last executing test programs: 5.059640335s ago: executing program 4 (id=1692): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x3, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd79, 0x7, 0x800, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_setup(0x3, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x24, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000010c0)=0x100, 0x4) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r2, 0x80000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket(0x18, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg1\x00'}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 4.633814057s ago: executing program 1 (id=1701): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x835, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 4.077742961s ago: executing program 4 (id=1706): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000280)=""/231) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_complete(0x0) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x15, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000007000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b70200000200000085000000a5000000b7000000000000009500000000000000"], &(0x7f0000000b00)='GPL\x00', 0x2, 0xa4, &(0x7f0000000f00)=""/164, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000fc0)=[{0x5, 0x3, 0x4, 0xd}], 0x10, 0xe55}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) shutdown(r7, 0x1) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 3.928229216s ago: executing program 4 (id=1708): openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)={@cgroup=r0, r1, 0x2f, 0x10, 0x4, @void, @value=r1}, 0x20) 3.857459523s ago: executing program 4 (id=1709): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 3.549234593s ago: executing program 1 (id=1711): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "100017", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) 3.519050136s ago: executing program 1 (id=1712): r0 = socket$pppoe(0x18, 0x1, 0x0) close(r0) 3.501934867s ago: executing program 1 (id=1713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 3.457058962s ago: executing program 2 (id=1714): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) flock(r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c40)=@delchain={0x7c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x48, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0xfffffe09, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x89da}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xfc}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x7}, 0x18) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000240)=0x1) ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0x10001) write(r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r12, r11, 0x25, 0x0, @void}, 0x10) 3.228182294s ago: executing program 2 (id=1717): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000280)=""/231) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_io_uring_complete(0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000011c0)={r6, 0xe3, {0x0, 0x0, 0x0, 0x8, 0x1ff, 0x0, 0x3, 0x2, 0x0, "e9d06409d3e12a4568ef0e640ebce2d4d1311f64605ca2c3317d9abcefb915d6536e89606a648f52e8a8b7d9d449193e1c47b296c701d28fe2579412ab83513f", "b47ef552c58f2d8f1986f3a4760a9a6e266b17b09909ba796fc047a9c9957caffc557d05042cfd663c3fa65d4d718b32532c8131d9b66e9ab36d4a1b84a73ba4", "cd1a9fe78323485e489994e0ef5ce2eca396fb9e7a84eafba58f9fbc6b6cacb1", [0x7, 0x2]}}) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x19, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000000}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_fd={0x18, 0x8, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0xbd}, @alu={0x7, 0x0, 0xb, 0x1, 0x8, 0x4, 0x1}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x9a, &(0x7f0000000380)=""/154, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x9, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0xa, 0x6, 0x9}, 0x10, r10, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000010c0)=[{0x3, 0x3, 0x7, 0xa}, {0x2, 0x5, 0xa, 0x6}, {0x3, 0x4, 0x2, 0x8}, {0x0, 0x1, 0x9, 0xc}], 0x10, 0xa43}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r12, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r12, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 2.943456112s ago: executing program 0 (id=1719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000280)=""/231) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_complete(0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x15, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000007000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b70200000200000085000000a5000000b7000000000000009500000000000000"], &(0x7f0000000b00)='GPL\x00', 0x2, 0xa4, &(0x7f0000000f00)=""/164, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000fc0)=[{0x5, 0x3, 0x4, 0xd}], 0x10, 0xe55}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) shutdown(r7, 0x1) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 2.873453839s ago: executing program 2 (id=1720): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000"], &(0x7f0000000440)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r1, 0x0, 