz.2.10521': attribute type 1 has an invalid length. [ 577.083544][T32726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.092087][T32726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.115269][T32730] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 577.122748][T32730] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 577.163616][T32734] loop7: detected capacity change from 0 to 128 [ 577.172030][T32734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 577.180079][T32734] System zones: 1-3, 19-19, 35-36 [ 577.185698][T32734] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 577.198846][T32736] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 577.202147][T32734] FAULT_INJECTION: forcing a failure. [ 577.202147][T32734] name failslab, interval 1, probability 0, space 0, times 0 [ 577.206505][T32736] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 577.218902][T32734] CPU: 1 UID: 0 PID: 32734 Comm: syz.7.10534 Not tainted syzkaller #0 PREEMPT(voluntary) [ 577.218943][T32734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 577.219008][T32734] Call Trace: [ 577.219017][T32734] [ 577.219031][T32734] __dump_stack+0x1d/0x30 [ 577.219061][T32734] dump_stack_lvl+0xe8/0x140 [ 577.219088][T32734] dump_stack+0x15/0x1b [ 577.219112][T32734] should_fail_ex+0x265/0x280 [ 577.219142][T32734] should_failslab+0x8c/0xb0 [ 577.219210][T32734] kmem_cache_alloc_noprof+0x50/0x310 [ 577.219320][T32734] ? audit_log_start+0x365/0x6c0 [ 577.219376][T32734] audit_log_start+0x365/0x6c0 [ 577.219456][T32734] audit_seccomp+0x48/0x100 [ 577.219564][T32734] ? __seccomp_filter+0x68c/0x10d0 [ 577.219598][T32734] __seccomp_filter+0x69d/0x10d0 [ 577.219629][T32734] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 577.219665][T32734] ? vfs_write+0x7e8/0x960 [ 577.219776][T32734] ? __rcu_read_unlock+0x4f/0x70 [ 577.219859][T32734] ? __fget_files+0x184/0x1c0 [ 577.219907][T32734] __secure_computing+0x82/0x150 [ 577.219937][T32734] syscall_trace_enter+0xcf/0x1e0 [ 577.219972][T32734] do_syscall_64+0xac/0x200 [ 577.220029][T32734] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 577.220132][T32734] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 577.220169][T32734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.220199][T32734] RIP: 0033:0x7f5016c2ebe9 [ 577.220282][T32734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.220307][T32734] RSP: 002b:00007f5015697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000073 [ 577.220367][T32734] RAX: ffffffffffffffda RBX: 00007f5016e65fa0 RCX: 00007f5016c2ebe9 [ 577.220385][T32734] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000001 [ 577.220403][T32734] RBP: 00007f5015697090 R08: 0000000000000000 R09: 0000000000000000 [ 577.220421][T32734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 577.220439][T32734] R13: 00007f5016e66038 R14: 00007f5016e65fa0 R15: 00007ffca8eae7f8 [ 577.220468][T32734] [ 577.464034][T26313] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 577.585269][T32749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.601016][T32749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.619898][T32754] ref_ctr increment failed for inode: 0x8e5 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881189eae00 [ 577.634000][T32753] uprobe: syz.2.10540:32753 failed to unregister, leaking uprobe [ 577.714848][T32756] program syz.2.10541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 577.871580][ T301] netlink: 'syz.7.10543': attribute type 1 has an invalid length. [ 577.953267][ T305] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 577.961419][ T305] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 578.038144][ T308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10548'. [ 578.346358][ T319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.355001][ T319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.378566][ T327] loop8: detected capacity change from 0 to 256 [ 578.393431][ T327] FAT-fs (loop8): Directory bread(block 64) failed [ 578.400026][ T327] FAT-fs (loop8): Directory bread(block 65) failed [ 578.406921][ T327] FAT-fs (loop8): Directory bread(block 66) failed [ 578.413591][ T327] FAT-fs (loop8): Directory bread(block 67) failed [ 578.420256][ T327] FAT-fs (loop8): Directory bread(block 68) failed [ 578.426792][ T327] FAT-fs (loop8): Directory bread(block 69) failed [ 578.433476][ T327] FAT-fs (loop8): Directory bread(block 70) failed [ 578.440161][ T327] FAT-fs (loop8): Directory bread(block 71) failed [ 578.446734][ T327] FAT-fs (loop8): Directory bread(block 72) failed [ 578.453297][ T327] FAT-fs (loop8): Directory bread(block 73) failed [ 578.663818][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 578.663834][ T29] audit: type=1400 audit(603.920:49258): avc: denied { write } for pid=341 comm="syz.7.10560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 578.689646][ T342] netlink: 'syz.7.10560': attribute type 1 has an invalid length. [ 578.752348][ T350] ref_ctr increment failed for inode: 0x5cd offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e0000 [ 578.763819][ T349] uprobe: syz.8.10563:349 failed to unregister, leaking uprobe [ 578.773079][ T348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 578.781644][ T348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 578.854569][ T357] vhci_hcd: invalid port number 66 [ 578.859787][ T357] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0 [ 578.895231][ T357] loop8: detected capacity change from 0 to 8192 [ 578.934486][ T357] loop8: p1 p2 p3 p4 [ 578.938786][ T357] loop8: p1 start 51379968 is beyond EOD, truncated [ 578.946190][ T357] loop8: p3 size 15991040 extends beyond EOD, truncated [ 578.954441][ T357] loop8: p4 start 16711680 is beyond EOD, truncated [ 578.966695][ T357] netlink: 'syz.8.10565': attribute type 1 has an invalid length. [ 578.974656][ T357] netlink: 224 bytes leftover after parsing attributes in process `syz.8.10565'. [ 578.985342][ T357] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10565'. [ 579.012459][ T363] FAULT_INJECTION: forcing a failure. [ 579.012459][ T363] name failslab, interval 1, probability 0, space 0, times 0 [ 579.025256][ T363] CPU: 0 UID: 0 PID: 363 Comm: syz.1.10568 Not tainted syzkaller #0 PREEMPT(voluntary) [ 579.025291][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.025304][ T363] Call Trace: [ 579.025310][ T363] [ 579.025317][ T363] __dump_stack+0x1d/0x30 [ 579.025339][ T363] dump_stack_lvl+0xe8/0x140 [ 579.025412][ T363] dump_stack+0x15/0x1b [ 579.025433][ T363] should_fail_ex+0x265/0x280 [ 579.025469][ T363] should_failslab+0x8c/0xb0 [ 579.025494][ T363] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 579.025530][ T363] ? sock_alloc_inode+0x34/0xa0 [ 579.025559][ T363] ? __pfx_sock_alloc_inode+0x10/0x10 [ 579.025609][ T363] sock_alloc_inode+0x34/0xa0 [ 579.025641][ T363] alloc_inode+0x40/0x170 [ 579.025663][ T363] __sock_create+0x122/0x5b0 [ 579.025795][ T363] ? fput+0x8f/0xc0 [ 579.025828][ T363] __sys_socket+0xb0/0x180 [ 579.025868][ T363] __x64_sys_socket+0x3f/0x50 [ 579.025930][ T363] x64_sys_call+0x1147/0x2ff0 [ 579.025958][ T363] do_syscall_64+0xd2/0x200 [ 579.025987][ T363] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 579.026010][ T363] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 579.026104][ T363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.026192][ T363] RIP: 0033:0x7fbe00ceebe9 [ 579.026209][ T363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.026230][ T363] RSP: 002b:00007fbdff757038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 579.026254][ T363] RAX: ffffffffffffffda RBX: 00007fbe00f25fa0 RCX: 00007fbe00ceebe9 [ 579.026272][ T363] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000002 [ 579.026334][ T363] RBP: 00007fbdff757090 R08: 0000000000000000 R09: 0000000000000000 [ 579.026350][ T363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.026411][ T363] R13: 00007fbe00f26038 R14: 00007fbe00f25fa0 R15: 00007ffd887435c8 [ 579.026431][ T363] [ 579.026439][ T363] socket: no more sockets [ 579.358563][ T375] netlink: 'syz.0.10571': attribute type 1 has an invalid length. [ 579.369207][ T377] FAULT_INJECTION: forcing a failure. [ 579.369207][ T377] name failslab, interval 1, probability 0, space 0, times 0 [ 579.382254][ T377] CPU: 0 UID: 0 PID: 377 Comm: syz.2.10573 Not tainted syzkaller #0 PREEMPT(voluntary) [ 579.382295][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 579.382310][ T377] Call Trace: [ 579.382317][ T377] [ 579.382326][ T377] __dump_stack+0x1d/0x30 [ 579.382353][ T377] dump_stack_lvl+0xe8/0x140 [ 579.382387][ T377] dump_stack+0x15/0x1b [ 579.382407][ T377] should_fail_ex+0x265/0x280 [ 579.382450][ T377] should_failslab+0x8c/0xb0 [ 579.382477][ T377] kmem_cache_alloc_node_noprof+0x57/0x320 [ 579.382511][ T377] ? dup_task_struct+0x70/0x6a0 [ 579.382541][ T377] dup_task_struct+0x70/0x6a0 [ 579.382640][ T377] ? freezing_slow_path+0xed/0x100 [ 579.382731][ T377] copy_process+0x399/0x2000 [ 579.382754][ T377] ? kstrtouint+0x76/0xc0 [ 579.382774][ T377] ? kstrtouint_from_user+0x9f/0xf0 [ 579.382905][ T377] ? __rcu_read_unlock+0x4f/0x70 [ 579.382937][ T377] kernel_clone+0x16c/0x5c0 [ 579.382966][ T377] ? vfs_write+0x7e8/0x960 [ 579.383057][ T377] __x64_sys_clone+0xe6/0x120 [ 579.383098][ T377] x64_sys_call+0x119c/0x2ff0 [ 579.383119][ T377] do_syscall_64+0xd2/0x200 [ 579.383182][ T377] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 579.383208][ T377] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 579.383241][ T377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.383268][ T377] RIP: 0033:0x7f748d43ebe9 [ 579.383345][ T377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.383372][ T377] RSP: 002b:00007f748be9efe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 579.383393][ T377] RAX: ffffffffffffffda RBX: 00007f748d675fa0 RCX: 00007f748d43ebe9 [ 579.383406][ T377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040800000 [ 579.383422][ T377] RBP: 00007f748be9f090 R08: 0000000000000000 R09: 0000000000000000 [ 579.383437][ T377] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 579.383452][ T377] R13: 00007f748d676038 R14: 00007f748d675fa0 R15: 00007ffcd99a3a28 [ 579.383508][ T377] [ 579.627102][ T29] audit: type=1400 audit(604.939:49259): avc: denied { ioctl } for pid=378 comm="syz.1.10574" path="socket:[148077]" dev="sockfs" ino=148077 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 579.657139][ T383] ref_ctr increment failed for inode: 0x90b offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e7300 [ 579.755235][ T381] uprobe: syz.2.10575:381 failed to unregister, leaking uprobe [ 579.930506][ T29] audit: type=1326 audit(605.254:49260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.7.10576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5016c2ebe9 code=0x7ffc0000 [ 580.000833][ T3378] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 580.020959][ T3378] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 580.039829][ T29] audit: type=1326 audit(605.285:49261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.7.10576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f5016c2ebe9 code=0x7ffc0000 [ 580.063214][ T29] audit: type=1326 audit(605.285:49262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.7.10576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5016c2ebe9 code=0x7ffc0000 [ 580.086589][ T29] audit: type=1326 audit(605.285:49263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.7.10576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5016c2ebe9 code=0x7ffc0000 [ 580.109885][ T29] audit: type=1326 audit(605.285:49264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.7.10576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5016c2ebe9 code=0x7ffc0000 [ 580.133096][ T29] audit: type=1326 audit(605.285:49265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.7.10576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5016c2ebe9 code=0x7ffc0000 [ 580.156254][ T29] audit: type=1326 audit(605.285:49266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.7.10576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5016c2ebe9 code=0x7ffc0000 [ 580.179652][ T29] audit: type=1326 audit(605.285:49267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=385 comm="syz.7.10576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5016c2ebe9 code=0x7ffc0000 [ 580.310756][ T390] 9pnet_fd: p9_fd_create_tcp (390): problem connecting socket to 127.0.0.1 [ 580.460568][ T393] lo speed is unknown, defaulting to 1000 [ 580.555966][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 580.582422][ T9] hid-generic 0000:0000:0000.0016: hidraw1: HID v0.00 Device [syz1] on syz0 [ 580.641042][ T409] ref_ctr increment failed for inode: 0x91c offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e33c0 [ 580.665116][ T408] uprobe: syz.2.10585:408 failed to unregister, leaking uprobe [ 580.756075][ T400] siw: device registration error -23 [ 580.850519][ T407] siw: device registration error -23 [ 580.904037][ T419] ref_ctr increment failed for inode: 0x5ff offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e0b80 [ 580.918324][ T418] uprobe: syz.1.10588:418 failed to unregister, leaking uprobe [ 580.929540][ T421] loop7: detected capacity change from 0 to 256 [ 580.942108][ T421] FAT-fs (loop7): Directory bread(block 64) failed [ 580.948759][ T421] FAT-fs (loop7): Directory bread(block 65) failed [ 580.955394][ T421] FAT-fs (loop7): Directory bread(block 66) failed [ 580.962014][ T421] FAT-fs (loop7): Directory bread(block 67) failed [ 580.968756][ T421] FAT-fs (loop7): Directory bread(block 68) failed [ 580.975379][ T421] FAT-fs (loop7): Directory bread(block 69) failed [ 580.981945][ T421] FAT-fs (loop7): Directory bread(block 70) failed [ 580.989256][ T421] FAT-fs (loop7): Directory bread(block 71) failed [ 580.995853][ T421] FAT-fs (loop7): Directory bread(block 72) failed [ 581.002440][ T421] FAT-fs (loop7): Directory bread(block 73) failed [ 581.124301][ T437] netlink: 'syz.0.10590': attribute type 1 has an invalid length. [ 581.155528][ T438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.184849][ T438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.730282][ T449] program syz.7.10597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.777318][ T450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.796196][ T455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.814543][ T450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.833791][ T455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.857088][ T463] loop1: detected capacity change from 0 to 512 [ 581.869800][ T463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.886099][ T463] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.10600: bg 0: block 361: padding at end of block bitmap is not set [ 581.898930][ T467] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 581.907848][ T467] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 581.925360][T28398] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.986508][ T474] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 581.993885][ T474] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 582.092200][ T477] netlink: 'syz.0.10604': attribute type 4 has an invalid length. [ 582.139395][ T479] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.184374][ T479] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.241724][ T479] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.298376][ T479] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.370637][T17832] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.393502][T17832] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.402951][T17832] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.416364][T17832] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.510916][ T493] bridge0: entered promiscuous mode [ 582.517025][ T493] macvtap1: entered allmulticast mode [ 582.522494][ T493] bridge0: entered allmulticast mode [ 582.530165][ T496] FAULT_INJECTION: forcing a failure. [ 582.530165][ T496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.543632][ T496] CPU: 0 UID: 0 PID: 496 Comm: syz.8.10610 Not tainted syzkaller #0 PREEMPT(voluntary) [ 582.543660][ T496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 582.543672][ T496] Call Trace: [ 582.543679][ T496] [ 582.543687][ T496] __dump_stack+0x1d/0x30 [ 582.543738][ T496] dump_stack_lvl+0xe8/0x140 [ 582.543764][ T496] dump_stack+0x15/0x1b [ 582.543785][ T496] should_fail_ex+0x265/0x280 [ 582.543874][ T496] should_fail+0xb/0x20 [ 582.543897][ T496] should_fail_usercopy+0x1a/0x20 [ 582.543923][ T496] _copy_from_user+0x1c/0xb0 [ 582.543951][ T496] copy_from_bpfptr+0x5c/0x90 [ 582.543999][ T496] bpf_prog_load+0x74a/0x1070 [ 582.544056][ T496] ? security_bpf+0x2b/0x90 [ 582.544164][ T496] __sys_bpf+0x462/0x7b0 [ 582.544212][ T496] __x64_sys_bpf+0x41/0x50 [ 582.544242][ T496] x64_sys_call+0x2aea/0x2ff0 [ 582.544270][ T496] do_syscall_64+0xd2/0x200 [ 582.544369][ T496] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 582.544394][ T496] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 582.544427][ T496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.544452][ T496] RIP: 0033:0x7f9ea605ebe9 [ 582.544506][ T496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.544529][ T496] RSP: 002b:00007f9ea4ac7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 582.544566][ T496] RAX: ffffffffffffffda RBX: 00007f9ea6295fa0 RCX: 00007f9ea605ebe9 [ 582.544580][ T496] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 582.544597][ T496] RBP: 00007f9ea4ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 582.544679][ T496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.544703][ T496] R13: 00007f9ea6296038 R14: 00007f9ea6295fa0 R15: 00007ffc8e0e0878 [ 582.544759][ T496] [ 582.729502][ T493] bridge0: port 3(macvtap1) entered blocking state [ 582.734759][ T503] netlink: 'syz.0.10609': attribute type 1 has an invalid length. [ 582.736135][ T493] bridge0: port 3(macvtap1) entered disabled state [ 582.773778][ T493] bridge0: left allmulticast mode [ 582.778870][ T493] bridge0: left promiscuous mode [ 582.785038][ T498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.797019][ T498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.896002][ T8099] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 582.904425][ T8099] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 583.077611][ T525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.086235][ T525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.117005][ T529] loop8: detected capacity change from 0 to 1024 [ 583.123811][ T529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 583.130783][ T529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 583.146385][ T529] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 583.431360][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 583.431379][ T29] audit: type=1326 audit(608.938:49548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.1.10620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 583.461673][ T29] audit: type=1326 