last executing test programs: 51.387006498s ago: executing program 2 (id=387): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000c40)='sched_switch\x00', r0, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="070000000400000000070000000746002c"], 0x50) 51.272414144s ago: executing program 2 (id=388): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x2405, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x200006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x10000003, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008810}, 0x8000) 51.179366638s ago: executing program 2 (id=389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$vcsu(&(0x7f0000000300), 0x80000000, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000400)={0x11, 0x7, 0x2, {{0x4, '^/$,'}}}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) mincore(&(0x7f0000197000/0x1000)=nil, 0x1000, &(0x7f0000001140)=""/172) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzszzGKwkAABdAfMpvNsrvoEWwsBAtb72DrfXIeexstvY+tpUJMxAuICO8xxcz/v5nwZv/fz682l0lyTdrTkJSf4fLbn+yrx7h0s029XiSpSkr+0t3zZZ3Mx9ExTerpV7JK358PbTN2292LPwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+EWAAD//zEFCkI=") r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000001200)=0x40, 0x4) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000080)={@initdev, 0x0}, &(0x7f0000000180)=0x14) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001080), 0x28200, 0x0) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f0000001100)={0x2, &(0x7f00000010c0)=[{0x7, 0x49, 0x42, 0x9}, {0x678c, 0x81, 0x1, 0x5}]}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x6c, r3, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x4}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc050}, 0x880) 50.664288205s ago: executing program 2 (id=397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES16=r0, @ANYRESOCT=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000dc0)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = syz_io_uring_setup(0x3b85, &(0x7f00000014c0)={0x0, 0xad84, 0x1, 0xa2, 0x339}, &(0x7f0000000180), &(0x7f0000001440)) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r3, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000140)=[{0x0}], 0x1) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x600) 50.431934657s ago: executing program 2 (id=398): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000c40)='sched_switch\x00', r0, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="070000000400000000070000000746002c"], 0x50) 49.321501882s ago: executing program 2 (id=403): r0 = socket$inet(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2100, 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xfffffffe}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="18008000000000000000000003000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd, &(0x7f0000000100)=""/13, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r4, 0x0, 0x7}, 0x18) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x12000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r1, 0x0, 0x0, 0x6, &(0x7f0000000700), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r6, @ANYRESHEX=r6, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES16=r7, @ANYRES8=r5, @ANYBLOB, @ANYRES64=r8], 0x20) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB='8\x00\x00\x00 \x00\x00', @ANYRES32=r3, @ANYBLOB="f34243c37a5d32633236e1228304fb4ea1b507da0c4091f8f9d98ac781b6e99335", @ANYRES32, @ANYBLOB, @ANYRES64=r8], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@fallback, 0xffffffffffffffff, 0x0, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r8}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 49.321037602s ago: executing program 32 (id=403): r0 = socket$inet(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r0], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2100, 0x40) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0xfffffffe}, 0x8) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="18008000000000000000000003000000"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xd, &(0x7f0000000100)=""/13, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x1, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', r4, 0x0, 0x7}, 0x18) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x12000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r1, 0x0, 0x0, 0x6, &(0x7f0000000700), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r6, @ANYRESHEX=r6, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES16=r7, @ANYRES8=r5, @ANYBLOB, @ANYRES64=r8], 0x20) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYBLOB='8\x00\x00\x00 \x00\x00', @ANYRES32=r3, @ANYBLOB="f34243c37a5d32633236e1228304fb4ea1b507da0c4091f8f9d98ac781b6e99335", @ANYRES32, @ANYBLOB, @ANYRES64=r8], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={@fallback, 0xffffffffffffffff, 0x0, 0x2000, 0xffffffffffffffff, @value, @void, @void, @void, r8}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) 5.114621202s ago: executing program 5 (id=1016): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x2405, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000010000000000000000000004181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x200006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x10000003, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008810}, 0x8000) 5.029766836s ago: executing program 5 (id=1017): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x200}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 4.993971408s ago: executing program 5 (id=1019): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) write(r0, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) 4.95498485s ago: executing program 5 (id=1020): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='X\xe1MJ\x05tp\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r4, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000017c0)={'syztnl1\x00', &(0x7f0000001740)={'syztnl0\x00', 0x0, 0x4, 0x7, 0x0, 0x6, 0x2845823901a3dc14, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x10, 0x7800, 0x8, 0x80}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001800)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f0000001840)=0x14) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001880)=0x0, &(0x7f00000018c0)=0x4) r8 = socket(0x10, 0x803, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_RT_PRIORITY={0x8, 0x9, 0x7ff}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000001b40)={&(0x7f00000002c0), 0xc, &(0x7f0000001b00)={&(0x7f0000001940)={0x190, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x24050815}, 0x1) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r13 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r12, r12, 0x2f, 0x0, @void}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000002580)={r13, r14, 0x4, r12}, 0x10) r15 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r15, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r16 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r16, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000048002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x20000000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r16, 0x84009422, &(0x7f0000000640)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(r15, 0xca289435, &(0x7f0000000740)={0x3, 0x2, @start={r17, 0x0, "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", "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"}, [0x3, 0x8, 0x2, 0x0, 0x8, 0x2, 0x5, 0x0, 0x5, 0x5b1, 0x9, 0x7f, 0x3, 0x9, 0x7, 0x5, 0x8e3, 0x0, 0x4, 0x0, 0x7, 0x9d, 0x1, 0x9, 0xb, 0x3, 0x8001, 0x2, 0x80, 0x1c8, 0x4, 0x5, 0x7, 0xffffffffffffffff, 0x8, 0x7, 0x2, 0xfffffffffffff001, 0x0, 0x1000, 0x2, 0x3, 0x10, 0x7fffffffffffffff, 0x6, 0x9, 0xfffffffffffffff8, 0x81, 0x8539, 0xffffffffffffff00, 0x0, 0x8, 0x10, 0xa18, 0x101, 0x5, 0x80000001, 0x9, 0x2, 0x7, 0x8, 0x3da, 0x7, 0x1]}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000400)={{r14}, 0x0, 0x0, @unused=[0x8000000000000000, 0x8, 0x7860, 0xfff], @devid=r17}) 4.809189528s ago: executing program 5 (id=1025): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x300, 0x300, 0x0, 0x300, 0x1a0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x70bd2a, 0xffffffff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}}, 0x40084c0) r1 = socket$inet(0x2, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000100), 0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000040da093a00000000000001090224000100001000090400002103000000092104800001220700090581034010fd00"], 0x0) syz_emit_ethernet(0x146, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000001100000fe80000000000000000000000000000000000000000000000001892000000000000031"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_clone(0x2004011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f00000011c0)={{r3}, r4, 0x0, @inherit={0x58, &(0x7f0000000bc0)=ANY=[@ANYBLOB="010000000100000002000000000000000600000000000000020400000000000030002000000000000d00000000000000e0e300000000000084650c4b84a8c4650d00000000100000020000000000000007000000080000400a00000000000000b2ec7c5874ba516d6cd53314c4bfcaf1cc4fd5c38fee6defe9c10e87a61000721b2f61b475b76d715f8d08cab1ad8188dc6f651444ab44bcd746385866c749151e6e5a9fd8bc0893673b72f93a24d0805b4fdc1a861ed9dcb4b6e392d6d6e84008bf770419db3e829058f6a85a0a2a501340d911307c5eee68776a65741dc8c30420ffe153e64fa26d9db095aa392246c54b8355de1f"]}, @name="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"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x400, 0x0, 0x40, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10000, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 2.939027022s ago: executing program 1 (id=1051): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) listen(0xffffffffffffffff, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x200}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 2.919627853s ago: executing program 1 (id=1052): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xffffff00, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x23}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'dvmrp0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r2 = inotify_init1(0x80800) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) r4 = syz_usb_connect$cdc_ncm(0x5, 0x93, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x2, 0x1, 0x1, 0x40, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "f3d57736"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7, 0xfe, 0x4}, {0x6, 0x24, 0x1a, 0x9cc3, 0x3d}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x15}, @mdlm={0x15, 0x24, 0x12, 0x7}, @dmm={0x7, 0x24, 0x14, 0x4d8, 0xa8}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x3c, 0x6}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x5, 0x1, 0x3, 0xff, 0x8f}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3801}}]}) syz_usb_disconnect(r4) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close(r2) 2.740327442s ago: executing program 3 (id=1058): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @initdev, 0x0}, &(0x7f0000000140)=0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), 0x0}, 0x20) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000080), 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000) pipe2$9p(0x0, 0x84800) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x0, 0x700, 0x4000002, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffd, 0x0, 0x81, 0x4, 0x0, @remote, @multicast2}}}}) 2.470151565s ago: executing program 3 (id=1066): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x50) 2.440564667s ago: executing program 3 (id=1068): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setgroups(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x8, 0x3, 0x380, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xffffff00, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0x23}, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'dvmrp0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r2 = inotify_init1(0x80800) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r3, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_usb_connect$cdc_ncm(0x5, 0x98, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x1, 0x40, 0x40, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "f3d57736"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7, 0xfe, 0x4}, {0xffbc, 0x24, 0x1a, 0x9cc3, 0x3d}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x15}, @mdlm={0x15, 0x24, 0x12, 0x7}, @dmm={0x7, 0x24, 0x14, 0x4d8, 0xa8}, @obex={0x5, 0x24, 0x15, 0xfffc}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x5, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x2, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x3c, 0x6}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x5, 0x1, 0x3, 0xff, 0x8f}, 0x8, &(0x7f0000000280)={0x5, 0xf, 0x8, 0x1}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x3801}}]}) syz_usb_disconnect(r5) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) close(r2) 1.936262953s ago: executing program 1 (id=1077): socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@multicast1, @initdev, 0x0}, &(0x7f0000000140)=0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), 0x0}, 0x20) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000080), 0x4) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x48000) pipe2$9p(0x0, 0x84800) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x0, 0x700, 0x4000002, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffd, 0x0, 0x81, 0x4, 0x0, @remote, @multicast2}}}}) 1.5936484s ago: executing program 1 (id=1078): sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000003b5500000900eb9970f7a467e77c0000dcf74527e4e312d8572dabc6c7ee2580f15bed657af802e14eec998e02df63b407402f2521b26d6f1d73c404560fffc263049475026f08b0ef9bc9a72cde12c122d115ee05b3e84e85e76049039a0bcfa784944bf29898923f0f0de25ce6782a820e9296bd7815"], 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000040), &(0x7f0000000280)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000200)={0xfd, 0xb7, 0x12}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000001780), &(0x7f00000017c0)=0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) stat(0x0, &(0x7f0000000540)) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) unshare(0x2c020400) 1.528933873s ago: executing program 4 (id=1079): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x50) 1.445574448s ago: executing program 5 (id=1080): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$vcsu(&(0x7f0000000300), 0x80000000, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000400)={0x11, 0x7, 0x2, {{0x4, '^/$,'}}}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) mincore(&(0x7f0000197000/0x1000)=nil, 0x1000, &(0x7f0000001140)=""/172) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x2c, r4, 0x1, 0x0, 0x0, {0x1d}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x2c}}, 0x0) syz_read_part_table(0x1058, &(0x7f0000000000)="$eJzszzGKwkAABdAfMpvNsrvoEWwsBAtb72DrfXIeexstvY+tpUJMxAuICO8xxcz/v5nwZv/fz682l0lyTdrTkJSf4fLbn+yrx7h0s029XiSpSkr+0t3zZZ3Mx9ExTerpV7JK358PbTN2292LPwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+EWAAD//zEFCkI=") r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000001200)=0x40, 0x4) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000080)={@initdev, 0x0}, &(0x7f0000000180)=0x14) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001080), 0x28200, 0x0) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000001100)={0x2, &(0x7f00000010c0)=[{0x7, 0x49, 0x42, 0x9}, {0x678c, 0x81, 0x1, 0x5}]}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x6c, r4, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc050}, 0x880) 1.265981977s ago: executing program 4 (id=1081): r0 = memfd_create(&(0x7f0000000c80)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6\xc5\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\\;U\xd4\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1bj|G\xe0\x83\b\x00\x00\x00\x00\x00\x00\x00+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\fKh\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x06y\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0z\xd5X\x89D\xae%\v\x1e\x16\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7)\xf2\x93\xd3\t\xd9-\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x18lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb\xf8|_G\xd9\x7f\x11\xed\xa8\xb1\xbd\x98Y\xbf\xa0\xcb\x8c\x82L\x11TP>\xf8C\x9b\xaf\x11U0\x94\x92O\xed\xf8\xbau\x97;\x19\x1f\xe3\xce\xc1j\xd7\xaf\x19\xee\xdb\xf3\xfbe\xf2\x94P\xcc\x14\x06\xa7\xf9\xba\xca\x06\xc1\xea\x9d\x11\xfam\xb2\xc1\x91;\xe8\x1f\x11&\x04\xeeqY=\xe0\xb9\xbc)Y\xf7\xeb\xd8\xbe\xe4\xcf\x9e\x7f\xb2b7\xb6\xf4/s\x9bO~\x02v\xefbRPM\x05m\xf2s\xae\xdf\a;Q\xed\xf5!