0x2a7203d3}, 0x18) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x59) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 2.829473523s ago: executing program 0 (id=1721): r0 = socket$kcm(0xa, 0x5, 0x0) mlockall(0x7) io_setup(0x8f0, &(0x7f0000002400)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0x402) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX=r0], 0x48) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='ext4_ext_handle_unwritten_extents\x00', 0xffffffffffffffff, 0x0, 0x10000000}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r3], 0x7c}}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@local, @broadcast, 0x0}, &(0x7f0000000200)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRESDEC=r1], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x55, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='ext4_forget\x00', r2}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) 2.801617866s ago: executing program 2 (id=1722): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x835, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 1.921738852s ago: executing program 0 (id=1724): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x1}, 0xc004, 0x10000, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000540)=@raw=[@exit, @exit], &(0x7f00000005c0)='GPL\x00', 0x700, 0xcc, &(0x7f0000000740)=""/204, 0x41100, 0x82, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000880)={0x2, 0x2, 0x4, 0x1}, 0x10, 0x23c41, r0, 0x8, &(0x7f00000008c0)=[0xffffffffffffffff], &(0x7f0000000900)=[{0x3, 0x5, 0x0, 0xb}, {0x3, 0x4, 0xb, 0x8}, {0x1, 0x4, 0x1, 0x6}, {0x5, 0x3, 0x7, 0x18}, {0x0, 0x5, 0x8, 0x2}, {0x0, 0x4, 0x9, 0xe}, {0x2, 0x2, 0x2, 0x2}, {0x2, 0x4, 0x2, 0x6}], 0x10, 0xffffd5d8}, 0x94) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000500)='syzkaller\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[], 0xa) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, r7, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x6, 0x0, &(0x7f0000000400)=[0x6, 0xdaa3, 0x800000000009, 0x8, 0x100, 0x1a], 0x1ff}}, 0x30) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x53b, 0x0, 0x0, {}, [{0x54, 0x1, [@m_simple={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0xfffffffd, 0x20000000}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x68}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r8, r2, 0x4, r1}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x1072, &(0x7f0000005840)=ANY=[], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x801, 0x84) 1.701152294s ago: executing program 0 (id=1725): r0 = socket$pppoe(0x18, 0x1, 0x0) close(r0) 1.593770354s ago: executing program 0 (id=1726): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) flock(r0, 0x7) read$eventfd(r0, &(0x7f0000000080), 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x20040055}, 0x4000) syz_usb_disconnect(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='prq_report\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000100)={0xa, 0x0, 0xfffffff9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf, 0x1}, 0x20) syz_usb_connect(0x2, 0x24, &(0x7f0000000740)=ANY=[], 0x0) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 1.53362979s ago: executing program 2 (id=1727): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000009c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ed1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000d66000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000f3000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2db, &(0x7f0000000040)={0x0, 0x36d, 0x20, 0x9000f, 0xa0002f6}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x1ffffdc1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000ff0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x9}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000008a3ada0000000000000000000000000000000000004f1500"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x20, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40efe, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r7}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000080)={[{@resgid}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@init_itable}, {@mblk_io_submit}]}, 0x5, 0x476, &(0x7f0000000540)="$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") ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000080)={0x0, 0x3, r6, 0x5}) shutdown(r0, 0x1) 1.215639431s ago: executing program 4 (id=1729): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r1, &(0x7f00000004c0)=[{&(0x7f0000000580)=""/152, 0x98}], 0x1) readv(r1, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) 923.15401ms ago: executing program 1 (id=1734): r0 = socket$kcm(0xa, 0x5, 0x0) mlockall(0x7) io_setup(0x8f0, &(0x7f0000002400)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0x402) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRESHEX=r0], 0x48) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='ext4_ext_handle_unwritten_extents\x00', 0xffffffffffffffff, 0x0, 0x10000000}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r3], 0x7c}}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@local, @broadcast, 