audit(608.970:49549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.1.10620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 583.484684][ T29] audit: type=1326 audit(608.970:49550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.1.10620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 583.507651][ T29] audit: type=1326 audit(608.970:49551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.1.10620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 583.530662][ T29] audit: type=1326 audit(608.970:49552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.1.10620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 583.553706][ T29] audit: type=1326 audit(608.970:49553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=535 comm="syz.1.10620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 583.661689][ T565] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.683601][ T567] loop7: detected capacity change from 0 to 512 [ 583.700265][ T567] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.718154][ T565] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.728666][ T29] audit: type=1400 audit(609.243:49554): avc: denied { read } for pid=566 comm="syz.7.10628" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 583.769934][ T566] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.796067][ T565] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.872347][ T574] loop7: detected capacity change from 0 to 512 [ 583.891147][ T565] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.901452][T28978] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.925209][ T574] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.942284][ T580] vhci_hcd: invalid port number 66 [ 583.947606][ T580] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0 [ 583.962953][ T574] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10630: bg 0: block 361: padding at end of block bitmap is not set [ 584.045215][T17832] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.053986][T17832] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.062760][T26313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.081308][ T580] netlink: 'syz.2.10632': attribute type 1 has an invalid length. [ 584.089450][ T580] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10632'. [ 584.102201][T17832] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.118040][T17832] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.154620][ T587] ref_ctr increment failed for inode: 0xadf offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881189eb3c0 [ 584.216010][ T29] audit: type=1326 audit(609.715:49555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=589 comm="syz.0.10637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eebeebe9 code=0x7ffc0000 [ 584.239211][ T29] audit: type=1326 audit(609.715:49556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=589 comm="syz.0.10637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22eebeebe9 code=0x7ffc0000 [ 584.262173][ T29] audit: type=1326 audit(609.715:49557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=589 comm="syz.0.10637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f22eebeebe9 code=0x7ffc0000 [ 584.285425][ T586] uprobe: syz.7.10635:586 failed to unregister, leaking uprobe [ 584.381274][ T595] lo speed is unknown, defaulting to 1000 [ 584.387693][ T37] IPVS: starting estimator thread 0... [ 584.414393][ T607] program syz.7.10642 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 584.428674][ T609] FAULT_INJECTION: forcing a failure. [ 584.428674][ T609] name failslab, interval 1, probability 0, space 0, times 0 [ 584.441458][ T609] CPU: 0 UID: 0 PID: 609 Comm: syz.1.10643 Not tainted syzkaller #0 PREEMPT(voluntary) [ 584.441536][ T609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 584.441553][ T609] Call Trace: [ 584.441563][ T609] [ 584.441572][ T609] __dump_stack+0x1d/0x30 [ 584.441594][ T609] dump_stack_lvl+0xe8/0x140 [ 584.441612][ T609] dump_stack+0x15/0x1b [ 584.441629][ T609] should_fail_ex+0x265/0x280 [ 584.441769][ T609] ? __se_sys_memfd_create+0x1cc/0x590 [ 584.441799][ T609] should_failslab+0x8c/0xb0 [ 584.441829][ T609] __kmalloc_cache_noprof+0x4c/0x320 [ 584.441867][ T609] __se_sys_memfd_create+0x1cc/0x590 [ 584.441895][ T609] __x64_sys_memfd_create+0x31/0x40 [ 584.441923][ T609] x64_sys_call+0x2abe/0x2ff0 [ 584.441944][ T609] do_syscall_64+0xd2/0x200 [ 584.441977][ T609] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 584.442029][ T609] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 584.442071][ T609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.442128][ T609] RIP: 0033:0x7fbe00ceebe9 [ 584.442193][ T609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.442274][ T609] RSP: 002b:00007fbdff756d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 584.442296][ T609] RAX: ffffffffffffffda RBX: 000000000000059d RCX: 00007fbe00ceebe9 [ 584.442337][ T609] RDX: 00007fbdff756dec RSI: 0000000000000000 RDI: 00007fbe00d727e8 [ 584.442350][ T609] RBP: 0000200000000000 R08: 00007fbdff756b07 R09: 0000000000000000 [ 584.442362][ T609] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 584.442374][ T609] R13: 00007fbdff756dec R14: 00007fbdff756df0 R15: 00007ffd887435c8 [ 584.442493][ T609] [ 584.621806][ T604] IPVS: using max 1920 ests per chain, 96000 per kthread [ 584.667806][ T614] 9pnet_fd: p9_fd_create_tcp (614): problem connecting socket to 127.0.0.1 [ 585.029431][ T622] netlink: 'syz.1.10648': attribute type 10 has an invalid length. [ 585.037501][ T622] netlink: 55 bytes leftover after parsing attributes in process `syz.1.10648'. [ 585.067435][ T624] loop8: detected capacity change from 0 to 512 [ 585.080524][ T624] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 585.103798][ T624] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.10649: bg 0: block 361: padding at end of block bitmap is not set [ 585.229721][T28978] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.248391][ T632] ref_ctr increment failed for inode: 0x61e offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e1cc0 [ 585.259911][ T631] uprobe: syz.8.10652:631 failed to unregister, leaking uprobe [ 585.605340][ T644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.622425][ T644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.222152][ T667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10660'. [ 586.259956][ T669] netlink: 'syz.8.10662': attribute