\xd9\x95(\xf5\xa5\xee6\x95\xd8s\xf3\xdc]\x979\x15\x0fG\xb1\x19p\"O\x01zu\xe2cb\xd5\x11\x17\r\x04=+?_T\xb4\xf7\xc1\x8a\xf4\xca)\xe7\xdb\xdfd\x92\xab\xcc\xee\xab\xbfP\x89Ix\xc5vv{\xc0H\x96B\xad\a\x0e\xa7@=\xa4y\xcfY\x15/i\xad\x8dP\xa2\x9a\xed\xb8=\x8b\x10jHR\xd1\x0e\x93\x1e\x8f\x88(X^;\xeeo\xa5\x13]\xe7\xb4', 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 965.957772ms ago: executing program 0 (id=1083): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="2719020059002fb96d9ce35eb119", 0xe}], 0x1}, 0x778b1a20232401d6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x42, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x1}) pread64(0xffffffffffffffff, &(0x7f0000000740)=""/211, 0xd3, 0xff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) 832.546648ms ago: executing program 4 (id=1084): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x300, 0x300, 0x0, 0x300, 0x1a0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x70bd2a, 0xffffffff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}}, 0x40084c0) recvmmsg(0xffffffffffffffff, &(0x7f0000000100), 0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 807.16058ms ago: executing program 3 (id=1085): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', r2}, 0x18) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x200}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 754.222372ms ago: executing program 0 (id=1086): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) listen(0xffffffffffffffff, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x5}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r2}, &(0x7f00000002c0), &(0x7f0000000340)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000400)=r0}, 0x20) 706.622865ms ago: executing program 3 (id=1087): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$eJzs3c1vVF8ZAOD33nZoKYUBZaFGBRFFQ5h+AA1hI2w0hpCYEOPCBdR2aJrOME2nRFpJbJfuSSRxpX+COxcmrFy4c6c7N7gwQSUSauJizL0zbQf6Kf2YXzvPk9zee84Z5j1nhnPO3APTE0DXuhgRSxFxIiIeRUSxlZ+0jrjTPLLHvX/7fGLl7fOJJBqNB/9M8vIsL9r+TOZU6zn7fx4R34v4SbIxbn1hcWa8UinPtdJD89XZofrC4rXptJUzOjYyNnzr+s3RfWvrhepv33x3+t4Pf/+7r7z+09K3f5ZVa/AXp/Oy9nbsp2bTCzHYltcbEfcOIliH9Lb+/nD0ZL3tcxFxKe//xejJ300A4DhrNIrRKLanAYDjLrv/H4wkLbXWAgYjTUul5hre+RhIK7X6/NVi7emTycjXsM5GIX08XSkPt9YKz0YhydIj+fV6evSD9Ivy9Yg4FxEv+k7m5aWJWmWykx98AKCLnfpo/n/X15z/t/fucCoHAByc/k5XAAA4dOZ/AOg+5n8A6D7/x/zv24EAcEy4/weA7mP+B4Dus+P8v3w49QAADsUP7t/PjsZK8/dfr/6m7muT5fpMqfp0ojRRm5stTdVqU5VyaaLR2On5KrXa7MiNtWR9YfFhtfb0yfzD6er4VPlhuXCQjQEAduXchVd/ySb9pdsn8yPa9nIwV8Pxlna6AkDH9HS6AkDH+D4PdK9d3ONbBoBjbpMtej+w5X8RemnzVziqrnzR+j90q72s/1s7gKPt09b/v7Pv9QAOnzkculejkdjzHwC6jDV+YE///g8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdajA/krSU7wW+lP1MS6WI0xFxNgrJ4+lKeTgizkTEn/sKfVl6pNOVBgD2KP170tr/60rx8mB7STEiTiT/6cuuT0TET3/14JfPxufn50ay/H+t5c+/bOUnjU41AgBYdWdjVj5Pj7bObTfy798+n1g9DrOKb+42NxfN4q60jmZJb/Tm5/4oRMTAv5NWuin7vNKzD/GXliPiC+vtf9YWYTBfA2nufPpx/Cz26QOIv/76fxw//SB+mpdl50L+Wnx+H+oC3ebV3eY42ep7WRdr9b80Lubnzft/fz5C7V02/mVjycqG8S9dG/96NsRP8j5/cS29fU3e3PjD9zdkNorNsuWIL/VuFj9Zi59sPv4WLu8ufPz1y1+9tFVZ49cRVzZt/+qO1NV8mB2ar84O1RcWr01Xx6fKU+Uno6NjI2PDt67fHB3K16ibP/+4WYx/3L56ZsvXZjliYIv4/du3P76xfbPX/Oa/j378tW3if+vrm7//57eJn82J39xl/PGBO1tu353Fn1xtf6G9ZMf3P67uFDhtnl7/bXFyl1UFAA5BfWFxZrxSKc/tcJF91tzpMS6O5kUsRezXE+aLEhHxWWhXl1ykse1jfvSJPbfTIxNw0NY7fadrAgAAAAAAAAAAAAAAbKW+sDjTd8Df1up0GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi+/hcAAP//G4rEcQ==") 642.598568ms ago: executing program 4 (id=1088): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000100)) lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf992}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0xcf4}, 0x18) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000180)=@generic={0x0, 0x9e4, 0x8000}) openat$hwrng(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8005a21, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r6, 0x0, 0x0) semop(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x100) geteuid() 401.86942ms ago: executing program 4 (id=1089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000a00)={0xa, 0x4e20, 0x6, @empty, 0x5}, 0x1c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRESOCT=r0, @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0xc445}, 0x4000) r2 = socket$unix(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xeffffff1, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x5}, 0x1c) 369.637391ms ago: executing program 4 (id=1090): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x300, 0x300, 0x0, 0x300, 0x1a0, 0x578, 0x578, 0x578, 0x578, 0x578, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x70bd2a, 0xffffffff, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@ip4=@multicast2, 0x86dd}}}]}, 0x38}}, 0x40084c0) r1 = socket$inet(0x2, 0x5, 0x0) recvmmsg(r1, &(0x7f0000000100), 0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) ppoll(&(0x7f0000000040)=[{r1}], 0x1, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000040da093a00000000000001090224000100001000090400002103000000092104800001220700090581034010fd00"], 0x0) syz_emit_ethernet(0x146, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6000000001100000fe80000000000000000000000000000000000000000000000001892000000000000031"], 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_clone(0x2004011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r3, 0x5000943a, &(0x7f00000011c0)={{r3}, r4, 0x0, @inherit={0x58, &(0x7f0000000bc0)=ANY=[@ANYBLOB="010000000100000002000000000000000600000000000000020400000000000030002000000000000d00000000000000e0e300000000000084650c4b84a8c4650d00000000100000020000000000000007000000080000400a00000000000000b2ec7c5874ba516d6cd53314c4bfcaf1cc4fd5c38fee6defe9c10e87a61000721b2f61b475b76d715f8d08cab1ad8188dc6f651444ab44bcd746385866c749151e6e5a9fd8bc0893673b72f93a24d0805b4fdc1a861ed9dcb4b6e392d6d6e84008bf770419db3e829058f6a85a0a2a501340d911307c5eee68776a65741dc8c30420ffe153e64fa26d9db095aa392246c54b8355de1f"]}, @name="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"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x400, 0x0, 0x40, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10000, &(0x7f0000000600), 0x1, 0x56e, &(0x7f0000000640)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) 178.663841ms ago: executing program 0 (id=1091): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580), &(0x7f00000005c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_clone3(&(0x7f00000014c0)={0x80100280, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, &(0x7f0000001480)=[0x0], 0x1}, 0x58) symlinkat(0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000"], 0x50) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000240), 0x4) r5 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r5}) 178.194531ms ago: executing program 1 (id=1092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") 147.636563ms ago: executing program 3 (id=1093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x9, &(0x7f00000002c0), 0x4, 0x50e, &(0x7f0000000e40)="$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") 48.258718ms ago: executing program 0 (id=1094): r0 = memfd_create(&(0x7f0000000c80)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6\xc5\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\\;U\xd4\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1bj|G\xe0\x83\b\x00\x00\x00\x00\x00\x00\x00+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\fKh\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x06y\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0z\xd5X\x89D\xae%\v\x1e\x16\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7)\xf2\x93\xd3\t\xd9-\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x18lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb\xf8|_G\xd9\x7f\x11\xed\xa8\xb1\xbd\x98Y\xbf\xa0\xcb\x8c\x82L\x11TP>\xf8C\x9b\xaf\x11U0\x94\x92O\xed\xf8\xbau\x97;\x19\x1f\xe3\xce\xc1j\xd7\xaf\x19\xee\xdb\xf3\xfbe\xf2\x94P\xcc\x14\x06\xa7\xf9\xba\xca\x06\xc1\xea\x9d\x11\xfam\xb2\xc1\x91;\xe8\x1f\x11&\x04\xeeqY=\xe0\xb9\xbc)Y\xf7\xeb\xd8\xbe\xe4\xcf\x9e\x7f\xb2b7\xb6\xf4/s\x9bO~\x02v\xefbRPM\x05m\xf2s\xae\xdf\a;Q\xed\xf5!\xd9\x95(\xf5\xa5\xee6\x95\xd8s\xf3\xdc]\x979\x15\x0fG\xb1\x19p\"O\x01zu\xe2cb\xd5\x11\x17\r\x04=+?_T\xb4\xf7\xc1\x8a\xf4\xca)\xe7\xdb\xdfd\x92\xab\xcc\xee\xab\xbfP\x89Ix\xc5vv{\xc0H\x96B\xad\a\x0e\xa7@=\xa4y\xcfY\x15/i\xad\x8dP\xa2\x9a\xed\xb8=\x8b\x10jHR\xd1\x0e\x93\x1e\x8f\x88(X^;\xeeo\xa5\x13]\xe7\xb4', 0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 47.803628ms ago: executing program 0 (id=1095): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000180)='%pi6 \x00'}, 0x20) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00', r1, 0x0, 0x6}, 0x18) msgrcv(0x0, 0x0, 0x0, 0xe4b43f0e2aa28c96, 0x2000) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYRESDEC=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r6 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r5, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000006f000000000000000000000000000004b0893e64048567e3ddfabe814b1ec1a7144a4e02bd2831d5936436389dd775fe421d1145531be31f96021568ceed48bc491d2f1b6dc59d47f3cece4cb3cc4a2d4893f7631b54a3b8d1414274e2a11f2ed9fd344ccd5a98dc57a5b2c9250387544c484a596a877efdb3aae9873b5b2034dfcff9878b4dd384296b8e8f638a38bafd5513791e2700ad99cc948d60f13b38908d0a2430cce913fb5dde684e9ae3019586bdccb33e5d421ff3e87a830fcbfff00cbc8cab638d5675629201035afda05f5b4ab4d8f02d54694308354ca2d3910436d86be8ef978fa5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fdffffff0500"/28], 0x48) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) 6.31911ms ago: executing program 0 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)=@xdp={0x2c, 0xdd86, 0x0, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000240)="2719020059002fb96d9ce35eb119", 0xe}], 0x1}, 0x778b1a20232401d6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_FSYNC={0x3, 0x42, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x0, 0x1}) pread64(0xffffffffffffffff, &(0x7f0000000740)=""/211, 0xd3, 0xff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) 0s ago: executing program 1 (id=1097): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000430000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008"], 0x38}}, 0x50) kernel console output (not intermixed with test programs): T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.148908][ T4545] loop1: detected capacity change from 0 to 512 [ 58.180705][ T4545] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.231937][ T4545] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 58.248938][ T4545] EXT4-fs (loop1): 1 truncate cleaned up [ 58.474997][ T4550] netlink: 'syz.2.362': attribute type 2 has an invalid length. [ 58.621796][ T4556] loop2: detected capacity change from 0 to 256 [ 58.636806][ T4556] vfat: Bad value for 'shortname' [ 58.758760][ T4561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 58.891993][ T4558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.901621][ T4563] lo speed is unknown, defaulting to 1000 [ 58.910419][ T4558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.970065][ T4566] loop3: detected capacity change from 0 to 512 [ 58.984380][ T4566] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.368: inode #0: comm syz.3.368: iget: illegal inode # [ 59.001326][ T4566] EXT4-fs (loop3): get orphan inode failed [ 59.007568][ T4566] EXT4-fs (loop3): mount failed [ 59.110074][ T4573] loop3: detected capacity change from 0 to 512 [ 59.121808][ T4573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.136685][ T4573] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.183863][ T4569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.192708][ T4578] loop3: detected capacity change from 0 to 2048 [ 59.192982][ T4569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.227557][ T29] kauditd_printk_skb: 1796 callbacks suppressed [ 59.227586][ T29] audit: type=1400 audit(1764550232.594:4630): avc: denied { write } for pid=4577 comm="syz.3.372" path="/46/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.232502][ T4578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 59.233922][ T29] audit: type=1400 audit(1764550232.594:4631): avc: denied { mounton } for pid=4577 comm="syz.3.372" path="/46/bus/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.296555][ T3319] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 59.311305][ T3319] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 59.322632][ T29] audit: type=1400 audit(1764550232.684:4632): avc: denied { unlink } for pid=3319 comm="syz-executor" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 59.443962][ T4589] loop2: detected capacity change from 0 to 8192 [ 59.627308][ T4601] loop1: detected capacity change from 0 to 512 [ 59.650044][ T4601] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.380: inode #0: comm syz.1.380: iget: illegal inode # [ 59.704640][ T4601] EXT4-fs (loop1): get orphan inode failed [ 59.720637][ T4601] EXT4-fs (loop1): mount failed [ 59.775347][ T29] audit: type=1326 audit(1764550233.134:4633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4607 comm="syz.3.382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98c47ff749 code=0x0 [ 59.798349][ T29] audit: type=1400 audit(1764550233.134:4634): avc: denied { getopt } for pid=4605 comm="syz.0.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.842254][ T29] audit: type=1400 audit(1764550233.184:4635): avc: denied { read } for pid=4605 comm="syz.0.381" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.866630][ T29] audit: type=1400 audit(1764550233.184:4636): avc: denied { open } for pid=4605 comm="syz.0.381" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.891851][ T29] audit: type=1326 audit(1764550233.184:4637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ee2f749 code=0x7ffc0000 [ 59.915205][ T29] audit: type=1326 audit(1764550233.184:4638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ee2f749 code=0x7ffc0000 [ 59.915237][ T29] audit: type=1326 audit(1764550233.184:4639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4605 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5b8ee2f749 code=0x7ffc0000 [ 60.038686][ T4617] netlink: 'syz.4.385': attribute type 2 has an invalid length. [ 60.078146][ T4613] loop1: detected capacity change from 0 to 1024 [ 60.095060][ T4613] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.114850][ T4613] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 60.127892][ T4624] loop0: detected capacity change from 0 to 1024 [ 60.150183][ T4621] loop4: detected capacity change from 0 to 256 [ 60.164999][ T4624] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.176873][ T4621] vfat: Bad value for 'shortname' [ 60.207668][ T4624] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.384: Invalid block bitmap block 0 in block_group 0 [ 60.225105][ T4624] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.384: Failed to acquire dquot type 0 [ 60.236519][ T4624] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.384: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.251461][ T4624] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.384: Invalid inode bitmap blk 0 in block_group 0 [ 60.264144][ T60] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:4: Failed to release dquot type 0 [ 60.264205][ T4624] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 60.284368][ T4624] EXT4-fs (loop0): 1 orphan inode deleted [ 60.597794][ T4649] loop2: detected capacity change from 0 to 8192 [ 60.866316][ T4653] lo speed is unknown, defaulting to 1000 [ 60.908862][ T4656] xt_TPROXY: Can be used only with -p tcp or -p udp [ 60.921717][ T4657] siw: device registration error -23 [ 60.989855][ T4663] loop0: detected capacity change from 0 to 2048 [ 61.037262][ T4667] loop4: detected capacity change from 0 to 2048 [ 61.079598][ T3318] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 61.125482][ T4673] loop2: detected capacity change from 0 to 512 [ 61.153545][ T3318] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 61.183907][ T4673] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.397: error while reading EA inode 32 err=-116 [ 61.196834][ T4673] EXT4-fs (loop2): Remounting filesystem read-only [ 