0x0}, &(0x7f0000000200)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRESDEC=r1], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x55, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='ext4_forget\x00', r2}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) 627.159279ms ago: executing program 2 (id=1735): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f00000003c0)={&(0x7f0000000380)=""/48, 0x30}) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x171) unshare(0x20060400) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="00000000000200009ba8cc7ac3b021937d1db702000000004000000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x200f}) 519.00458ms ago: executing program 0 (id=1737): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x835, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) 367.624324ms ago: executing program 3 (id=1738): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x52, &(0x7f0000000180)={&(0x7f0000006340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xffe0, 0x1}, {}, {0x8, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x600, 0x9, 0x8, 0xaceb}]}}]}}]}, 0x44}}, 0x0) 356.248256ms ago: executing program 4 (id=1739): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) flock(r0, 0x7) read$eventfd(r0, &(0x7f0000000080), 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r1, @ANYRESHEX=r1, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES64=r3], 0xec}, 0x1, 0x0, 0x0, 0x20040055}, 0x4000) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='prq_report\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000100)={0xa, 0x0, 0xfffffff9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf, 0x1}, 0x20) syz_usb_connect(0x2, 0x24, &(0x7f0000000740)=ANY=[], 0x0) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 297.444682ms ago: executing program 3 (id=1740): r0 = io_uring_setup(0x7c5a, &(0x7f0000000200)={0x0, 0xddf4, 0x400, 0x0, 0x55}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, 0x0) dup(r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001100)) close_range(r0, r0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x2, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x7, 0xfffffff7, 0x101, 0x1d, 0xd}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x840) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 246.074916ms ago: executing program 3 (id=1741): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000280)=""/231) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_complete(0x0) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0], 0x0, 0x22, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x15, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000007000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000950000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b70200000200000085000000a5000000b7000000000000009500000000000000"], &(0x7f0000000b00)='GPL\x00', 0x2, 0xa4, &(0x7f0000000f00)=""/164, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000fc0)=[{0x5, 0x3, 0x4, 0xd}], 0x10, 0xe55}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) shutdown(r7, 0x1) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 233.411727ms ago: executing program 1 (id=1742): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x3, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd79, 0x7, 0x800, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) io_setup(0x3, 0x0) setxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x24, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000010c0)=0x100, 0x4) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r2, 0x80000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket(0x18, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x4}, 0x18) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000580)={'wg1\x00'}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 111.6436ms ago: executing program 3 (id=1743): memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x2, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80000001}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c00", @ANYRES16, @ANYBLOB="20002dbd7000fbdbdf2564ffef000800", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) r5 = dup(r3) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe55) r6 = socket(0x40000000015, 0x5, 0x0) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0xf00, 0x0, 0x0) 69.906384ms ago: executing program 3 (id=1744): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) clock_adjtime(0x3, &(0x7f0000000a80)={0x91, 0x100000000, 0xd, 0xb57, 0x4, 0x1, 0x7, 0x32, 0x26, 0x8, 0x2, 0xaf, 0x8963, 0x69, 0x5, 0x8, 0xfffffffffffffff5, 0x0, 0x7, 0x8001, 0x8000000000000001, 0x3, 0x6, 0x9, 0x2, 0x3}) mount$9p_fd(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), 0x2000000, &(0x7f0000000680)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0}) 0s ago: executing program 3 (id=1745): timer_create(0x3, 0x0, &(0x7f0000000100)) timer_create(0xfffffffffffffffd, 0x0, &(0x7f00000000c0)=0x0) (async) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x34000}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000f7ff000000002000000000000000840000000200000089000900020000000d0000000000000000000083b5000000000000", @ANYRES32=0x0], 0x38, 0x4008000}, 0x28008841) (async) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000002c0)={'bond_slave_0\x00', 