type 32 has an invalid length. [ 586.268107][ T669] netlink: 64 bytes leftover after parsing attributes in process `syz.8.10662'. [ 586.452229][ T678] program syz.7.10666 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 586.480074][ T680] 9pnet_fd: p9_fd_create_tcp (680): problem connecting socket to 127.0.0.1 [ 586.701397][ T686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.710220][ T686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.941197][ T8099] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 586.949312][ T8099] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 587.042527][ T694] tipc: Enabled bearer , priority 0 [ 587.052858][ T694] tipc: Disabling bearer [ 587.149354][ T692] siw: device registration error -23 [ 587.419617][ T706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.429733][ T717] vhci_hcd: invalid port number 66 [ 587.435533][ T717] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0 [ 587.443520][ T706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.493675][ T717] loop1: detected capacity change from 0 to 8192 [ 587.545765][ T717] loop1: p1 p2 p3 p4 [ 587.549968][ T717] loop1: p1 start 51379968 is beyond EOD, truncated [ 587.557399][ T717] loop1: p3 size 15991040 extends beyond EOD, truncated [ 587.565073][ T717] loop1: p4 start 16711680 is beyond EOD, truncated [ 587.578706][ T717] netlink: 'syz.1.10677': attribute type 1 has an invalid length. [ 587.586635][ T717] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10677'. [ 587.630664][ T724] program syz.1.10680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 587.703736][ T727] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 587.711194][ T727] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 587.963590][ T738] loop1: detected capacity change from 0 to 128 [ 587.976972][ T738] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10686'. [ 587.995545][ T738] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10686'. [ 588.043795][ T745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10688'. [ 588.052889][ T745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10688'. [ 588.141073][ T745] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10688'. [ 588.214650][ T29] kauditd_printk_skb: 302 callbacks suppressed [ 588.214668][ T29] audit: type=1326 audit(613.956:49860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.1.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 588.290597][ T29] audit: type=1326 audit(613.988:49861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.1.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 588.313574][ T29] audit: type=1326 audit(613.988:49862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.1.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 588.336585][ T29] audit: type=1326 audit(613.988:49863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.1.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 588.359750][ T29] audit: type=1326 audit(613.988:49864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.1.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 588.382765][ T29] audit: type=1326 audit(613.988:49865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.1.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 588.406122][ T29] audit: type=1326 audit(613.988:49866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.1.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 588.429534][ T29] audit: type=1326 audit(613.988:49867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.1.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 588.429629][ T757] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 588.452890][ T29] audit: type=1326 audit(613.988:49868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.1.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 588.460770][ T757] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 588.483483][ T29] audit: type=1326 audit(613.988:49869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=753 comm="syz.1.10691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 588.599989][ T765] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.661112][ T774] vhci_hcd: invalid port number 66 [ 588.666307][ T774] vhci_hcd: default hub control req: 1f27 v0000 i0042 l0 [ 588.675858][ T765] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.747223][ T765] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.761802][ T774] netlink: 'syz.2.10700': attribute type 1 has an invalid length. [ 588.785707][ T765] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.865930][T17817] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.893015][T17817] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.901410][T17817] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.905705][ T780] loop8: detected capacity change from 0 to 256 [ 588.918732][T17832] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.924470][ T780] FAT-fs (loop8): Directory bread(block 64) failed [ 588.933860][ T780] FAT-fs (loop8): Directory bread(block 65) failed [ 588.940691][ T780] FAT-fs (loop8): Directory bread(block 66) failed [ 588.947507][ T780] FAT-fs (loop8): Directory bread(block 67) failed [ 588.954132][ T780] FAT-fs (loop8): Directory bread(block 68) failed [ 588.957374][ T781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.961076][ T780] FAT-fs (loop8): Directory bread(block 69) failed [ 588.969373][ T781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.975947][ T780] FAT-fs (loop8): Directory bread(block 70) failed [ 588.990275][ T780] FAT-fs (loop8): Directory bread(block 71) failed [ 588.996982][ T780] FAT-fs (loop8): Directory bread(block 72) failed [ 589.003858][ T780] FAT-fs (loop8): Directory bread(block 73) failed [ 589.100331][ T790] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 589.107983][ T790] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 589.424925][ T784] loop1: detected capacity change from 0 to 1024 [ 589.458861][ T784] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.722384][ T812] FAULT_INJECTION: forcing a failure. [ 589.722384][ T812] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 589.737723][ T812] CPU: 0 UID: 0 PID: 812 Comm: syz.7.10711 Not tainted syzkaller #0 PREEMPT(voluntary) [ 589.737754][ T812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 589.737770][ T812] Call Trace: [ 589.737853][ T812] [ 