61.203566][ T4673] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 61.216150][ T4673] EXT4-fs (loop2): 1 orphan inode deleted [ 61.257801][ T4678] netlink: 14 bytes leftover after parsing attributes in process `syz.0.396'. [ 61.272609][ T4678] siw: device registration error -23 [ 61.345835][ T4681] lo speed is unknown, defaulting to 1000 [ 61.351646][ T4681] lo speed is unknown, defaulting to 1000 [ 61.358029][ T4681] lo speed is unknown, defaulting to 1000 [ 61.365978][ T4681] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 61.378393][ T4681] lo speed is unknown, defaulting to 1000 [ 61.384836][ T4681] lo speed is unknown, defaulting to 1000 [ 61.391392][ T4681] lo speed is unknown, defaulting to 1000 [ 61.397652][ T4681] lo speed is unknown, defaulting to 1000 [ 61.404388][ T4681] lo speed is unknown, defaulting to 1000 [ 62.115248][ T4683] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 62.157571][ T4683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.166129][ T4683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.174012][ T4690] loop3: detected capacity change from 0 to 2048 [ 62.262989][ T4688] loop4: detected capacity change from 0 to 512 [ 62.312938][ T4688] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.370100][ T4688] EXT4-fs (loop4): 1 truncate cleaned up [ 62.501924][ T1001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.531386][ T3319] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 62.589873][ T3319] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 62.653859][ T1001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.707750][ T4709] loop3: detected capacity change from 0 to 2048 [ 62.883219][ T1001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.921490][ T4697] lo speed is unknown, defaulting to 1000 [ 62.931289][ T3319] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 62.946530][ T4697] lo speed is unknown, defaulting to 1000 [ 62.977163][ T3319] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 63.010001][ T1001] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.058491][ T4720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.096638][ T4723] pim6reg: entered allmulticast mode [ 63.128422][ T4697] chnl_net:caif_netlink_parms(): no params data found [ 63.142811][ T4723] pim6reg: left allmulticast mode [ 63.238618][ T4731] loop0: detected capacity change from 0 to 512 [ 63.265628][ T4731] EXT4-fs error (device loop0): ext4_init_orphan_info:581: comm syz.0.413: inode #0: comm syz.0.413: iget: illegal inode # [ 63.288840][ T4731] EXT4-fs (loop0): get orphan inode failed [ 63.297069][ T4731] EXT4-fs (loop0): mount failed [ 63.313489][ T1001] bond0 (unregistering): Released all slaves [ 63.396885][ T4749] loop1: detected capacity change from 0 to 2048 [ 63.404356][ T4745] loop0: detected capacity change from 0 to 2048 [ 63.414253][ T4697] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.421562][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.441067][ T4697] bridge_slave_0: entered allmulticast mode [ 63.450892][ T4745] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.472123][ T4697] bridge_slave_0: entered promiscuous mode [ 63.492742][ T4697] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.500082][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.534398][ T4761] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.415: bg 0: block 345: padding at end of block bitmap is not set [ 63.558541][ T4697] bridge_slave_1: entered allmulticast mode [ 63.566057][ T4697] bridge_slave_1: entered promiscuous mode [ 63.572457][ T4761] EXT4-fs (loop0): Remounting filesystem read-only [ 63.579152][ T60] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 63.598827][ T1001] hsr_slave_0: left promiscuous mode [ 63.608088][ T1001] hsr_slave_1: left promiscuous mode [ 63.623865][ T1001] veth1_macvtap: left promiscuous mode [ 63.631102][ T1001] veth0_macvtap: left promiscuous mode [ 63.637146][ T1001] veth1_vlan: left promiscuous mode [ 63.642478][ T1001] veth0_vlan: left promiscuous mode [ 63.674291][ T4757] loop3: detected capacity change from 0 to 128 [ 63.792431][ T4697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.796393][ T3314] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 63.821582][ T4697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.850853][ T3314] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 63.861826][ T4697] team0: Port device team_slave_0 added [ 63.874652][ T4697] team0: Port device team_slave_1 added [ 63.891034][ T4770] hub 9-0:1.0: USB hub found [ 63.951124][ T4770] hub 9-0:1.0: 8 ports detected [ 63.971705][ T4697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.979277][ T4697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.979920][ T4757] syz.3.418: attempt to access beyond end of device [ 63.979920][ T4757] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 64.005372][ T4697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.018660][ T4757] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 64.032662][ T4781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.061213][ T4764] syz.3.418: attempt to access beyond end of device [ 64.061213][ T4764] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 64.074777][ T4764] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 64.088101][ T4781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.105496][ T4697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.112592][ T4697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.138767][ T4697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.152502][ T4764] syz.3.418: attempt to access beyond end of device [ 64.152502][ T4764] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 64.166054][ T4764] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 64.194139][ T4697] hsr_slave_0: entered promiscuous mode [ 64.204292][ T4697] hsr_slave_1: entered promiscuous mode [ 64.214085][ T4781] loop0: detected capacity change from 0 to 512 [ 64.220652][ T4697] debugfs: 'hsr0' already exists in 'hsr' [ 64.226413][ T4697] Cannot create hsr debugfs directory [ 64.235749][ T4781] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.292221][ T4780] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 64.305111][ T4780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.313548][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 64.313564][ T29] audit: type=1326 audit(1764550237.674:4770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4789 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f5b8ee2f749 code=0x7ffc0000 [ 64.343080][ T29] audit: type=1326 audit(1764550237.674:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ee2f749 code=0x7ffc0000 [ 64.366421][ T29] audit: type=1326 audit(1764550237.674:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ee2f749 code=0x7ffc0000 [ 64.402934][ T4780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.444115][ T29] audit: type=1326 audit(1764550237.684:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b8edcb829 code=0x7ffc0000 [ 64.468003][ T29] audit: type=1326 audit(1764550237.684:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4769 comm="syz.0.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ee2f749 code=0x7ffc0000 [ 64.533184][ T4697] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.542904][ T4697] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.555324][ T4697] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.564720][ T4697] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.598876][ T4818] loop3: detected capacity change from 0 to 512 [ 64.613750][ T4818] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.424: inode #0: comm syz.3.424: iget: illegal inode # [ 64.615938][ T4697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.634091][ T4818] EXT4-fs (loop3): get orphan inode failed [ 64.640864][ T4818] EXT4-fs (loop3): mount failed [ 64.650555][ T4697] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.672426][ T1001] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.679571][ T1001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.696331][ T1001] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.703492][ T1001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.783346][ T4697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.903389][ T4697] veth0_vlan: entered promiscuous mode [ 64.911331][ T4697] veth1_vlan: entered promiscuous mode [ 64.931817][ T4697] veth0_macvtap: entered promiscuous mode [ 64.939810][ T4697] veth1_macvtap: entered promiscuous mode [ 64.958169][ T4697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.969879][ T4697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.981174][ T60] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.990459][ T60] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.000888][ T60] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.010392][ T60] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.030071][ T29] audit: type=1400 audit(1764550238.394:4775): avc: denied { mount } for pid=4697 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 65.055442][ T29] audit: type=1400 audit(1764550238.414:4776): avc: denied { mounton } for pid=4697 comm="syz-executor" path="/root/syzkaller.teePhN/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 65.056863][ T4859] loop3: detected capacity change from 0 to 2048 [ 65.117139][ T4864] netlink: 'syz.5.404': attribute type 2 has an invalid length. [ 65.235572][ T4867] loop5: detected capacity change from 0 to 256 [ 65.242675][ T4867] vfat: Bad value for 'shortname' [ 65.270563][ T29] audit: type=1326 audit(1764550238.634:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d494f749 code=0x7ffc0000 [ 65.277538][ T4870] hub 9-0:1.0: USB hub found [ 65.294083][ T29] audit: type=1326 audit(1764550238.634:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f03d494f749 code=0x7ffc0000 [ 65.299701][ T4870] hub 9-0:1.0: 8 ports detected [ 65.322481][ T29] audit: type=1326 audit(1764550238.634:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4869 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d494f749 code=0x7ffc0000 [ 65.409387][ T4871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.418230][ T4871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.482157][ T4873] loop1: detected capacity change from 0 to 512 [ 65.493457][ T4873] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.592622][ T4876] sch_fq: defrate 4294967295 ignored. [ 65.623254][ T4878] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 65.629813][ T4878] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 65.637345][ T4878] vhci_hcd vhci_hcd.0: Device attached [ 65.647896][ T4878] netlink: 'syz.4.430': attribute type 1 has an invalid length. [ 65.655732][ T4878] netlink: 224 bytes leftover after parsing attributes in process `syz.4.430'. [ 65.717384][ T4879] vhci_hcd: connection closed [ 65.717734][ T60] vhci_hcd: stop threads [ 65.726929][ T60] vhci_hcd: release socket [ 65.731351][ T60] vhci_hcd: disconnect device [ 65.817190][ T4883] netlink: 14 bytes leftover after parsing attributes in process `syz.3.431'. [ 65.901665][ T4893] loop3: detected capacity change from 0 to 128 [ 66.021976][ T4900] IPv6: Can't replace route, no match found [ 66.032964][ T4901] netlink: 'syz.3.435': attribute type 6 has an invalid length. [ 66.130120][ T4911] netlink: 164 bytes leftover after parsing attributes in process `syz.5.441'. [ 66.289698][ T4918] pim6reg: entered allmulticast mode [ 66.295861][ T4918] pim6reg: left allmulticast mode [ 66.323589][ T4920] netlink: 16 bytes leftover after parsing attributes in process `syz.5.445'. [ 66.368513][ T4923] loop4: detected capacity change from 0 to 2048 [ 66.390047][ T4923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 66.410442][ T3322] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 66.426617][ T3322] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 66.520719][ T4935] FAULT_INJECTION: forcing a failure. [ 66.520719][ T4935] name failslab, interval 1, probability 0, space 0, times 0 [ 66.533564][ T4935] CPU: 1 UID: 0 PID: 4935 Comm: syz.4.451 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.533591][ T4935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 66.533602][ T4935] Call Trace: [ 66.533609][ T4935] [ 66.533616][ T4935] __dump_stack+0x1d/0x30 [ 66.533692][ T4935] dump_stack_lvl+0xe8/0x140 [ 66.533713][ T4935] dump_stack+0x15/0x1b [ 66.533775][ T4935] should_fail_ex+0x265/0x280 [ 66.533850][ T4935] should_failslab+0x8c/0xb0 [ 66.533881][ T4935] kmem_cache_alloc_noprof+0x50/0x480 [ 66.533933][ T4935] ? getname_kernel+0x3c/0x1f0 [ 66.533960][ T4935] getname_kernel+0x3c/0x1f0 [ 66.533985][ T4935] kern_path+0x23/0x130 [ 66.534001][ T4935] lookup_bdev+0x66/0x150 [ 66.534086][ T4935] __se_sys_quotactl+0x1b7/0x670 [ 66.534114][ T4935] ? fput+0x8f/0xc0 [ 66.534133][ T4935] __x64_sys_quotactl+0x55/0x70 [ 66.534153][ T4935] x64_sys_call+0x15d6/0x3000 [ 66.534174][ T4935] do_syscall_64+0xd2/0x200 [ 66.534222][ T4935] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.534312][ T4935] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.534342][ T4935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.534476][ T4935] RIP: 0033:0x7f76a33cf749 [ 66.534491][ T4935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.534506][ T4935] RSP: 002b:00007f76a1e37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 66.534525][ T4935] RAX: ffffffffffffffda RBX: 00007f76a3625fa0 RCX: 00007f76a33cf749 [ 66.534537][ T4935] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffff80000800 [ 66.534549][ T4935] RBP: 00007f76a1e37090 R08: 0000000000000000 R09: 0000000000000000 [ 66.534560][ T4935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.534572][ T4935] R13: 00007f76a3626038 R14: 00007f76a3625fa0 R15: 00007ffdf70f3cb8 [ 66.534606][ T4935] [ 66.912746][ T4953] pim6reg: entered allmulticast mode [ 66.919105][ T4953] pim6reg: left allmulticast mode [ 66.970646][ T4958] loop0: detected capacity change from 0 to 2048 [ 66.995211][ T4954] lo speed is unknown, defaulting to 1000 [ 67.001414][ T4954] lo speed is unknown, defaulting to 1000 [ 67.037610][ T4965] xt_TPROXY: Can be used only with -p tcp or -p udp [ 67.040605][ T4958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.460'. [ 67.103887][ T3318] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 67.122727][ T4969] loop5: detected capacity change from 0 to 512 [ 67.130791][ T4969] EXT4-fs: Ignoring removed nobh option [ 67.140799][ T3318] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 67.150782][ T4969] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 67.178509][ T4969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.215980][ T4969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.216239][ T4967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.237916][ T4967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.827230][ T4996] pim6reg: entered allmulticast mode [ 67.835238][ T4996] pim6reg: left allmulticast mode [ 68.012458][ T5006] loop4: detected capacity change from 0 to 512 [ 68.059932][ T4998] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 68.071068][ T4998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.079774][ T4998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.184363][ T5014] loop3: detected capacity change from 0 to 8192 [ 68.267539][ T5015] lo speed is unknown, defaulting to 1000 [ 68.273878][ T5015] lo speed is unknown, defaulting to 1000 [ 68.309209][ T5018] xt_TPROXY: Can be used only with -p tcp or -p udp [ 68.346729][ T3314] EXT4-fs unmount: 35 callbacks suppressed [ 68.346748][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.476498][ T5026] loop1: detected capacity change from 0 to 8192 [ 68.911153][ T5045] IPv6: Can't replace route, no match found [ 69.075165][ T5053] FAULT_INJECTION: forcing a failure. [ 69.075165][ T5053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.088455][ T5053] CPU: 1 UID: 0 PID: 5053 Comm: syz.0.494 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.088543][ T5053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.088554][ T5053] Call Trace: [ 69.088562][ T5053] [ 69.088571][ T5053] __dump_stack+0x1d/0x30 [ 69.088653][ T5053] dump_stack_lvl+0xe8/0x140 [ 69.088672][ T5053] dump_stack+0x15/0x1b [ 69.088688][ T5053] should_fail_ex+0x265/0x280 [ 69.088715][ T5053] should_fail+0xb/0x20 [ 69.088757][ T5053] should_fail_usercopy+0x1a/0x20 [ 69.088780][ T5053] _copy_from_user+0x1c/0xb0 [ 69.088874][ T5053] do_sys_poll+0x149/0xbd0 [ 69.088903][ T5053] ? selinux_file_open+0x2df/0x330 [ 69.089036][ T5053] __se_sys_poll+0xdd/0x200 [ 69.089064][ T5053] __x64_sys_poll+0x43/0x50 [ 69.089089][ T5053] x64_sys_call+0x27d6/0x3000 [ 69.089113][ T5053] do_syscall_64+0xd2/0x200 [ 69.089135][ T5053] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.089183][ T5053] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.089267][ T5053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.089290][ T5053] RIP: 0033:0x7f5b8ee2f749 [ 69.089304][ T5053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.089347][ T5053] RSP: 002b:00007f5b8d88f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 69.089366][ T5053] RAX: ffffffffffffffda RBX: 00007f5b8f085fa0 RCX: 00007f5b8ee2f749 [ 69.089377][ T5053] RDX: 0000000000010001 RSI: 0000000000000001 RDI: 0000200000000080 [ 69.089388][ T5053] RBP: 00007f5b8d88f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.089398][ T5053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.089409][ T5053] R13: 00007f5b8f086038 R14: 00007f5b8f085fa0 R15: 00007fff5b0d3228 [ 69.089425][ T5053] [ 69.306485][ T5059] pim6reg: entered allmulticast mode [ 69.312695][ T5059] pim6reg: left allmulticast mode [ 69.318174][ T29] kauditd_printk_skb: 854 callbacks suppressed [ 69.318189][ T29] audit: type=1326 audit(1764550242.684:5634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.5.