0xc8}) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000073000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(r2, r1, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) (rerun: 64) pipe2(&(0x7f00000006c0)={0xffffffffffffffff}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$inet_udp(0x2, 0x2, 0x0) stat(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)) (async) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYRES64=r2], 0x310) (async) close_range(r3, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) syz_read_part_table(0x407c, &(0x7f000000db40)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") kernel console output (not intermixed with test programs): T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.0.1003 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.002243][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.002254][ T6752] Call Trace: [ 126.002261][ T6752] [ 126.002300][ T6752] __dump_stack+0x1d/0x30 [ 126.002321][ T6752] dump_stack_lvl+0x95/0xd0 [ 126.002340][ T6752] dump_stack+0x15/0x1b [ 126.002356][ T6752] should_fail_ex+0x265/0x280 [ 126.002433][ T6752] should_failslab+0x8c/0xb0 [ 126.002514][ T6752] __kmalloc_noprof+0xb9/0x5a0 [ 126.002541][ T6752] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 126.002573][ T6752] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 126.002597][ T6752] genl_family_rcv_msg_doit+0x48/0x1b0 [ 126.002673][ T6752] ? selinux_capable+0x31/0x40 [ 126.002731][ T6752] ? security_capable+0x83/0x90 [ 126.002769][ T6752] ? ns_capable+0x7d/0xb0 [ 126.002850][ T6752] genl_rcv_msg+0x422/0x460 [ 126.002869][ T6752] ? __pfx_net_dm_nl_pre_doit+0x10/0x10 [ 126.002897][ T6752] ? __pfx_net_dm_cmd_trace+0x10/0x10 [ 126.002972][ T6752] ? __pfx_net_dm_nl_post_doit+0x10/0x10 [ 126.003076][ T6752] netlink_rcv_skb+0x123/0x220 [ 126.003105][ T6752] ? __pfx_genl_rcv_msg+0x10/0x10 [ 126.003137][ T6752] genl_rcv+0x28/0x40 [ 126.003239][ T6752] netlink_unicast+0x5c0/0x690 [ 126.003381][ T6752] netlink_sendmsg+0x58b/0x6b0 [ 126.003419][ T6752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.003451][ T6752] __sock_sendmsg+0x145/0x180 [ 126.003472][ T6752] ____sys_sendmsg+0x31e/0x4a0 [ 126.003511][ T6752] ___sys_sendmsg+0x17b/0x1d0 [ 126.003582][ T6752] __x64_sys_sendmsg+0xd4/0x160 [ 126.003681][ T6752] x64_sys_call+0x17ba/0x3000 [ 126.003702][ T6752] do_syscall_64+0xca/0x2b0 [ 126.003732][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.003754][ T6752] RIP: 0033:0x7f7c6761f749 [ 126.003848][ T6752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.003880][ T6752] RSP: 002b:00007f7c6607f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.003900][ T6752] RAX: ffffffffffffffda RBX: 00007f7c67875fa0 RCX: 00007f7c6761f749 [ 126.003910][ T6752] RDX: 0000000004014000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 126.003921][ T6752] RBP: 00007f7c6607f090 R08: 0000000000000000 R09: 0000000000000000 [ 126.003933][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.003971][ T6752] R13: 00007f7c67876038 R14: 00007f7c67875fa0 R15: 00007fffdd5050a8 [ 126.003986][ T6752] [ 126.249778][ T6754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.258494][ T6754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.276925][ T6756] veth14: entered promiscuous mode [ 126.282201][ T6756] veth14: entered allmulticast mode [ 126.301028][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1005'. [ 126.339889][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 126.594211][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 126.594228][ T29] audit: type=1326 audit(1766449050.613:12147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 126.630381][ T29] audit: type=1326 audit(1766449050.633:12148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 126.653994][ T29] audit: type=1326 audit(1766449050.643:12149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 126.677712][ T29] audit: type=1326 audit(1766449050.643:12150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 126.701445][ T29] audit: type=1326 audit(1766449050.643:12151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 126.725001][ T29] audit: type=1326 audit(1766449050.643:12152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 126.748571][ T29] audit: type=1326 audit(1766449050.643:12153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd1e39ee1ff code=0x7ffc0000 [ 126.771929][ T29] audit: type=1326 audit(1766449050.643:12154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 126.795500][ T29] audit: type=1326 audit(1766449050.643:12155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6771 comm="syz.4.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 126.818918][ T29] audit: type=1400 audit(1766449050.643:12156): avc: denied { create } for pid=6771 comm="syz.4.