589.737862][ T812] __dump_stack+0x1d/0x30 [ 589.737891][ T812] dump_stack_lvl+0xe8/0x140 [ 589.738090][ T812] dump_stack+0x15/0x1b [ 589.738109][ T812] should_fail_ex+0x265/0x280 [ 589.738138][ T812] should_fail_alloc_page+0xf2/0x100 [ 589.738173][ T812] __alloc_frozen_pages_noprof+0xff/0x360 [ 589.738219][ T812] alloc_pages_mpol+0xb3/0x250 [ 589.738263][ T812] alloc_pages_noprof+0x90/0x130 [ 589.738385][ T812] pte_alloc_one+0x2d/0x120 [ 589.738435][ T812] __pte_alloc+0x32/0x2b0 [ 589.738470][ T812] handle_mm_fault+0x1c55/0x2c20 [ 589.738502][ T812] ? __rcu_read_lock+0x37/0x50 [ 589.738523][ T812] ? __pte_offset_map_lock+0x1d4/0x230 [ 589.738619][ T812] __get_user_pages+0x102e/0x1fa0 [ 589.738664][ T812] __gup_longterm_locked+0x8f4/0xe60 [ 589.738696][ T812] ? exc_page_fault+0x62/0xa0 [ 589.738782][ T812] ? should_fail_ex+0xdb/0x280 [ 589.738807][ T812] pin_user_pages_remote+0x7e/0xb0 [ 589.738833][ T812] process_vm_rw+0x484/0x960 [ 589.738900][ T812] ? restore_fpregs_from_fpstate+0x61/0x120 [ 589.738982][ T812] __x64_sys_process_vm_readv+0x78/0x90 [ 589.739014][ T812] x64_sys_call+0x1874/0x2ff0 [ 589.739042][ T812] do_syscall_64+0xd2/0x200 [ 589.739102][ T812] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 589.739129][ T812] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 589.739157][ T812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.739242][ T812] RIP: 0033:0x7f5016c2ebe9 [ 589.739258][ T812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.739324][ T812] RSP: 002b:00007f5015697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 589.739344][ T812] RAX: ffffffffffffffda RBX: 00007f5016e65fa0 RCX: 00007f5016c2ebe9 [ 589.739357][ T812] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 00000000000004e5 [ 589.739380][ T812] RBP: 00007f5015697090 R08: 0000000000000286 R09: 0000000000000000 [ 589.739418][ T812] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 589.739434][ T812] R13: 00007f5016e66038 R14: 00007f5016e65fa0 R15: 00007ffca8eae7f8 [ 589.739456][ T812] [ 590.028681][ T816] program syz.0.10712 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.030020][ T806] lo speed is unknown, defaulting to 1000 [ 590.046060][ T817] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.093101][ T817] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.150036][ T37] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 590.158302][ T37] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 590.169171][ T817] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.193909][ T825] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 590.203461][ T825] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 590.214457][ T817] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.249583][ T3391] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 590.259231][ T3391] hid-generic 0000:0000:0000.001A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 590.389277][ T829] ref_ctr increment failed for inode: 0xb39 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e5c00 [ 590.411560][ T828] uprobe: syz.7.10717:828 failed to unregister, leaking uprobe [ 590.476079][T28398] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.503962][ T833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.512719][ T833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.567328][ T827] siw: device registration error -23 [ 590.575594][ T819] siw: device registration error -23 [ 590.693503][ T841] lo speed is unknown, defaulting to 1000 [ 590.938039][ T841] lo speed is unknown, defaulting to 1000 [ 591.041262][ T841] lo speed is unknown, defaulting to 1000 [ 591.196736][ T856] program syz.7.10724 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 591.227370][ T841] lo speed is unknown, defaulting to 1000 [ 591.307643][ T862] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 591.321962][ T862] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 591.509205][ T841] lo speed is unknown, defaulting to 1000 [ 592.447959][ T879] lo speed is unknown, defaulting to 1000 [ 592.732214][ T884] netlink: 'syz.0.10733': attribute type 1 has an invalid length. [ 592.836613][ T894] program syz.2.10736 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 592.849399][ T892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.888186][ T892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.283262][ T902] loop7: detected capacity change from 0 to 256 [ 593.296888][ T902] FAT-fs (loop7): Directory bread(block 64) failed [ 593.305066][ T902] FAT-fs (loop7): Directory bread(block 65) failed [ 593.312639][ T902] FAT-fs (loop7): Directory bread(block 66) failed [ 593.319457][ T902] FAT-fs (loop7): Directory bread(block 67) failed [ 593.326145][ T902] FAT-fs (loop7): Directory bread(block 68) failed [ 593.332884][ T902] FAT-fs (loop7): Directory bread(block 69) failed [ 593.339574][ T902] FAT-fs (loop7): Directory bread(block 70) failed [ 593.346098][ T902] FAT-fs (loop7): Directory bread(block 71) failed [ 593.352687][ T902] FAT-fs (loop7): Directory bread(block 72) failed [ 593.359425][ T902] FAT-fs (loop7): Directory bread(block 73) failed [ 593.408477][ T910] loop7: detected capacity change from 0 to 512 [ 593.424284][ T910] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.439519][ T910] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10742: bg 0: block 361: padding at end of block bitmap is not set [ 593.474421][T26313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.499846][ T31] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.510450][ T915] __nla_validate_parse: 6 callbacks suppressed [ 593.510481][ T915] netlink: 27 bytes leftover after parsing attributes in process `syz.1.10744'. [ 593.516759][ T31] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.550063][ T31] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.565781][ T31] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.577692][ T924] sctp: [Deprecated]: syz.8.10748 (pid 924) Use of int in max_burst socket option. [ 593.577692][ T924] Use struct sctp_assoc_value instead [ 593.596934][ T924] loop8: detected capacity change from 0 to 512 [ 593.604131][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 593.604158][ T29] audit: type=1326 audit(619.615:50016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.1.