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ac18d65e7 code=0x7ffc0000 [ 69.347892][ T29] audit: type=1326 audit(1764550242.684:5635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.5.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ac187b829 code=0x7ffc0000 [ 69.371261][ T29] audit: type=1326 audit(1764550242.684:5636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.5.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 69.395268][ T29] audit: type=1326 audit(1764550242.694:5637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.5.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ac18d65e7 code=0x7ffc0000 [ 69.418762][ T29] audit: type=1326 audit(1764550242.694:5638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.5.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ac187b829 code=0x7ffc0000 [ 69.442163][ T29] audit: type=1326 audit(1764550242.694:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.5.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 69.465612][ T29] audit: type=1326 audit(1764550242.694:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.5.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ac18d65e7 code=0x7ffc0000 [ 69.489017][ T29] audit: type=1326 audit(1764550242.694:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.5.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ac187b829 code=0x7ffc0000 [ 69.512272][ T29] audit: type=1326 audit(1764550242.694:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.5.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 69.535692][ T29] audit: type=1326 audit(1764550242.704:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.5.463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ac18d65e7 code=0x7ffc0000 [ 69.721744][ T5079] loop0: detected capacity change from 0 to 2048 [ 69.757871][ T5079] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.826428][ T5079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'. [ 69.858187][ T3318] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 69.874801][ T3318] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 69.901011][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.902716][ T5097] netlink: 14 bytes leftover after parsing attributes in process `syz.3.509'. [ 69.936643][ T5099] loop4: detected capacity change from 0 to 2048 [ 69.951108][ T5099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.993596][ T5104] pim6reg: entered allmulticast mode [ 70.001458][ T5110] xt_limit: Overflow, try lower: 0/0 [ 70.013645][ T5106] FAULT_INJECTION: forcing a failure. [ 70.013645][ T5106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.015685][ T5104] pim6reg: left allmulticast mode [ 70.027059][ T5106] CPU: 1 UID: 0 PID: 5106 Comm: syz.0.507 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.027086][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 70.027097][ T5106] Call Trace: [ 70.027104][ T5106] [ 70.027113][ T5106] __dump_stack+0x1d/0x30 [ 70.027187][ T5106] dump_stack_lvl+0xe8/0x140 [ 70.027207][ T5106] dump_stack+0x15/0x1b [ 70.027224][ T5106] should_fail_ex+0x265/0x280 [ 70.027317][ T5106] should_fail+0xb/0x20 [ 70.027334][ T5106] should_fail_usercopy+0x1a/0x20 [ 70.027406][ T5106] _copy_from_user+0x1c/0xb0 [ 70.027430][ T5106] io_sqe_files_register+0x1e5/0x4f0 [ 70.027459][ T5106] __se_sys_io_uring_register+0x940/0xf00 [ 70.027491][ T5106] ? fput+0x8f/0xc0 [ 70.027552][ T5106] ? ksys_write+0x192/0x1a0 [ 70.027577][ T5106] __x64_sys_io_uring_register+0x55/0x70 [ 70.027600][ T5106] x64_sys_call+0x18a3/0x3000 [ 70.027622][ T5106] do_syscall_64+0xd2/0x200 [ 70.027763][ T5106] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 70.027843][ T5106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.027864][ T5106] RIP: 0033:0x7f5b8ee2f749 [ 70.027880][ T5106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.027898][ T5106] RSP: 002b:00007f5b8d88f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 70.027918][ T5106] RAX: ffffffffffffffda RBX: 00007f5b8f085fa0 RCX: 00007f5b8ee2f749 [ 70.027940][ T5106] RDX: 0000200000000180 RSI: 0000000000000002 RDI: 0000000000000006 [ 70.027952][ T5106] RBP: 00007f5b8d88f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.027963][ T5106] R10: 00000000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 70.028038][ T5106] R13: 00007f5b8f086038 R14: 00007f5b8f085fa0 R15: 00007fff5b0d3228 [ 70.028109][ T5106] [ 70.131192][ T5114] FAULT_INJECTION: forcing a failure. [ 70.131192][ T5114] name failslab, interval 1, probability 0, space 0, times 0 [ 70.131222][ T5114] CPU: 1 UID: 0 PID: 5114 Comm: syz.0.513 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.131248][ T5114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 70.131283][ T5114] Call Trace: [ 70.131289][ T5114] [ 70.131298][ T5114] __dump_stack+0x1d/0x30 [ 70.131321][ T5114] dump_stack_lvl+0xe8/0x140 [ 70.131355][ T5114] dump_stack+0x15/0x1b [ 70.131375][ T5114] should_fail_ex+0x265/0x280 [ 70.131397][ T5114] should_failslab+0x8c/0xb0 [ 70.131460][ T5114] kmem_cache_alloc_noprof+0x50/0x480 [ 70.131496][ T5114] ? security_file_alloc+0x32/0x100 [ 70.131532][ T5114] security_file_alloc+0x32/0x100 [ 70.131556][ T5114] init_file+0x5c/0x1d0 [ 70.131574][ T5114] alloc_empty_file+0x8b/0x200 [ 70.131667][ T5114] alloc_file_clone+0x3a/0xa0 [ 70.131685][ T5114] do_shmat+0x3b4/0x790 [ 70.131712][ T5114] __x64_sys_shmat+0x61/0xb0 [ 70.131736][ T5114] x64_sys_call+0x2f19/0x3000 [ 70.131779][ T5114] do_syscall_64+0xd2/0x200 [ 70.131800][ T5114] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.131869][ T5114] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 70.131904][ T5114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.131925][ T5114] RIP: 0033:0x7f5b8ee2f749 [ 70.131940][ T5114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.131957][ T5114] RSP: 002b:00007f5b8d88f038 EFLAGS: 00000246 ORIG_RAX: 000000000000001e [ 70.132043][ T5114] RAX: ffffffffffffffda RBX: 00007f5b8f085fa0 RCX: 00007f5b8ee2f749 [ 70.132055][ T5114] RDX: 000000000000c000 RSI: 0000200000ffc000 RDI: 0000000000000000 [ 70.132107][ T5114] RBP: 00007f5b8d88f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.132118][ T5114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.132130][ T5114] R13: 00007f5b8f086038 R14: 00007f5b8f085fa0 R15: 00007fff5b0d3228 [ 70.132148][ T5114] [ 70.355258][ T5121] syz.0.515 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 70.447572][ T5121] sit0: entered allmulticast mode [ 70.475576][ T5111] pimreg: entered allmulticast mode [ 70.482009][ T5110] pimreg: left allmulticast mode [ 70.696049][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.749167][ T5139] loop3: detected capacity change from 0 to 2048 [ 70.795273][ T3307] loop3: p1 < > p4 [ 70.820432][ T3307] loop3: p4 size 8388608 extends beyond EOD, truncated [ 70.835388][ T5139] loop3: p1 < > p4 [ 70.840028][ T5139] loop3: p4 size 8388608 extends beyond EOD, truncated [ 70.855673][ T5141] loop4: detected capacity change from 0 to 8192 [ 70.913503][ T5149] hub 9-0:1.0: USB hub found [ 71.006713][ T5149] hub 9-0:1.0: 8 ports detected [ 71.055877][ T5149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.072503][ T5149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.259132][ T4068] udevd[4068]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 71.276369][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 71.344016][ T5161] loop1: detected capacity change from 0 to 512 [ 71.424424][ T5161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.551930][ T5161] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.033343][ T5123] netlink: 4 bytes leftover after parsing attributes in process `syz.5.516'. [ 72.086490][ T5123] team0 (unregistering): Port device team_slave_0 removed [ 72.126590][ T5123] team0 (unregistering): Port device team_slave_1 removed [ 72.206416][ T5177] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 72.231324][ T5177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.340412][ T5177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.417824][ T5189] lo speed is unknown, defaulting to 1000 [ 72.423917][ T5189] lo speed is unknown, defaulting to 1000 [ 72.460330][ T5197] xt_TPROXY: Can be used only with -p tcp or -p udp [ 72.638240][ T5202] lo speed is unknown, defaulting to 1000 [ 72.644438][ T5202] lo speed is unknown, defaulting to 1000 [ 72.690385][ T5202] netlink: 596 bytes leftover after parsing attributes in process `syz.5.541'. [ 72.738871][ T5206] IPv6: Can't replace route, no match found [ 73.053743][ T5218] loop5: detected capacity change from 0 to 2048 [ 73.068339][ T5218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.142206][ T5224] 9pnet_fd: Insufficient options for proto=fd [ 73.281548][ T5233] 9pnet_fd: Insufficient options for proto=fd [ 73.421426][ T5238] IPv6: Can't replace route, no match found [ 73.799013][ T5243] FAULT_INJECTION: forcing a failure. [ 73.799013][ T5243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 73.812169][ T5243] CPU: 1 UID: 0 PID: 5243 Comm: syz.4.556 Not tainted syzkaller #0 PREEMPT(voluntary) [ 73.812197][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 73.812210][ T5243] Call Trace: [ 73.812218][ T5243] [ 73.812227][ T5243] __dump_stack+0x1d/0x30 [ 73.812251][ T5243] dump_stack_lvl+0xe8/0x140 [ 73.812270][ T5243] dump_stack+0x15/0x1b [ 73.812346][ T5243] should_fail_ex+0x265/0x280 [ 73.812364][ T5243] should_fail+0xb/0x20 [ 73.812379][ T5243] should_fail_usercopy+0x1a/0x20 [ 73.812399][ T5243] _copy_from_user+0x1c/0xb0 [ 73.812427][ T5243] do_ip_vs_set_ctl+0x1a1/0x8c0 [ 73.812463][ T5243] ? do_ip_setsockopt+0x1af3/0x2240 [ 73.812559][ T5243] nf_setsockopt+0x199/0x1b0 [ 73.812617][ T5243] ip_setsockopt+0x102/0x110 [ 73.812650][ T5243] sctp_setsockopt+0x116/0xe30 [ 73.812677][ T5243] sock_common_setsockopt+0x69/0x80 [ 73.812714][ T5243] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 73.812781][ T5243] __sys_setsockopt+0x184/0x200 [ 73.812825][ T5243] __x64_sys_setsockopt+0x64/0x80 [ 73.812854][ T5243] x64_sys_call+0x20ec/0x3000 [ 73.812873][ T5243] do_syscall_64+0xd2/0x200 [ 73.812896][ T5243] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 73.812991][ T5243] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 73.813026][ T5243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.813049][ T5243] RIP: 0033:0x7f76a33cf749 [ 73.813066][ T5243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.813085][ T5243] RSP: 002b:00007f76a1e37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 73.813136][ T5243] RAX: ffffffffffffffda RBX: 00007f76a3625fa0 RCX: 00007f76a33cf749 [ 73.813150][ T5243] RDX: 0000000000000487 RSI: 0000000000000000 RDI: 0000000000000003 [ 73.813164][ T5243] RBP: 00007f76a1e37090 R08: 0000000000000044 R09: 0000000000000000 [ 73.813177][ T5243] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.813191][ T5243] R13: 00007f76a3626038 R14: 00007f76a3625fa0 R15: 00007ffdf70f3cb8 [ 73.813212][ T5243] [ 74.143710][ T4697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.163349][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.274416][ T5252] loop5: detected capacity change from 0 to 512 [ 74.348639][ T5253] lo speed is unknown, defaulting to 1000 [ 74.354842][ T5253] lo speed is unknown, defaulting to 1000 [ 74.397864][ T5259] xt_TPROXY: Can be used only with -p tcp or -p udp [ 74.666166][ T5247] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 74.698295][ T5247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.715340][ T5247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.112083][ T5284] loop1: detected capacity change from 0 to 2048 [ 75.184274][ T5284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.199023][ T5284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.564'. [ 75.219157][ T3314] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 75.239745][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 75.239760][ T29] audit: type=1326 audit(1764550248.604:5966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 75.256374][ T3314] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 75.291945][ T29] audit: type=1326 audit(1764550248.634:5967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 75.308730][ T5301] loop4: detected capacity change from 0 to 8192 [ 75.315521][ T29] audit: type=1326 audit(1764550248.634:5968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 75.345154][ T29] audit: type=1326 audit(1764550248.634:5969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 75.368542][ T29] audit: type=1326 audit(1764550248.634:5970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76a33cf783 code=0x7ffc0000 [ 75.391788][ T29] audit: type=1326 audit(1764550248.654:5971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f76a33ce1ff code=0x7ffc0000 [ 75.415776][ T29] audit: type=1326 audit(1764550248.674:5972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f76a33cf7d7 code=0x7ffc0000 [ 75.439140][ T29] audit: type=1326 audit(1764550248.674:5973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76a33cdf90 code=0x7ffc0000 [ 75.462620][ T29] audit: type=1326 audit(1764550248.674:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76a33cf34b code=0x7ffc0000 [ 75.485900][ T29] audit: type=1326 audit(1764550248.684:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.4.567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f76a33ce3aa code=0x7ffc0000 [ 75.536286][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.592992][ T5307] hub 9-0:1.0: USB hub found [ 75.603000][ T5307] hub 9-0:1.0: 8 ports detected [ 75.632795][ T5315] loop5: detected capacity change from 0 to 2048 [ 75.651307][ T5315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.667596][ T5318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.679515][ T5318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.682087][ T5320] netlink: 7 bytes leftover after parsing attributes in process `syz.0.571'. [ 75.716703][ T5320] netlink: 7 bytes leftover after parsing attributes in process `syz.0.571'. [ 75.762096][ T5332] loop3: detected capacity change from 0 to 512 [ 75.779376][ T5332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.816214][ T5332] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.896469][ T5344] pim6reg: entered allmulticast mode [ 75.904016][ T5339] loop0: detected capacity change from 0 to 8192 [ 75.932568][ T5344] pim6reg: left allmulticast mode [ 76.127202][ T5357] IPv6: Can't replace route, no match found [ 76.174252][ T5360] loop1: detected capacity change from 0 to 512 [ 76.194132][ T5360] EXT4-fs: Ignoring removed nobh option [ 76.214264][ T5360] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 76.238676][ T5360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.257825][ T5360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.414956][ T4697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.454317][ T5373] lo speed is unknown, defaulting to 1000 [ 76.460745][ T5373] lo speed is unknown, defaulting to 1000 [ 76.494709][ T5378] xt_TPROXY: Can be used only with -p tcp or -p udp [ 76.612523][ T5377] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 76.624459][ T5377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.633475][ T5377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.451155][ T5398] loop5: detected capacity change from 0 to 512 [ 77.463544][ T5398] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.588: inode #0: comm syz.5.588: iget: illegal inode # [ 77.477280][ T5398] EXT4-fs (loop5): get orphan inode failed [ 77.483356][ T5398] EXT4-fs (loop5): mount failed [ 77.543825][ T5402] IPv6: Can't replace route, no match found [ 77.652131][ T5408] loop5: detected capacity change from 0 to 2048 [ 77.668316][ T5408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.423134][ T4697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.435327][ T5421] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 78.463331][ T5421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.478737][ T5421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.597354][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.727090][ T5431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.748778][ T5431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.798005][ T5441] loop5: detected capacity change from 0 to 2048 [ 78.828310][ T5441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.843785][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.604'. [ 78.866149][ T5446] loop3: detected capacity change from 0 to 512 [ 78.866831][ T4697] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 78.887330][ T4697] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 78.896020][ T5446] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.605: inode #0: comm syz.3.605: iget: illegal inode # [ 78.897066][ T5446] EXT4-fs (loop3): get orphan inode failed [ 78.915317][ T5446] EXT4-fs (loop3): mount failed [ 78.921231][ T4697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.983993][ T5451] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.992972][ T5451] netlink: 'syz.3.607': attribute type 1 has an invalid length. [ 79.000966][ T5451] netlink: 224 bytes leftover after parsing attributes in process `syz.3.607'. [ 79.142964][ T5475] netlink: 'syz.3.616': attribute type 2 has an invalid length. [ 79.197579][ T5479] pim6reg: entered allmulticast mode [ 79.203550][ T5479] pim6reg: left allmulticast mode [ 79.275627][ T5480] loop3: detected capacity change from 0 to 256 [ 79.287622][ T5480] vfat: Bad value for 'shortname' [ 79.388663][ T5500] IPv6: Can't replace route, no match found [ 79.410703][ T5502] loop4: detected capacity change from 0 to 512 [ 79.427114][ T5502] EXT4-fs: Ignoring removed nobh option [ 79.448185][ T5502] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 79.476807][ T5502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.507185][ T5502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.533481][ T5511] pim6reg: entered allmulticast mode [ 79.552916][ T5511] pim6reg: left allmulticast mode [ 79.625029][ T5506] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 79.637849][ T5506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.648600][ T5506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.698980][ T5526] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 79.791490][ T5528] netlink: 272 bytes leftover after parsing attributes in process `syz.1.639'. [ 79.985104][ T5534] lo speed is unknown, defaulting to 1000 [ 79.991270][ T5534] lo speed is unknown, defaulting to 1000 [ 80.026386][ T5541] xt_TPROXY: Can be used only with -p tcp or -p udp [ 80.062164][ T5545] bond0: entered promiscuous mode [ 80.067323][ T5545] bond_slave_0: entered promiscuous mode [ 80.073162][ T5545] bond_slave_1: entered promiscuous mode [ 80.081321][ T5545] batadv0: entered promiscuous mode [ 80.086992][ T5543] loop0: detected capacity change from 0 to 8192 [ 80.088343][ T5545] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 80.246990][ T29] kauditd_printk_skb: 1334 callbacks suppressed [ 80.247008][ T29] audit: type=1326 audit(1764550253.614:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76a33c65e7 code=0x7ffc0000 [ 80.276649][ T29] audit: type=1326 audit(1764550253.614:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76a336b829 code=0x7ffc0000 [ 80.300069][ T29] audit: type=1326 audit(1764550253.614:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 80.323438][ T29] audit: type=1326 audit(1764550253.614:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76a33c65e7 code=0x7ffc0000 [ 80.346912][ T29] audit: type=1326 audit(1764550253.614:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76a336b829 code=0x7ffc0000 [ 80.370316][ T29] audit: type=1326 audit(1764550253.614:7315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 80.393773][ T29] audit: type=1326 audit(1764550253.614:7316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5542 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ee2f749 code=0x7ffc0000 [ 80.417131][ T29] audit: type=1326 audit(1764550253.614:7317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5542 comm="syz.0.644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8ee2f749 code=0x7ffc0000 [ 80.440677][ T29] audit: type=1326 audit(1764550253.614:7318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f76a33c65e7 code=0x7ffc0000 [ 80.464437][ T29] audit: type=1326 audit(1764550253.614:7319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.4.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f76a336b829 code=0x7ffc0000 [ 80.601214][ T5552] pim6reg: entered allmulticast mode [ 80.610354][ T5552] pim6reg: left allmulticast mode [ 81.204240][ T5570] FAULT_INJECTION: forcing a failure. [ 81.204240][ T5570] name failslab, interval 1, probability 0, space 0, times 0 [ 81.216984][ T5570] CPU: 1 UID: 0 PID: 5570 Comm: syz.0.655 Not tainted syzkaller #0 PREEMPT(voluntary) [ 81.217013][ T5570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 81.217025][ T5570] Call Trace: [ 81.217031][ T5570] [ 81.217040][ T5570] __dump_stack+0x1d/0x30 [ 81.217065][ T5570] dump_stack_lvl+0xe8/0x140 [ 81.217088][ T5570] dump_stack+0x15/0x1b [ 81.217156][ T5570] should_fail_ex+0x265/0x280 [ 81.217177][ T5570] should_failslab+0x8c/0xb0 [ 81.217222][ T5570] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 81.217282][ T5570] ? __alloc_skb+0x101/0x320 [ 81.217314][ T5570] __alloc_skb+0x101/0x320 [ 81.217345][ T5570] netlink_alloc_large_skb+0xbf/0xf0 [ 81.217376][ T5570] netlink_sendmsg+0x3cf/0x6b0 [ 81.217474][ T5570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.217495][ T5570] __sock_sendmsg+0x145/0x180 [ 81.217562][ T5570] ____sys_sendmsg+0x31e/0x4e0 [ 81.217584][ T5570] ___sys_sendmsg+0x17b/0x1d0 [ 81.217614][ T5570] __x64_sys_sendmsg+0xd4/0x160 [ 81.217639][ T5570] x64_sys_call+0x191e/0x3000 [ 81.217732][ T5570] do_syscall_64+0xd2/0x200 [ 81.217751][ T5570] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 81.217781][ T5570] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 81.217837][ T5570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.217858][ T5570] RIP: 0033:0x7f5b8ee2f749 [ 81.217923][ T5570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.217942][ T5570] RSP: 002b:00007f5b8d88f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.217981][ T5570] RAX: ffffffffffffffda RBX: 00007f5b8f085fa0 RCX: 00007f5b8ee2f749 [ 81.217995][ T5570] RDX: 0000000000004886 RSI: 0000200000000240 RDI: 0000000000000005 [ 81.218008][ T5570] RBP: 00007f5b8d88f090 R08: 0000000000000000 R09: 0000000000000000 [ 81.218022][ T5570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.218035][ T5570] R13: 00007f5b8f086038 R14: 00007f5b8f085fa0 R15: 00007fff5b0d3228 [ 81.218055][ T5570] [ 81.569173][ T5582] loop0: detected capacity change from 0 to 2048 [ 81.596373][ T5582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.623224][ T5582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'. [ 81.644131][ T3318] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 81.659111][ T3318] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 81.678961][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.858383][ T5594] loop5: detected capacity change from 0 to 1024 [ 81.902134][ T5594] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 81.913095][ T5594] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 81.948405][ T5596] loop1: detected capacity change from 0 to 512 [ 82.001909][ T5596] EXT4-fs: Ignoring removed nobh option [ 82.012169][ T5596] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 82.022350][ T5594] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 82.034441][ T5594] EXT4-fs (loop5): invalid journal inode [ 82.041024][ T5594] EXT4-fs (loop5): can't get journal size [ 82.048397][ T5594] EXT4-fs error (device loop5): ext4_protect_reserved_inode:182: inode #3: comm syz.5.665: blocks 2-2 from inode overlap system zone [ 82.064465][ T5594] EXT4-fs (loop5): failed to initialize system zone (-117) [ 82.072353][ T5594] EXT4-fs (loop5): mount failed [ 82.621719][ T5596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.652882][ T5605] loop3: detected capacity change from 0 to 1024 [ 82.663798][ T5596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.708142][ T5612] FAULT_INJECTION: forcing a failure. [ 82.708142][ T5612] name failslab, interval 1, probability 0, space 0, times 0 [ 82.720929][ T5612] CPU: 1 UID: 0 PID: 5612 Comm: syz.5.671 Not tainted syzkaller #0 PREEMPT(voluntary) [ 82.720981][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.720995][ T5612] Call Trace: [ 82.721002][ T5612] [ 82.721011][ T5612] __dump_stack+0x1d/0x30 [ 82.721107][ T5612] dump_stack_lvl+0xe8/0x140 [ 82.721132][ T5612] dump_stack+0x15/0x1b [ 82.721148][ T5612] should_fail_ex+0x265/0x280 [ 82.721166][ T5612] should_failslab+0x8c/0xb0 [ 82.721211][ T5612] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 82.721242][ T5612] ? __d_alloc+0x3d/0x340 [ 82.721270][ T5612] __d_alloc+0x3d/0x340 [ 82.721346][ T5612] ? __rcu_read_unlock+0x4f/0x70 [ 82.721436][ T5612] d_alloc_parallel+0x58/0xc70 [ 82.721458][ T5612] ? lockref_get_not_dead+0x120/0x1c0 [ 82.721486][ T5612] ? __rcu_read_unlock+0x4f/0x70 [ 82.721588][ T5612] __lookup_slow+0x8c/0x250 [ 82.721610][ T5612] lookup_slow+0x3c/0x60 [ 82.721629][ T5612] walk_component+0x1ec/0x220 [ 82.721672][ T5612] path_lookupat+0xfe/0x2a0 [ 82.721774][ T5612] filename_lookup+0x147/0x340 [ 82.721816][ T5612] user_path_at+0x3e/0x130 [ 82.721836][ T5612] do_sys_truncate+0x5c/0x130 [ 82.721906][ T5612] __x64_sys_truncate+0x31/0x40 [ 82.721933][ T5612] x64_sys_call+0x1a2f/0x3000 [ 82.722010][ T5612] do_syscall_64+0xd2/0x200 [ 82.722031][ T5612] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 82.722055][ T5612] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 82.722136][ T5612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.722159][ T5612] RIP: 0033:0x7f6ac18df749 [ 82.722176][ T5612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.722194][ T5612] RSP: 002b:00007f6ac033f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 82.722213][ T5612] RAX: ffffffffffffffda RBX: 00007f6ac1b35fa0 RCX: 00007f6ac18df749 [ 82.722291][ T5612] RDX: 0000000000000000 RSI: 0000000003000000 RDI: 0000200000000900 [ 82.722352][ T5612] RBP: 00007f6ac033f090 R08: 0000000000000000 R09: 0000000000000000 [ 82.722366][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.722380][ T5612] R13: 00007f6ac1b36038 R14: 00007f6ac1b35fa0 R15: 00007ffc13d4a268 [ 82.722401][ T5612] [ 83.002749][ T5619] loop0: detected capacity change from 0 to 2048 [ 83.034013][ T5619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.158899][ T5619] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 83.290712][ T3318] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 83.363703][ T3318] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 83.435693][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.720585][ T5641] loop5: detected capacity change from 0 to 8192 [ 83.798966][ T5651] loop0: detected capacity change from 0 to 2048 [ 83.957681][ T5651] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.025601][ T5661] FAULT_INJECTION: forcing a failure. [ 84.025601][ T5661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 84.038848][ T5661] CPU: 0 UID: 0 PID: 5661 Comm: syz.4.688 Not tainted syzkaller #0 PREEMPT(voluntary) [ 84.038889][ T5661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 84.038901][ T5661] Call Trace: [ 84.039031][ T5661] [ 84.039039][ T5661] __dump_stack+0x1d/0x30 [ 84.039119][ T5661] dump_stack_lvl+0xe8/0x140 [ 84.039137][ T5661] dump_stack+0x15/0x1b [ 84.039195][ T5661] should_fail_ex+0x265/0x280 [ 84.039217][ T5661] should_fail+0xb/0x20 [ 84.039235][ T5661] should_fail_usercopy+0x1a/0x20 [ 84.039257][ T5661] _copy_to_user+0x20/0xa0 [ 84.039284][ T5661] simple_read_from_buffer+0xb5/0x130 [ 84.039381][ T5661] proc_fail_nth_read+0x10e/0x150 [ 84.039415][ T5661] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 84.039482][ T5661] vfs_read+0x1a8/0x770 [ 84.039503][ T5661] ? __rcu_read_unlock+0x4f/0x70 [ 84.039560][ T5661] ? __fget_files+0x184/0x1c0 [ 84.039655][ T5661] ksys_read+0xda/0x1a0 [ 84.039683][ T5661] __x64_sys_read+0x40/0x50 [ 84.039738][ T5661] x64_sys_call+0x27c0/0x3000 [ 84.039762][ T5661] do_syscall_64+0xd2/0x200 [ 84.039784][ T5661] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 84.039813][ T5661] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 84.039905][ T5661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.039925][ T5661] RIP: 0033:0x7f76a33ce15c [ 84.039942][ T5661] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 84.040090][ T5661] RSP: 002b:00007f76a1e37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 84.040111][ T5661] RAX: ffffffffffffffda RBX: 00007f76a3625fa0 RCX: 00007f76a33ce15c [ 84.040125][ T5661] RDX: 000000000000000f RSI: 00007f76a1e370a0 RDI: 0000000000000006 [ 84.040139][ T5661] RBP: 00007f76a1e37090 R08: 0000000000000000 R09: 0000000000000001 [ 84.040152][ T5661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.040236][ T5661] R13: 00007f76a3626038 R14: 00007f76a3625fa0 R15: 00007ffdf70f3cb8 [ 84.040256][ T5661] [ 84.296397][ T5651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'. [ 84.407322][ T3318] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 84.423809][ T3318] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 84.441868][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.654835][ T5672] netlink: 'syz.4.694': attribute type 2 has an invalid length. [ 84.794366][ T5679] loop4: detected capacity change from 0 to 256 [ 84.833604][ T5679] vfat: Bad value for 'shortname' [ 85.006321][ T5693] loop1: detected capacity change from 0 to 512 [ 85.019482][ T5693] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.055762][ T5693] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.081034][ T5693] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 85.113501][ T5693] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28 [ 85.125771][ T5693] EXT4-fs (loop1): This should not happen!! Data will be lost [ 85.125771][ T5693] [ 85.135569][ T5693] EXT4-fs (loop1): Total free blocks count 0 [ 85.141585][ T5693] EXT4-fs (loop1): Free/Dirty block details [ 85.147556][ T5693] EXT4-fs (loop1): free_blocks=65280 [ 85.152941][ T5693] EXT4-fs (loop1): dirty_blocks=2 [ 85.158120][ T5693] EXT4-fs (loop1): Block reservation details [ 85.164105][ T5693] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 85.207834][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.272973][ T29] kauditd_printk_skb: 1163 callbacks suppressed [ 85.272988][ T29] audit: type=1326 audit(1764550258.634:8483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.5.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6ac18de1ff code=0x7ffc0000 [ 85.313067][ T5689] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 85.325016][ T5689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.333679][ T5689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.335443][ T29] audit: type=1326 audit(1764550258.704:8484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.5.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6ac18df7d7 code=0x7ffc0000 [ 85.365640][ T29] audit: type=1326 audit(1764550258.734:8485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.5.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ac18ddf90 code=0x7ffc0000 [ 85.389385][ T29] audit: type=1326 audit(1764550258.734:8486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.5.