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 593.617486][ T9] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 593.633310][ T29] audit: type=1326 audit(619.615:50017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.1.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 593.664325][ T924] EXT4-fs: Ignoring removed mblk_io_submit option [ 593.674019][ T924] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 593.699547][ T29] audit: type=1326 audit(619.615:50018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.1.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 593.722533][ T29] audit: type=1326 audit(619.615:50019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.1.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 593.733615][ T9] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 593.745450][ T29] audit: type=1326 audit(619.615:50020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.1.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 593.745499][ T29] audit: type=1326 audit(619.615:50021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.1.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 593.745524][ T29] audit: type=1326 audit(619.615:50022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.1.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 593.823974][ T29] audit: type=1326 audit(619.615:50023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.1.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 593.846992][ T29] audit: type=1326 audit(619.615:50024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.1.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 593.870187][ T29] audit: type=1326 audit(619.615:50025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.1.10746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe00ceebe9 code=0x7ffc0000 [ 593.894958][ T931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.899629][ T924] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 593.903650][ T931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.911561][ T924] System zones: 1-12 [ 593.923495][ T924] EXT4-fs (loop8): 1 truncate cleaned up [ 593.930976][ T924] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.002181][T28978] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.058292][ T941] netlink: 'syz.2.10749': attribute type 1 has an invalid length. [ 594.065429][ T943] loop8: detected capacity change from 0 to 256 [ 594.085874][ T943] FAT-fs (loop8): Directory bread(block 64) failed [ 594.102170][ T943] FAT-fs (loop8): Directory bread(block 65) failed [ 594.117901][ T943] FAT-fs (loop8): Directory bread(block 66) failed [ 594.136964][ T943] FAT-fs (loop8): Directory bread(block 67) failed [ 594.150366][ T943] FAT-fs (loop8): Directory bread(block 68) failed [ 594.157211][ T943] FAT-fs (loop8): Directory bread(block 69) failed [ 594.164201][ T943] FAT-fs (loop8): Directory bread(block 70) failed [ 594.171491][ T943] FAT-fs (loop8): Directory bread(block 71) failed [ 594.178487][ T943] FAT-fs (loop8): Directory bread(block 72) failed [ 594.180618][ T945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.185156][ T943] FAT-fs (loop8): Directory bread(block 73) failed [ 594.193775][ T945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.242169][ T950] loop8: detected capacity change from 0 to 512 [ 594.262531][ T950] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.277415][ T950] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.10754: bg 0: block 361: padding at end of block bitmap is not set [ 594.302898][T28978] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.340774][ T961] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.360723][ T963] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.386560][ T961] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.415889][ T963] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.444131][ T961] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.491325][ T963] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.540399][ T961] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.567989][ T963] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.589011][ T971] tipc: Enabled bearer , priority 0 [ 594.598424][ T971] tipc: Disabling bearer [ 594.633430][T17838] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.645702][T17817] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.657792][T17817] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.680241][T17817] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.715747][ T976] ref_ctr increment failed for inode: 0xb6f offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881189ebf40 [ 594.751992][ T974] uprobe: syz.7.10763:974 failed to unregister, leaking uprobe [ 594.840878][ T977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.849632][ T977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.955722][ T988] loop7: detected capacity change from 0 to 512 [ 594.979019][ T988] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.995134][ T988] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.10767: bg 0: block 361: padding at end of block bitmap is not set [ 595.031997][T26313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.391994][ T1005] tipc: Started in network mode [ 595.397037][ T1005] tipc: Node identity ee95cd5b49be, cluster identity 4711 [ 595.404197][ T1005] tipc: Enabled bearer , priority 0 [ 595.463954][ T1007] tipc: Disabling bearer [ 595.532215][ T1009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.540806][ T1009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.627573][ T1020] loop7: detected capacity change from 0 to 512 [ 595.634944][ T1020] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 595.653525][ T1020] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.10778: Failed to acquire dquot type 1 [ 595.665796][ T1020] EXT4-fs (loop7): 1 truncate cleaned up [ 595.671869][ T1020] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 595.694501][T26313] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.797611][ T1039] tipc: Enabled bearer , priority 0 [ 595.806700][ T1039] tipc: Disabling bearer [ 595.942144][ T1047] ref_ctr increment failed for inode: 0xbaf offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff8881197e7300 [ 595.953665][ T1046] uprobe: syz.7.10789:1046 failed to unregister, leaking uprobe [ 596.051059][ T1051] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10791'. [ 596.084712][ T1053] loop1: detected capacity change