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6ac18de3aa code=0x7ffc0000 [ 85.477291][ T5704] loop1: detected capacity change from 0 to 512 [ 85.529456][ T29] audit: type=1326 audit(1764550258.734:8487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.5.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 85.552910][ T29] audit: type=1326 audit(1764550258.734:8488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.5.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 85.576310][ T29] audit: type=1326 audit(1764550258.754:8489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.5.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 85.599554][ T29] audit: type=1326 audit(1764550258.754:8490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.5.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 85.622869][ T29] audit: type=1326 audit(1764550258.754:8491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.5.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 85.646122][ T29] audit: type=1326 audit(1764550258.754:8492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5640 comm="syz.5.682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 85.680139][ T5704] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.715704][ T5704] EXT4-fs (loop1): 1 truncate cleaned up [ 85.725776][ T5704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.752970][ T5701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.702'. [ 85.881940][ T5701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.039812][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.073069][ T5718] pim6reg: entered allmulticast mode [ 86.124867][ T5721] loop3: detected capacity change from 0 to 512 [ 86.160328][ T5721] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.711: inode #0: comm syz.3.711: iget: illegal inode # [ 86.186462][ T5721] EXT4-fs (loop3): get orphan inode failed [ 86.194902][ T5721] EXT4-fs (loop3): mount failed [ 86.232182][ T5736] netlink: 'syz.5.715': attribute type 2 has an invalid length. [ 86.283422][ T5741] hub 9-0:1.0: USB hub found [ 86.288353][ T5741] hub 9-0:1.0: 8 ports detected [ 86.308704][ T5744] loop3: detected capacity change from 0 to 512 [ 86.315840][ T5744] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 86.327217][ T5744] EXT4-fs (loop3): 1 truncate cleaned up [ 86.333485][ T5744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.349643][ T5744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.718'. [ 86.351521][ T5747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.367105][ T5744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.383010][ T5747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.393049][ T5751] loop5: detected capacity change from 0 to 256 [ 86.408500][ T5751] vfat: Bad value for 'shortname' [ 86.439917][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.463855][ T5755] loop1: detected capacity change from 0 to 512 [ 86.492034][ T5761] pim6reg: entered allmulticast mode [ 86.493782][ T5755] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.514960][ T5755] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.576401][ T5765] loop0: detected capacity change from 0 to 2048 [ 86.598094][ T5765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.617155][ T5765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.724'. [ 86.631877][ T5769] loop3: detected capacity change from 0 to 512 [ 86.637855][ T3318] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 86.655935][ T5769] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.725: inode #0: comm syz.3.725: iget: illegal inode # [ 86.671178][ T5769] EXT4-fs (loop3): get orphan inode failed [ 86.671357][ T3318] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 86.680394][ T5769] EXT4-fs (loop3): mount failed [ 86.694032][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.945569][ T5787] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 86.956022][ T5787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.964579][ T5787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.160017][ T5799] loop3: detected capacity change from 0 to 512 [ 87.168362][ T5799] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.738: inode #0: comm syz.3.738: iget: illegal inode # [ 87.181624][ T5799] EXT4-fs (loop3): get orphan inode failed [ 87.188040][ T5799] EXT4-fs (loop3): mount failed [ 87.276862][ T5809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.742'. [ 87.802492][ T5832] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.875094][ T5832] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.941425][ T5832] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.976506][ T5834] netlink: 'syz.5.745': attribute type 7 has an invalid length. [ 87.984242][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.745'. [ 88.004027][ T5832] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.071632][ T1001] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.083358][ T1001] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.098601][ T1001] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.132123][ T1001] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.217353][ T5842] netlink: 'syz.4.747': attribute type 2 has an invalid length. [ 88.343598][ T5845] loop4: detected capacity change from 0 to 256 [ 88.361855][ T5845] vfat: Bad value for 'shortname' [ 88.526254][ T5840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.534938][ T5840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.552331][ T5850] FAULT_INJECTION: forcing a failure. [ 88.552331][ T5850] name failslab, interval 1, probability 0, space 0, times 0 [ 88.565090][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz.5.749 Not tainted syzkaller #0 PREEMPT(voluntary) [ 88.565120][ T5850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 88.565132][ T5850] Call Trace: [ 88.565141][ T5850] [ 88.565150][ T5850] __dump_stack+0x1d/0x30 [ 88.565173][ T5850] dump_stack_lvl+0xe8/0x140 [ 88.565241][ T5850] dump_stack+0x15/0x1b [ 88.565258][ T5850] should_fail_ex+0x265/0x280 [ 88.565278][ T5850] should_failslab+0x8c/0xb0 [ 88.565308][ T5850] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 88.565445][ T5850] ? sidtab_sid2str_get+0xa0/0x130 [ 88.565477][ T5850] kmemdup_noprof+0x2b/0x70 [ 88.565503][ T5850] sidtab_sid2str_get+0xa0/0x130 [ 88.565557][ T5850] security_sid_to_context_core+0x1eb/0x2e0 [ 88.565589][ T5850] security_sid_to_context+0x27/0x40 [ 88.565672][ T5850] selinux_lsmprop_to_secctx+0x67/0xf0 [ 88.565722][ T5850] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 88.565814][ T5850] audit_log_subj_ctx+0xa4/0x3e0 [ 88.565837][ T5850] ? skb_put+0xa9/0xf0 [ 88.565916][ T5850] audit_log_task_context+0x48/0x70 [ 88.565940][ T5850] audit_log_task+0xf4/0x250 [ 88.565973][ T5850] ? kstrtouint+0x76/0xc0 [ 88.566019][ T5850] audit_seccomp+0x61/0x100 [ 88.566049][ T5850] ? __seccomp_filter+0x82d/0x1250 [ 88.566077][ T5850] __seccomp_filter+0x83e/0x1250 [ 88.566161][ T5850] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 88.566193][ T5850] ? vfs_write+0x7e8/0x960 [ 88.566333][ T5850] __secure_computing+0x82/0x150 [ 88.566360][ T5850] syscall_trace_enter+0xcf/0x1e0 [ 88.566394][ T5850] do_syscall_64+0xac/0x200 [ 88.566437][ T5850] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 88.566464][ T5850] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 88.566497][ T5850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.566518][ T5850] RIP: 0033:0x7f6ac18df749 [ 88.566538][ T5850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.566556][ T5850] RSP: 002b:00007f6ac033f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c3 [ 88.566578][ T5850] RAX: ffffffffffffffda RBX: 00007f6ac1b35fa0 RCX: 00007f6ac18df749 [ 88.566591][ T5850] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 88.566604][ T5850] RBP: 00007f6ac033f090 R08: 0000000000000000 R09: 0000000000000000 [ 88.566648][ T5850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.566660][ T5850] R13: 00007f6ac1b36038 R14: 00007f6ac1b35fa0 R15: 00007ffc13d4a268 [ 88.566677][ T5850] [ 88.843039][ T5852] loop5: detected capacity change from 0 to 512 [ 88.851487][ T5852] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.750: inode #0: comm syz.5.750: iget: illegal inode # [ 88.865046][ T5852] EXT4-fs (loop5): get orphan inode failed [ 88.871220][ T5852] EXT4-fs (loop5): mount failed [ 89.039942][ T5865] loop5: detected capacity change from 0 to 512 [ 89.046642][ T5861] loop0: detected capacity change from 0 to 8192 [ 89.055501][ T5865] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 89.072079][ T5865] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #13: comm syz.5.757: iget: bad i_size value: 12154757448730 [ 89.085240][ T5865] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.757: couldn't read orphan inode 13 (err -117) [ 89.098373][ T5865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.113400][ T5865] ip6t_srh: unknown srh match flags 4000 [ 89.135125][ T4697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.366941][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.684921][ T5882] lo speed is unknown, defaulting to 1000 [ 89.691213][ T5882] lo speed is unknown, defaulting to 1000 [ 89.724455][ T5884] xt_TPROXY: Can be used only with -p tcp or -p udp [ 89.957538][ T5887] FAULT_INJECTION: forcing a failure. [ 89.957538][ T5887] name failslab, interval 1, probability 0, space 0, times 0 [ 89.970349][ T5887] CPU: 0 UID: 0 PID: 5887 Comm: syz.1.762 Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.970379][ T5887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.970393][ T5887] Call Trace: [ 89.970401][ T5887] [ 89.970410][ T5887] __dump_stack+0x1d/0x30 [ 89.970470][ T5887] dump_stack_lvl+0xe8/0x140 [ 89.970489][ T5887] dump_stack+0x15/0x1b [ 89.970504][ T5887] should_fail_ex+0x265/0x280 [ 89.970529][ T5887] should_failslab+0x8c/0xb0 [ 89.970559][ T5887] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 89.970639][ T5887] ? sidtab_sid2str_get+0xa0/0x130 [ 89.970684][ T5887] kmemdup_noprof+0x2b/0x70 [ 89.970712][ T5887] sidtab_sid2str_get+0xa0/0x130 [ 89.970756][ T5887] security_sid_to_context_core+0x1eb/0x2e0 [ 89.970789][ T5887] security_sid_to_context+0x27/0x40 [ 89.970862][ T5887] selinux_lsmprop_to_secctx+0x67/0xf0 [ 89.970894][ T5887] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 89.970918][ T5887] audit_log_subj_ctx+0xa4/0x3e0 [ 89.970940][ T5887] audit_log_task_context+0x48/0x70 [ 89.971033][ T5887] audit_log_task+0xf4/0x250 [ 89.971185][ T5887] audit_seccomp+0x61/0x100 [ 89.971211][ T5887] ? __seccomp_filter+0x82d/0x1250 [ 89.971257][ T5887] __seccomp_filter+0x83e/0x1250 [ 89.971282][ T5887] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 89.971308][ T5887] ? vfs_write+0x7e8/0x960 [ 89.971332][ T5887] ? __rcu_read_unlock+0x4f/0x70 [ 89.971424][ T5887] ? __fget_files+0x184/0x1c0 [ 89.971456][ T5887] __secure_computing+0x82/0x150 [ 89.971497][ T5887] syscall_trace_enter+0xcf/0x1e0 [ 89.971528][ T5887] do_syscall_64+0xac/0x200 [ 89.971563][ T5887] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 89.971593][ T5887] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 89.971636][ T5887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.971659][ T5887] RIP: 0033:0x7f03d494f749 [ 89.971676][ T5887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.971704][ T5887] RSP: 002b:00007f03d33af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 89.971726][ T5887] RAX: ffffffffffffffda RBX: 00007f03d4ba5fa0 RCX: 00007f03d494f749 [ 89.971739][ T5887] RDX: 0000000000000007 RSI: 0000000000000163 RDI: 0000000000000162 [ 89.971753][ T5887] RBP: 00007f03d33af090 R08: 0000000000000000 R09: 0000000000000000 [ 89.971767][ T5887] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.971850][ T5887] R13: 00007f03d4ba6038 R14: 00007f03d4ba5fa0 R15: 00007ffc0679a078 [ 89.971870][ T5887] [ 90.297841][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 90.297857][ T29] audit: type=1326 audit(1764550263.324:8667): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=5886 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f03d494f749 code=0x7ffc0000 [ 90.341946][ T29] audit: type=1326 audit(1764550263.664:8668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f03d494e15c code=0x7ffc0000 [ 90.365364][ T29] audit: type=1326 audit(1764550263.664:8669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f03d494e1ff code=0x7ffc0000 [ 90.388518][ T29] audit: type=1326 audit(1764550263.664:8670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f03d494e3aa code=0x7ffc0000 [ 90.411750][ T29] audit: type=1326 audit(1764550263.664:8671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d494f749 code=0x7ffc0000 [ 90.435176][ T29] audit: type=1326 audit(1764550263.664:8672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.1.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03d494f749 code=0x7ffc0000 [ 90.515843][ T29] audit: type=1326 audit(1764550263.794:8673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5b8ee31667 code=0x7ffc0000 [ 90.539319][ T29] audit: type=1326 audit(1764550263.794:8674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f5b8ee315dc code=0x7ffc0000 [ 90.562702][ T29] audit: type=1326 audit(1764550263.794:8675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5b8ee31514 code=0x7ffc0000 [ 90.585972][ T29] audit: type=1326 audit(1764550263.794:8676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5860 comm="syz.0.754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f5b8ee31514 code=0x7ffc0000 [ 90.614153][ T5899] mmap: syz.1.768 (5899) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.690692][ T5900] loop3: detected capacity change from 0 to 164 [ 90.712055][ T5905] FAULT_INJECTION: forcing a failure. [ 90.712055][ T5905] name failslab, interval 1, probability 0, space 0, times 0 [ 90.724945][ T5905] CPU: 0 UID: 0 PID: 5905 Comm: syz.1.770 Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.724979][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 90.724993][ T5905] Call Trace: [ 90.725000][ T5905] [ 90.725007][ T5905] __dump_stack+0x1d/0x30 [ 90.725034][ T5905] dump_stack_lvl+0xe8/0x140 [ 90.725063][ T5905] dump_stack+0x15/0x1b [ 90.725083][ T5905] should_fail_ex+0x265/0x280 [ 90.725108][ T5905] should_failslab+0x8c/0xb0 [ 90.725198][ T5905] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 90.725281][ T5905] ? __alloc_skb+0x101/0x320 [ 90.725357][ T5905] __alloc_skb+0x101/0x320 [ 90.725424][ T5905] ? audit_log_start+0x342/0x720 [ 90.725444][ T5905] audit_log_start+0x3a0/0x720 [ 90.725462][ T5905] ? kstrtouint+0x76/0xc0 [ 90.725564][ T5905] audit_seccomp+0x48/0x100 [ 90.725590][ T5905] ? __seccomp_filter+0x82d/0x1250 [ 90.725622][ T5905] __seccomp_filter+0x83e/0x1250 [ 90.725647][ T5905] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 90.725673][ T5905] ? vfs_write+0x7e8/0x960 [ 90.725749][ T5905] ? __rcu_read_unlock+0x4f/0x70 [ 90.725771][ T5905] ? __fget_files+0x184/0x1c0 [ 90.725867][ T5905] __secure_computing+0x82/0x150 [ 90.725890][ T5905] syscall_trace_enter+0xcf/0x1e0 [ 90.725915][ T5905] do_syscall_64+0xac/0x200 [ 90.725967][ T5905] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 90.725991][ T5905] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 90.726083][ T5905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.726102][ T5905] RIP: 0033:0x7f03d494f749 [ 90.726117][ T5905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.726163][ T5905] RSP: 002b:00007f03d33af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd [ 90.726181][ T5905] RAX: ffffffffffffffda RBX: 00007f03d4ba5fa0 RCX: 00007f03d494f749 [ 90.726192][ T5905] RDX: 0000000000000000 RSI: 000000000000007f RDI: 0000000000000003 [ 90.726203][ T5905] RBP: 00007f03d33af090 R08: 0000000000000000 R09: 0000000000000000 [ 90.726214][ T5905] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 90.726224][ T5905] R13: 00007f03d4ba6038 R14: 00007f03d4ba5fa0 R15: 00007ffc0679a078 [ 90.726255][ T5905] [ 90.970515][ T5900] Unable to read rock-ridge attributes [ 91.027560][ T5894] Unable to read rock-ridge attributes [ 91.040727][ T5894] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 91.248153][ T5924] siw: device registration error -23 [ 91.490659][ T5927] lo speed is unknown, defaulting to 1000 [ 91.496954][ T5927] lo speed is unknown, defaulting to 1000 [ 91.530059][ T5932] xt_TPROXY: Can be used only with -p tcp or -p udp [ 92.095228][ T5938] IPv6: sit1: Disabled Multicast RS [ 92.101283][ T5938] sit1: entered allmulticast mode [ 92.307420][ T5954] IPv6: Can't replace route, no match found [ 92.405821][ T5944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.414644][ T5944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.466724][ T5964] IPv6: Can't replace route, no match found [ 92.735195][ T5971] loop0: detected capacity change from 0 to 8192 [ 92.754289][ T5969] lo speed is unknown, defaulting to 1000 [ 92.761082][ T5969] lo speed is unknown, defaulting to 1000 [ 92.795416][ T5974] xt_TPROXY: Can be used only with -p tcp or -p udp [ 93.073264][ T5973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.082968][ T5973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.272779][ T5996] IPv6: Can't replace route, no match found [ 93.646709][ T6016] loop1: detected capacity change from 0 to 2048 [ 94.220714][ T6020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.315289][ T6020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.346629][ T6030] IPv6: Can't replace route, no match found [ 94.409585][ T6016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.553275][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.591497][ T6043] lo speed is unknown, defaulting to 1000 [ 94.597613][ T6043] lo speed is unknown, defaulting to 1000 [ 94.632592][ T6049] xt_TPROXY: Can be used only with -p tcp or -p udp [ 94.670869][ T6051] lo speed is unknown, defaulting to 1000 [ 94.677188][ T6051] lo speed is unknown, defaulting to 1000 [ 94.677244][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.5.824'. [ 94.711027][ T6053] netlink: 'syz.1.826': attribute type 4 has an invalid length. [ 94.718834][ T6053] netlink: 152 bytes leftover after parsing attributes in process `syz.1.826'. [ 94.809070][ T6061] IPv6: Can't replace route, no match found [ 95.113401][ T6088] siw: device registration error -23 [ 95.404874][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 95.404891][ T29] audit: type=1326 audit(1764550268.764:8814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6090 comm="syz.0.842" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b8ee2f749 code=0x0 [ 95.436191][ T6087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.500708][ T6102] IPv6: Can't replace route, no match found [ 95.625443][ T29] audit: type=1400 audit(1764550268.994:8815): avc: denied { read } for pid=6105 comm="syz.4.846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.872735][ T6110] FAULT_INJECTION: forcing a failure. [ 95.872735][ T6110] name failslab, interval 1, probability 0, space 0, times 0 [ 95.885718][ T6110] CPU: 1 UID: 0 PID: 6110 Comm: syz.5.847 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.885799][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.885810][ T6110] Call Trace: [ 95.885816][ T6110] [ 95.885823][ T6110] __dump_stack+0x1d/0x30 [ 95.885849][ T6110] dump_stack_lvl+0xe8/0x140 [ 95.885872][ T6110] dump_stack+0x15/0x1b [ 95.885891][ T6110] should_fail_ex+0x265/0x280 [ 95.885913][ T6110] should_failslab+0x8c/0xb0 [ 95.886096][ T6110] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 95.886124][ T6110] ? __alloc_skb+0x101/0x320 [ 95.886174][ T6110] __alloc_skb+0x101/0x320 [ 95.886201][ T6110] tipc_buf_acquire+0x2c/0xb0 [ 95.886274][ T6110] tipc_msg_build+0x3d0/0x840 [ 95.886335][ T6110] tipc_send_group_bcast+0x59f/0x6b0 [ 95.886363][ T6110] ? __pfx_woken_wake_function+0x10/0x10 [ 95.886397][ T6110] __tipc_sendmsg+0x189/0x1b10 [ 95.886421][ T6110] ? avc_has_perm+0xf7/0x180 [ 95.886442][ T6110] ? selinux_socket_sendmsg+0x175/0x1b0 [ 95.886465][ T6110] ? _raw_spin_unlock_bh+0x36/0x40 [ 95.886503][ T6110] ? lock_sock_nested+0x112/0x140 [ 95.886532][ T6110] tipc_sendmsg+0x3e/0x60 [ 95.886556][ T6110] ? __pfx_tipc_sendmsg+0x10/0x10 [ 95.886581][ T6110] __sock_sendmsg+0x145/0x180 [ 95.886662][ T6110] ____sys_sendmsg+0x345/0x4e0 [ 95.886747][ T6110] ___sys_sendmsg+0x17b/0x1d0 [ 95.886777][ T6110] __sys_sendmmsg+0x178/0x300 [ 95.886804][ T6110] __x64_sys_sendmmsg+0x57/0x70 [ 95.886823][ T6110] x64_sys_call+0x1c4a/0x3000 [ 95.886893][ T6110] do_syscall_64+0xd2/0x200 [ 95.886914][ T6110] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 95.886941][ T6110] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 95.886972][ T6110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.887058][ T6110] RIP: 0033:0x7f6ac18df749 [ 95.887074][ T6110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.887130][ T6110] RSP: 002b:00007f6ac031e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 95.887150][ T6110] RAX: ffffffffffffffda RBX: 00007f6ac1b36090 RCX: 00007f6ac18df749 [ 95.887163][ T6110] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000004 [ 95.887205][ T6110] RBP: 00007f6ac031e090 R08: 0000000000000000 R09: 0000000000000000 [ 95.887217][ T6110] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.887229][ T6110] R13: 00007f6ac1b36128 R14: 00007f6ac1b36090 R15: 00007ffc13d4a268 [ 95.887247][ T6110] [ 96.065706][ T29] audit: type=1400 audit(1764550269.424:8816): avc: denied { read } for pid=6125 comm="syz.4.853" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 96.065745][ T29] audit: type=1400 audit(1764550269.424:8817): avc: denied { open } for pid=6125 comm="syz.4.853" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 96.094378][ T6123] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 96.213160][ T29] audit: type=1326 audit(1764550269.574:8818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 96.236557][ T29] audit: type=1326 audit(1764550269.574:8819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 96.260160][ T29] audit: type=1326 audit(1764550269.574:8820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 96.284157][ T29] audit: type=1326 audit(1764550269.574:8821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 96.314973][ T29] audit: type=1326 audit(1764550269.574:8822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 96.338426][ T29] audit: type=1326 audit(1764550269.574:8823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.4.856" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 96.363126][ T6123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.363300][ T6123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.409806][ T6139] IPv6: Can't replace route, no match found [ 96.558153][ T6135] siw: device registration error -23 [ 96.691916][ T6141] loop5: detected capacity change from 0 to 512 [ 96.755930][ T6141] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.858: inode #0: comm syz.5.858: iget: illegal inode # [ 96.890913][ T6141] EXT4-fs (loop5): get orphan inode failed [ 96.956026][ T6141] EXT4-fs (loop5): mount failed [ 97.186470][ T6151] loop3: detected capacity change from 0 to 1024 [ 97.228946][ T6151] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 97.241196][ T6157] netlink: 'syz.4.864': attribute type 2 has an invalid length. [ 97.253689][ T6151] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.284983][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 97.327911][ T6164] loop4: detected capacity change from 0 to 256 [ 97.345240][ T6164] vfat: Bad value for 'shortname' [ 97.459265][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 97.549351][ T6179] siw: device registration error -23 [ 97.591683][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 98.262126][ T6194] loop0: detected capacity change from 0 to 512 [ 98.299657][ T6194] EXT4-fs: Ignoring removed nobh option [ 98.305731][ T6194] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 98.333629][ T6194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.351263][ T6198] loop4: detected capacity change from 0 to 8192 [ 98.380825][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 98.388889][ T6194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.475457][ T6208] IPv6: Can't replace route, no match found [ 98.731459][ T6230] loop5: detected capacity change from 0 to 512 [ 98.761507][ T6230] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.893: inode #0: comm syz.5.893: iget: illegal inode # [ 98.775095][ T6230] EXT4-fs (loop5): get orphan inode failed [ 98.781169][ T6230] EXT4-fs (loop5): mount failed [ 98.883558][ T6239] loop5: detected capacity change from 0 to 512 [ 98.897749][ T6239] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.897: inode #0: comm syz.5.897: iget: illegal inode # [ 98.911513][ T6239] EXT4-fs (loop5): get orphan inode failed [ 98.918253][ T6239] EXT4-fs (loop5): mount failed [ 99.041844][ T6252] loop5: detected capacity change from 0 to 512 [ 99.053136][ T6252] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.902: inode #0: comm syz.5.902: iget: illegal inode # [ 99.066871][ T6252] EXT4-fs (loop5): get orphan inode failed [ 99.073042][ T6252] EXT4-fs (loop5): mount failed [ 99.422048][ T6267] lo speed is unknown, defaulting to 1000 [ 99.428228][ T6267] lo speed is unknown, defaulting to 1000 [ 99.464069][ T6274] xt_TPROXY: Can be used only with -p tcp or -p udp [ 99.498726][ T6261] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 99.515186][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.523073][ T6269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 99.523878][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.146546][ T6307] IPv6: Can't replace route, no match found [ 100.423566][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 100.423584][ T29] audit: type=1326 audit(1764550273.781:9578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b8ee265e7 code=0x7ffc0000 [ 100.453300][ T29] audit: type=1326 audit(1764550273.781:9579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b8edcb829 code=0x7ffc0000 [ 100.476641][ T29] audit: type=1326 audit(1764550273.781:9580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5b8ee2f749 code=0x7ffc0000 [ 100.535488][ T6337] netlink: 'syz.3.937': attribute type 10 has an invalid length. [ 100.543408][ T6337] ipvlan0: entered allmulticast mode [ 100.548799][ T6337] veth0_vlan: entered allmulticast mode [ 100.563986][ T6337] team0: Device ipvlan0 failed to register rx_handler [ 100.594706][ T6333] lo speed is unknown, defaulting to 1000 [ 100.597820][ T29] audit: type=1326 audit(1764550273.871:9581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b8ee265e7 code=0x7ffc0000 [ 100.600839][ T6333] lo speed is unknown, defaulting to 1000 [ 100.624012][ T29] audit: type=1326 audit(1764550273.871:9582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b8edcb829 code=0x7ffc0000 [ 100.652887][ T29] audit: type=1326 audit(1764550273.871:9583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b8ee265e7 code=0x7ffc0000 [ 100.676426][ T29] audit: type=1326 audit(1764550273.871:9584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b8edcb829 code=0x7ffc0000 [ 100.699947][ T29] audit: type=1326 audit(1764550273.871:9585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f5b8ee2f749 code=0x7ffc0000 [ 100.723324][ T29] audit: type=1326 audit(1764550273.871:9586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5b8ee265e7 code=0x7ffc0000 [ 100.746956][ T29] audit: type=1326 audit(1764550273.871:9587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6193 comm="syz.0.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5b8edcb829 code=0x7ffc0000 [ 100.774902][ T6345] xt_TPROXY: Can be used only with -p tcp or -p udp [ 100.816394][ T6350] IPv6: Can't replace route, no match found [ 100.922915][ T6364] FAULT_INJECTION: forcing a failure. [ 100.922915][ T6364] name failslab, interval 1, probability 0, space 0, times 0 [ 100.935866][ T6364] CPU: 0 UID: 0 PID: 6364 Comm: syz.3.949 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.935926][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 100.935937][ T6364] Call Trace: [ 100.935942][ T6364] [ 100.936010][ T6364] __dump_stack+0x1d/0x30 [ 100.936032][ T6364] dump_stack_lvl+0xe8/0x140 [ 100.936052][ T6364] dump_stack+0x15/0x1b [ 100.936131][ T6364] should_fail_ex+0x265/0x280 [ 100.936149][ T6364] should_failslab+0x8c/0xb0 [ 100.936174][ T6364] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 100.936284][ T6364] ? sidtab_sid2str_get+0xa0/0x130 [ 100.936317][ T6364] kmemdup_noprof+0x2b/0x70 [ 100.936348][ T6364] sidtab_sid2str_get+0xa0/0x130 [ 100.936378][ T6364] security_sid_to_context_core+0x1eb/0x2e0 [ 100.936435][ T6364] security_sid_to_context+0x27/0x40 [ 100.936534][ T6364] selinux_lsmprop_to_secctx+0x67/0xf0 [ 100.936597][ T6364] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 100.936718][ T6364] audit_log_subj_ctx+0xa4/0x3e0 [ 100.936788][ T6364] ? skb_put+0xa9/0xf0 [ 100.936824][ T6364] audit_log_task_context+0x48/0x70 [ 100.936906][ T6364] audit_log_task+0xf4/0x250 [ 100.936937][ T6364] ? kstrtouint+0x76/0xc0 [ 100.937024][ T6364] audit_seccomp+0x61/0x100 [ 100.937111][ T6364] ? __seccomp_filter+0x82d/0x1250 [ 100.937143][ T6364] __seccomp_filter+0x83e/0x1250 [ 100.937175][ T6364] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 100.937276][ T6364] ? vfs_write+0x7e8/0x960 [ 100.937309][ T6364] __secure_computing+0x82/0x150 [ 100.937333][ T6364] syscall_trace_enter+0xcf/0x1e0 [ 100.937395][ T6364] do_syscall_64+0xac/0x200 [ 100.937419][ T6364] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 100.937446][ T6364] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 100.937474][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.937574][ T6364] RIP: 0033:0x7f98c47ff749 [ 100.937590][ T6364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.937611][ T6364] RSP: 002b:00007f98c3267038 EFLAGS: 00000246 ORIG_RAX: 0000000000000087 [ 100.937635][ T6364] RAX: ffffffffffffffda RBX: 00007f98c4a55fa0 RCX: 00007f98c47ff749 [ 100.937650][ T6364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000005400004 [ 100.937664][ T6364] RBP: 00007f98c3267090 R08: 0000000000000000 R09: 0000000000000000 [ 100.937679][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.937772][ T6364] R13: 00007f98c4a56038 R14: 00007f98c4a55fa0 R15: 00007ffc81117708 [ 100.937793][ T6364] [ 101.261747][ T6368] loop4: detected capacity change from 0 to 512 [ 101.302092][ T6371] siw: device registration error -23 [ 101.342283][ T6368] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.952: inode #0: comm syz.4.952: iget: illegal inode # [ 101.355891][ T6368] EXT4-fs (loop4): get orphan inode failed [ 101.362094][ T6368] EXT4-fs (loop4): mount failed [ 101.978338][ T6383] loop4: detected capacity change from 0 to 2048 [ 101.990799][ T6384] FAULT_INJECTION: forcing a failure. [ 101.990799][ T6384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.004027][ T6384] CPU: 0 UID: 0 PID: 6384 Comm: syz.1.956 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.004057][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 102.004070][ T6384] Call Trace: [ 102.004076][ T6384] [ 102.004083][ T6384] __dump_stack+0x1d/0x30 [ 102.004104][ T6384] dump_stack_lvl+0xe8/0x140 [ 102.004140][ T6384] dump_stack+0x15/0x1b [ 102.004160][ T6384] should_fail_ex+0x265/0x280 [ 102.004182][ T6384] should_fail+0xb/0x20 [ 102.004201][ T6384] should_fail_usercopy+0x1a/0x20 [ 102.004280][ T6384] _copy_to_user+0x20/0xa0 [ 102.004304][ T6384] simple_read_from_buffer+0xb5/0x130 [ 102.004344][ T6384] proc_fail_nth_read+0x10e/0x150 [ 102.004379][ T6384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 102.004411][ T6384] vfs_read+0x1a8/0x770 [ 102.004437][ T6384] ? __rcu_read_unlock+0x4f/0x70 [ 102.004477][ T6384] ? __fget_files+0x184/0x1c0 [ 102.004502][ T6384] ksys_read+0xda/0x1a0 [ 102.004585][ T6384] __x64_sys_read+0x40/0x50 [ 102.004650][ T6384] x64_sys_call+0x27c0/0x3000 [ 102.004674][ T6384] do_syscall_64+0xd2/0x200 [ 102.004697][ T6384] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 102.004793][ T6384] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 102.004827][ T6384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.004850][ T6384] RIP: 0033:0x7f03d494e15c [ 102.004899][ T6384] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 102.004920][ T6384] RSP: 002b:00007f03d33af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.004942][ T6384] RAX: ffffffffffffffda RBX: 00007f03d4ba5fa0 RCX: 00007f03d494e15c [ 102.004956][ T6384] RDX: 000000000000000f RSI: 00007f03d33af0a0 RDI: 0000000000000006 [ 102.004969][ T6384] RBP: 00007f03d33af090 R08: 0000000000000000 R09: 0000000000000000 [ 102.004983][ T6384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.005007][ T6384] R13: 00007f03d4ba6038 R14: 00007f03d4ba5fa0 R15: 00007ffc0679a078 [ 102.005026][ T6384] [ 102.235433][ T6383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.271291][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'. [ 102.275260][ T6393] loop1: detected capacity change from 0 to 512 [ 102.306904][ T6393] EXT4-fs: Ignoring removed nobh option [ 102.319198][ T6393] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 102.348479][ T6393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.362643][ T6407] loop3: detected capacity change from 0 to 512 [ 102.369726][ T3322] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 102.388623][ T3322] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 102.402595][ T6408] loop5: detected capacity change from 0 to 2048 [ 102.405049][ T6393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.419100][ T6407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.430012][ T6408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.431881][ T6407] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.447026][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.482758][ T6414] loop4: detected capacity change from 0 to 1024 [ 102.495485][ T6414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 102.508602][ T6414] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.529820][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.965'. [ 102.733727][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 102.785065][ T6428] IPv6: Can't replace route, no match found [ 102.827790][ T6432] geneve2: entered promiscuous mode [ 103.166830][ T6441] loop0: detected capacity change from 0 to 2048 [ 103.189068][ T4697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.189162][ T6441] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.210543][ T6441] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.228247][ T6441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.244619][ T6441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.270229][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.319078][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'. [ 103.345697][ T6452] loop3: detected capacity change from 0 to 2048 [ 103.386246][ T6452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.402789][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 103.423792][ T3319] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 103.438809][ T3319] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 103.457051][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.537874][ T6468] hub 9-0:1.0: USB hub found [ 103.546910][ T6468] hub 9-0:1.0: 8 ports detected [ 103.607390][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.616085][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.679637][ T6478] loop5: detected capacity change from 0 to 512 [ 103.690972][ T6478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.703814][ T6478] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.894988][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.920134][ T6486] loop0: detected capacity change from 0 to 512 [ 103.927452][ T6486] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 103.939146][ T6486] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 103.948926][ T6486] block device autoloading is deprecated and will be removed. [ 103.956884][ T6486] EXT4-fs (loop0): couldn't read superblock of external journal [ 104.021734][ T6490] loop0: detected capacity change from 0 to 2048 [ 104.034962][ T6490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.050267][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.989'. [ 104.068763][ T3318] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 104.083579][ T3318] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 104.098716][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.385096][ T6498] siw: device registration error -23 [ 105.338181][ T6516] netlink: 'syz.1.998': attribute type 2 has an invalid length. [ 105.682376][ T29] kauditd_printk_skb: 1076 callbacks suppressed [ 105.682394][ T29] audit: type=1400 audit(1764550279.053:10663): avc: denied { create } for pid=6517 comm="syz.0.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.899080][ T6519] loop1: detected capacity change from 0 to 256 [ 105.922171][ T6519] vfat: Bad value for 'shortname' [ 105.927641][ T29] audit: type=1400 audit(1764550279.083:10664): avc: denied { write } for pid=6517 comm="syz.0.999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 105.947610][ T29] audit: type=1400 audit(1764550279.113:10665): avc: denied { connect } for pid=6515 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.967579][ T29] audit: type=1400 audit(1764550279.113:10666): avc: denied { read } for pid=6515 comm="syz.1.998" path="socket:[14183]" dev="sockfs" ino=14183 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.010212][ T29] audit: type=1400 audit(1764550279.334:10667): avc: denied { create } for pid=6515 comm="syz.1.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 106.029856][ T29] audit: type=1400 audit(1764550279.344:10668): avc: denied { connect } for pid=6520 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.062767][ T6529] loop3: detected capacity change from 0 to 512 [ 106.072116][ T6529] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.1004: inode #0: comm syz.3.1004: iget: illegal inode # [ 106.085481][ T6529] EXT4-fs (loop3): get orphan inode failed [ 106.091586][ T6529] EXT4-fs (loop3): mount failed [ 106.224872][ T29] audit: type=1326 audit(1764550279.594:10669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6543 comm="syz.1.1010" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f03d494f749 code=0x0 [ 106.274013][ T6538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.283848][ T6538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.286153][ T6549] loop0: detected capacity change from 0 to 128 [ 106.300542][ T6549] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.312996][ T6549] ext4 filesystem being mounted at /186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 106.347797][ T29] audit: type=1400 audit(1764550279.714:10670): avc: denied { setattr } for pid=6548 comm="syz.0.1012" path="/186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 106.429283][ T29] audit: type=1400 audit(1764550279.794:10671): avc: denied { kexec_image_load } for pid=6548 comm="syz.0.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 106.495542][ T29] audit: type=1400 audit(1764550279.864:10672): avc: denied { watch watch_reads } for pid=6536 comm="syz.3.1007" path="/194" dev="tmpfs" ino=1063 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 106.520813][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.565132][ T4697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.741299][ T6564] loop0: detected capacity change from 0 to 2048 [ 106.755804][ T6564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.774500][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1018'. [ 106.801018][ T6570] netlink: 14 bytes leftover after parsing attributes in process `XáMJtp'. [ 106.806343][ T3318] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 106.824594][ T6570] hsr_slave_0: left promiscuous mode [ 106.827265][ T3318] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 106.838763][ T6570] hsr_slave_1: left promiscuous mode [ 106.847219][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.945189][ T6581] hub 9-0:1.0: USB hub found [ 106.952967][ T6581] hub 9-0:1.0: 8 ports detected [ 106.980468][ T6578] loop0: detected capacity change from 0 to 8192 [ 107.022051][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.041579][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.145688][ T6596] loop5: detected capacity change from 0 to 512 [ 107.200259][ T6596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.245606][ T6596] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.460473][ T6610] program syz.3.1036 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.677028][ T6623] siw: device registration error -23 [ 108.239197][ T6622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.248260][ T6622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.426338][ T6636] loop1: detected capacity change from 0 to 2048 [ 108.454079][ T6636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.469447][ T6636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1046'. [ 108.488547][ T3314] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 108.503710][ T3314] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 108.516527][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.691396][ T6646] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1049'. [ 108.703907][ T6646] loop1: detected capacity change from 0 to 512 [ 108.715874][ T6646] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.732085][ T6646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.744964][ T6646] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.764960][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.962132][ T6665] loop4: detected capacity change from 0 to 2048 [ 108.974876][ T6665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.004019][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1057'. [ 109.049711][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.058707][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.063801][ T3322] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 109.089121][ T3322] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 109.116151][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.293959][ T6681] loop4: detected capacity change from 0 to 8192 [ 109.353881][ T6693] loop0: detected capacity change from 0 to 2048 [ 109.384972][ T6693] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.420085][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1069'. [ 109.439779][ T3318] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 109.458766][ T3318] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 109.492103][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.522073][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.551771][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.922428][ T6716] lo speed is unknown, defaulting to 1000 [ 109.928862][ T6716] lo speed is unknown, defaulting to 1000 [ 110.242469][ T4697] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.642524][ T6724] siw: device registration error -23 [ 110.853723][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 110.853743][ T29] audit: type=1326 audit(1764550284.226:10871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.5.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 111.065668][ T29] audit: type=1326 audit(1764550284.256:10872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.5.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 111.089370][ T29] audit: type=1326 audit(1764550284.256:10873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.5.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 111.113078][ T29] audit: type=1326 audit(1764550284.266:10874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.5.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 111.136892][ T29] audit: type=1326 audit(1764550284.266:10875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.5.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 111.137166][ T6731] loop5: detected capacity change from 0 to 8192 [ 111.160795][ T29] audit: type=1326 audit(1764550284.266:10876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.5.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6ac18df749 code=0x7ffc0000 [ 111.190979][ T29] audit: type=1326 audit(1764550284.266:10877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6730 comm="syz.5.1080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ac18df783 code=0x7ffc0000 [ 111.214412][ T29] audit: type=1326 audit(1764550284.356:10878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6732 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 111.238131][ T29] audit: type=1326 audit(1764550284.356:10879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6732 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 111.261692][ T29] audit: type=1326 audit(1764550284.356:10880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6732 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f76a33cf749 code=0x7ffc0000 [ 111.381257][ T6739] loop3: detected capacity change from 0 to 512 [ 111.416857][ T6739] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.1087: inode #0: comm syz.3.1087: iget: illegal inode # [ 111.432149][ T6747] hub 9-0:1.0: USB hub found [ 111.443506][ T6747] hub 9-0:1.0: 8 ports detected [ 111.460515][ T6739] EXT4-fs (loop3): get orphan inode failed [ 111.472136][ T6739] EXT4-fs (loop3): mount failed [ 111.520602][ T6749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.531162][ T6749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.584779][ T6753] loop1: detected capacity change from 0 to 512 [ 111.636688][ T6753] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.1092: inode #0: comm syz.1.1092: iget: illegal inode # [ 111.658424][ T6753] EXT4-fs (loop1): get orphan inode failed [ 111.664789][ T6753] EXT4-fs (loop1): mount failed [ 111.669932][ T6755] loop3: detected capacity change from 0 to 512 [ 111.685905][ T6760] loop4: detected capacity change from 0 to 512 [ 111.694233][ T6755] EXT4-fs error (device loop3): ext4_init_orphan_info:581: comm syz.3.1093: inode #0: comm syz.3.1093: iget: illegal inode # [ 111.728025][ T6755] EXT4-fs (loop3): get orphan inode failed [ 111.739047][ T6760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.757370][ T6755] EXT4-fs (loop3): mount failed [ 111.757363][ T6760] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.757495][ T6760] ================================================================== [ 111.762300][ T6760] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 111.762336][ T6760] [ 111.762345][ T6760] write to 0xffffffff88e5beb0 of 3 bytes by task 6755 on cpu 1: [ 111.762365][ T6760] vsnprintf+0x2ce/0x890 [ 111.762392][ T6760] vscnprintf+0x41/0x90 [ 111.762419][ T6760] printk_sprint+0x30/0x2d0 [ 111.762442][ T6760] vprintk_store+0x599/0x860 [ 111.762462][ T6760] vprintk_emit+0x10d/0x580 [ 111.762483][ T6760] vprintk_default+0x26/0x30 [ 111.762505][ T6760] vprintk+0x1d/0x30 [ 111.762537][ T6760] _printk+0x79/0xa0 [ 111.762571][ T6760] __ext4_msg+0x18f/0x1a0 [ 111.762591][ T6760] ext4_fill_super+0x2b4c/0x3810 [ 111.762610][ T6760] get_tree_bdev_flags+0x291/0x300 [ 111.762635][ T6760] get_tree_bdev+0x1f/0x30 [ 111.762664][ T6760] ext4_get_tree+0x1c/0x30 [ 111.762687][ T6760] vfs_get_tree+0x57/0x1d0 [ 111.762716][ T6760] do_new_mount+0x24d/0x660 [ 111.762737][ T6760] path_mount+0x4a5/0xb70 [ 111.762757][ T6760] __se_sys_mount+0x28c/0x2e0 [ 111.762780][ T6760] __x64_sys_mount+0x67/0x80 [ 111.762809][ T6760] x64_sys_call+0x2b51/0x3000 [ 111.762835][ T6760] do_syscall_64+0xd2/0x200 [ 111.762854][ T6760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.762874][ T6760] [ 111.762881][ T6760] read to 0xffffffff88e5beb0 of 8 bytes by task 6760 on cpu 0: [ 111.762896][ T6760] data_push_tail+0xfd/0x420 [ 111.762919][ T6760] data_alloc+0xfb/0x2e0 [ 111.762941][ T6760] prb_reserve+0x807/0xaf0 [ 111.762963][ T6760] vprintk_store+0x56d/0x860 [ 111.762983][ T6760] vprintk_emit+0x10d/0x580 [ 111.763001][ T6760] vprintk_default+0x26/0x30 [ 111.763021][ T6760] vprintk+0x1d/0x30 [ 111.763049][ T6760] _printk+0x79/0xa0 [ 111.763082][ T6760] mnt_warn_timestamp_expiry+0x1c3/0x200 [ 111.763117][ T6760] do_new_mount+0x31b/0x660 [ 111.763138][ T6760] path_mount+0x4a5/0xb70 [ 111.763157][ T6760] __se_sys_mount+0x28c/0x2e0 [ 111.763185][ T6760] __x64_sys_mount+0x67/0x80 [ 111.763221][ T6760] x64_sys_call+0x2b51/0x3000 [ 111.763242][ T6760] do_syscall_64+0xd2/0x200 [ 111.763261][ T6760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.763280][ T6760] [ 111.763285][ T6760] value changed: 0x00000000ffffe30e -> 0x6620746e756f6d20 [ 111.763299][ T6760] [ 111.763305][ T6760] Reported by Kernel Concurrency Sanitizer on: [ 111.763321][ T6760] CPU: 0 UID: 0 PID: 6760 Comm: syz.4.1090 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.763351][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 111.763367][ T6760] ================================================================== [ 114.449085][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.