from 0 to 512 [ 596.091514][ T1053] EXT4-fs: Ignoring removed mblk_io_submit option [ 596.098395][ T1053] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 596.109568][ T1053] EXT4-fs (loop1): 1 truncate cleaned up [ 596.115635][ T1053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.519959][ T1061] ================================================================== [ 596.528129][ T1061] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 596.536461][ T1061] [ 596.538791][ T1061] write to 0xffff888120413254 of 4 bytes by task 1053 on cpu 1: [ 596.546423][ T1061] xas_set_mark+0x12b/0x140 [ 596.550942][ T1061] __folio_start_writeback+0x1dd/0x440 [ 596.556433][ T1061] ext4_bio_write_folio+0x5ad/0x9f0 [ 596.561653][ T1061] mpage_process_page_bufs+0x4a1/0x620 [ 596.567123][ T1061] mpage_prepare_extent_to_map+0x786/0xc00 [ 596.572969][ T1061] ext4_do_writepages+0xa05/0x2750 [ 596.578122][ T1061] ext4_writepages+0x176/0x300 [ 596.582890][ T1061] do_writepages+0x1c6/0x310 [ 596.587495][ T1061] file_write_and_wait_range+0x156/0x2c0 [ 596.593141][ T1061] generic_buffers_fsync_noflush+0x45/0x120 [ 596.599042][ T1061] ext4_sync_file+0x1ab/0x690 [ 596.603735][ T1061] vfs_fsync_range+0x10a/0x130 [ 596.608508][ T1061] ext4_buffered_write_iter+0x34f/0x3c0 [ 596.614256][ T1061] ext4_file_write_iter+0xdbf/0xf00 [ 596.619469][ T1061] iter_file_splice_write+0x666/0xa60 [ 596.624847][ T1061] direct_splice_actor+0x156/0x2a0 [ 596.629974][ T1061] splice_direct_to_actor+0x312/0x680 [ 596.635360][ T1061] do_splice_direct+0xda/0x150 [ 596.640139][ T1061] do_sendfile+0x380/0x650 [ 596.644565][ T1061] __x64_sys_sendfile64+0x105/0x150 [ 596.649774][ T1061] x64_sys_call+0x2bb0/0x2ff0 [ 596.654457][ T1061] do_syscall_64+0xd2/0x200 [ 596.658984][ T1061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.664887][ T1061] [ 596.667222][ T1061] read to 0xffff888120413254 of 4 bytes by task 1061 on cpu 0: [ 596.674855][ T1061] filemap_write_and_wait_range+0xfc/0x340 [ 596.680774][ T1061] filemap_invalidate_pages+0xa4/0x1a0 [ 596.686322][ T1061] kiocb_invalidate_pages+0x6e/0x80 [ 596.691527][ T1061] __iomap_dio_rw+0x5d4/0x1250 [ 596.696302][ T1061] iomap_dio_rw+0x40/0x90 [ 596.700639][ T1061] ext4_file_write_iter+0xad9/0xf00 [ 596.705853][ T1061] iter_file_splice_write+0x666/0xa60 [ 596.711237][ T1061] direct_splice_actor+0x156/0x2a0 [ 596.716357][ T1061] splice_direct_to_actor+0x312/0x680 [ 596.721744][ T1061] do_splice_direct+0xda/0x150 [ 596.726519][ T1061] do_sendfile+0x380/0x650 [ 596.730947][ T1061] __x64_sys_sendfile64+0x105/0x150 [ 596.736177][ T1061] x64_sys_call+0x2bb0/0x2ff0 [ 596.740872][ T1061] do_syscall_64+0xd2/0x200 [ 596.745397][ T1061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.751313][ T1061] [ 596.753632][ T1061] value changed: 0x0a000021 -> 0x04000021 [ 596.759348][ T1061] [ 596.761667][ T1061] Reported by Kernel Concurrency Sanitizer on: [ 596.767818][ T1061] CPU: 0 UID: 0 PID: 1061 Comm: syz.1.10792 Not tainted syzkaller #0 PREEMPT(voluntary) [ 596.777626][ T1061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 596.787683][ T1061] ================================================================== [ 596.812681][ T1061] ================================================================== [ 596.820817][ T1061] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_clear_mark [ 596.829291][ T1061] [ 596.831618][ T1061] write to 0xffff888120413254 of 4 bytes by task 1053 on cpu 1: [ 596.839243][ T1061] xas_clear_mark+0x16b/0x180 [ 596.843956][ T1061] __folio_start_writeback+0x2ce/0x440 [ 596.849429][ T1061] ext4_bio_write_folio+0x5ad/0x9f0 [ 596.854639][ T1061] mpage_process_page_bufs+0x4a1/0x620 [ 596.860099][ T1061] mpage_prepare_extent_to_map+0x786/0xc00 [ 596.865918][ T1061] ext4_do_writepages+0x708/0x2750 [ 596.871053][ T1061] ext4_writepages+0x176/0x300 [ 596.875816][ T1061] do_writepages+0x1c6/0x310 [ 596.880417][ T1061] file_write_and_wait_range+0x156/0x2c0 [ 596.886153][ T1061] generic_buffers_fsync_noflush+0x45/0x120 [ 596.892053][ T1061] ext4_sync_file+0x1ab/0x690 [ 596.896760][ T1061] vfs_fsync_range+0x10a/0x130 [ 596.901548][ T1061] ext4_buffered_write_iter+0x34f/0x3c0 [ 596.907116][ T1061] ext4_file_write_iter+0xdbf/0xf00 [ 596.912512][ T1061] iter_file_splice_write+0x666/0xa60 [ 596.917899][ T1061] direct_splice_actor+0x156/0x2a0 [ 596.923029][ T1061] splice_direct_to_actor+0x312/0x680 [ 596.928403][ T1061] do_splice_direct+0xda/0x150 [ 596.933168][ T1061] do_sendfile+0x380/0x650 [ 596.937598][ T1061] __x64_sys_sendfile64+0x105/0x150 [ 596.942810][ T1061] x64_sys_call+0x2bb0/0x2ff0 [ 596.947493][ T1061] do_syscall_64+0xd2/0x200 [ 596.952008][ T1061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.957907][ T1061] [ 596.960231][ T1061] read to 0xffff888120413254 of 4 bytes by task 1061 on cpu 0: [ 596.967783][ T1061] filemap_write_and_wait_range+0xfc/0x340 [ 596.973648][ T1061] filemap_invalidate_pages+0xa4/0x1a0 [ 596.979124][ T1061] kiocb_invalidate_pages+0x6e/0x80 [ 596.984332][ T1061] __iomap_dio_rw+0x5d4/0x1250 [ 596.989112][ T1061] iomap_dio_rw+0x40/0x90 [ 596.993453][ T1061] ext4_file_write_iter+0xad9/0xf00 [ 596.998668][ T1061] iter_file_splice_write+0x666/0xa60 [ 597.004048][ T1061] direct_splice_actor+0x156/0x2a0 [ 597.009167][ T1061] splice_direct_to_actor+0x312/0x680 [ 597.014548][ T1061] do_splice_direct+0xda/0x150 [ 597.019319][ T1061] do_sendfile+0x380/0x650 [ 597.023753][ T1061] __x64_sys_sendfile64+0x105/0x150 [ 597.028994][ T1061] x64_sys_call+0x2bb0/0x2ff0 [ 597.033680][ T1061] do_syscall_64+0xd2/0x200 [ 597.038209][ T1061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.044112][ T1061] [ 597.046438][ T1061] value changed: 0x0e000021 -> 0x04000021 [ 597.052172][ T1061] [ 597.054496][ T1061] Reported by Kernel Concurrency Sanitizer on: [ 597.060649][ T1061] CPU: 0 UID: 0 PID: 1061 Comm: syz.1.10792 Not tainted syzkaller #0 PREEMPT(voluntary) [ 597.070466][ T1061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.080530][ T1061] ================================================================== [ 597.117754][T28398] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.285967][T17817] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.296893][T17817] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.308445][T17817] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.320404][T17817] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0