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 126.869617][ T6782] loop3: detected capacity change from 0 to 2048 [ 127.150960][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1015'. [ 127.584778][ T6798] netlink: 'syz.1.1020': attribute type 21 has an invalid length. [ 127.593000][ T6798] netlink: 'syz.1.1020': attribute type 1 has an invalid length. [ 127.600758][ T6798] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1020'. [ 128.147497][ T6820] block device autoloading is deprecated and will be removed. [ 128.422834][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 128.428966][ T3855] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 128.816220][ T6831] veth12: entered promiscuous mode [ 128.821593][ T6831] veth12: entered allmulticast mode [ 128.859414][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1034'. [ 128.934646][ T6836] lo speed is unknown, defaulting to 1000 [ 128.982793][ T6836] wg1 speed is unknown, defaulting to 1000 [ 129.179751][ T6841] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.200096][ T6850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1039'. [ 130.341716][ T6860] 9p: Bad value for 'rfdno' [ 130.468562][ T6860] loop3: detected capacity change from 0 to 1024 [ 130.509608][ T6860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.552848][ T6860] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.738269][ T6873] loop2: detected capacity change from 0 to 2048 [ 130.818345][ T6873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 130.845093][ T2756] Bluetooth: hci0: Frame reassembly failed (-84) [ 130.951965][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.307436][ T6862] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.330794][ T6885] loop3: detected capacity change from 0 to 2048 [ 131.339002][ T6862] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 131.351503][ T6862] EXT4-fs (loop2): This should not happen!! Data will be lost [ 131.351503][ T6862] [ 131.361280][ T6862] EXT4-fs (loop2): Total free blocks count 0 [ 131.367310][ T6862] EXT4-fs (loop2): Free/Dirty block details [ 131.373255][ T6862] EXT4-fs (loop2): free_blocks=2415919104 [ 131.379001][ T6862] EXT4-fs (loop2): dirty_blocks=8192 [ 131.384344][ T6862] EXT4-fs (loop2): Block reservation details [ 131.390335][ T6862] EXT4-fs (loop2): i_reserved_data_blocks=512 [ 131.400645][ T6892] FAULT_INJECTION: forcing a failure. [ 131.400645][ T6892] name failslab, interval 1, probability 0, space 0, times 0 [ 131.413385][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.1.1052 Not tainted syzkaller #0 PREEMPT(voluntary) [ 131.413468][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 131.413479][ T6892] Call Trace: [ 131.413486][ T6892] [ 131.413493][ T6892] __dump_stack+0x1d/0x30 [ 131.413631][ T6892] dump_stack_lvl+0x95/0xd0 [ 131.413658][ T6892] dump_stack+0x15/0x1b [ 131.413800][ T6892] should_fail_ex+0x265/0x280 [ 131.413834][ T6892] should_failslab+0x8c/0xb0 [ 131.413855][ T6892] __kmalloc_noprof+0xb9/0x5a0 [ 131.413875][ T6892] ? iovec_from_user+0x84/0x210 [ 131.413956][ T6892] iovec_from_user+0x84/0x210 [ 131.414068][ T6892] __import_iovec+0xf3/0x540 [ 131.414096][ T6892] ? io_cache_alloc_new+0x2a/0xb0 [ 131.414123][ T6892] io_import_rw_buffer+0x245/0x380 [ 131.414146][ T6892] io_prep_rwv+0xae/0x250 [ 131.414233][ T6892] io_prep_writev+0x22/0x30 [ 131.414286][ T6892] io_submit_sqes+0x70f/0x11b0 [ 131.414393][ T6892] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 131.414424][ T6892] ? 0xffffffff81000000 [ 131.414437][ T6892] ? __rcu_read_unlock+0x4f/0x70 [ 131.414526][ T6892] ? proc_fail_nth_write+0x13b/0x160 [ 131.414553][ T6892] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 131.414579][ T6892] ? vfs_write+0x7e8/0x960 [ 131.414598][ T6892] ? __rcu_read_unlock+0x4f/0x70 [ 131.414664][ T6892] ? __fget_files+0x184/0x1c0 [ 131.414685][ T6892] ? mutex_unlock+0x4f/0x90 [ 131.414773][ T6892] ? fput+0x8f/0xc0 [ 131.414893][ T6892] __x64_sys_io_uring_enter+0x78/0x90 [ 131.414926][ T6892] x64_sys_call+0x27e4/0x3000 [ 131.414951][ T6892] do_syscall_64+0xca/0x2b0 [ 131.414984][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.415049][ T6892] RIP: 0033:0x7f4faffef749 [ 131.415063][ T6892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.415083][ T6892] RSP: 002b:00007f4faea4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 131.415103][ T6892] RAX: ffffffffffffffda RBX: 00007f4fb0245fa0 RCX: 00007f4faffef749 [ 131.415116][ T6892] RDX: 0000000000000000 RSI: 00000000000047f8 RDI: 0000000000000003 [ 131.415168][ T6892] RBP: 00007f4faea4f090 R08: 0000000000000000 R09: 0000000000000000 [ 131.415203][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.415215][ T6892] R13: 00007f4fb0246038 R14: 00007f4fb0245fa0 R15: 00007ffe9989e7b8 [ 131.415240][ T6892] [ 131.585411][ T6885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 131.748445][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 131.748491][ T29] audit: type=1400 audit(1766449055.764:12579): avc: denied { prog_load } for pid=6896 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.773934][ T29] audit: type=1400 audit(1766449055.764:12580): avc: denied { bpf } for pid=6896 comm="syz.1.1054" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 131.794692][ T29] audit: type=1400 audit(1766449055.764:12581): avc: denied { perfmon } for pid=6896 comm="syz.1.1054" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 131.816749][ T29] audit: type=1400 audit(1766449055.834:12582): avc: denied { prog_run } for pid=6896 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 131.838530][ T29] audit: type=1326 audit(1766449055.854:12583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 131.876490][ T29] audit: type=1326 audit(1766449055.884:12584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 131.899987][ T29] audit: type=1326 audit(1766449055.884:12585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 131.919529][ T6885] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, [ 131.923691][ T29] audit: type=1326 audit(1766449055.884:12586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 131.923703][ T6885] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.933312][ T6885] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 131.955460][ T29] audit: type=1326 audit(1766449055.884:12587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 131.955493][ T29] audit: type=1326 audit(1766449055.884:12588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6896 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 131.964288][ T6885] EXT4-fs (loop3): This should not happen!! Data will be lost [ 131.964288][ T6885] [ 131.991512][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 132.000237][ T6885] EXT4-fs (loop3): Total free blocks count 0 [ 132.048190][ T6885] EXT4-fs (loop3): Free/Dirty block details [ 132.054135][ T6885] EXT4-fs (loop3): free_blocks=2415919104 [ 132.059881][ T6885] EXT4-fs (loop3): dirty_blocks=3456 [ 132.065236][ T6885] EXT4-fs (loop3): Block reservation details [ 132.071278][ T6885] EXT4-fs (loop3): i_reserved_data_blocks=216 [ 132.166582][ T53] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 132.271815][ T52] Bluetooth: hci1: Frame reassembly failed (-84) [ 132.328049][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1396 with error 28 [ 132.559823][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.568395][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.912859][ T3593] Bluetooth: hci0: command 0x1003 tx timeout [ 132.912858][ T3855] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.103804][ T6928] program syz.2.1065 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.106374][ T6924] hub 9-0:1.0: USB hub found [ 133.113770][ T6928] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 133.118309][ T6924] hub 9-0:1.0: 8 ports detected [ 133.131539][ T6928] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1065'. [ 133.145983][ T6928] siw: device registration error -23 [ 133.159933][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1066'. [ 133.196820][ T6934] lo speed is unknown, defaulting to 1000 [ 133.231257][ T6934] wg1 speed is unknown, defaulting to 1000 [ 133.292216][ T6942] 9p: Bad value for 'rfdno' [ 133.304203][ T6942] loop3: detected capacity change from 0 to 1024 [ 133.314490][ T6942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.326886][ T6942] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.359009][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.493106][ T6936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.501727][ T6936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.505853][ T6934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.594229][ T6961] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1075'. [ 133.638007][ T6952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.646488][ T6952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.799408][ T6975] net_ratelimit: 6 callbacks suppressed [ 133.799422][ T6975] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 133.829023][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 134.128334][ T6986] veth4: entered promiscuous mode [ 134.133507][ T6986] veth4: entered allmulticast mode [ 134.331335][ T7004] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 134.342876][ T3593] Bluetooth: hci1: command 0x1003 tx timeout [ 134.348343][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 134.643702][ T7014] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1092'. [ 134.764505][ T7008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.831497][ T7008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.146883][ T7024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.176496][ T7024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.455820][ T7033] veth16: entered promiscuous mode [ 135.460988][ T7033] veth16: entered allmulticast mode [ 135.548774][ T7041] block device autoloading is deprecated and will be removed. [ 135.773491][ T7041] loop0: detected capacity change from 0 to 2048 [ 135.784554][ T7041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 135.876673][ T7049] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 135.958909][ T7041] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 135.975658][ T7041] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 135.988130][ T7041] EXT4-fs (loop0): This should not happen!! Data will be lost [ 135.988130][ T7041] [ 135.997886][ T7041] EXT4-fs (loop0): Total free blocks count 0 [ 136.003904][ T7041] EXT4-fs (loop0): Free/Dirty block details [ 136.009839][ T7041] EXT4-fs (loop0): free_blocks=2415919104 [ 136.015663][ T7041] EXT4-fs (loop0): dirty_blocks=8192 [ 136.020984][ T7041] EXT4-fs (loop0): Block reservation details [ 136.027035][ T7041] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 136.102892][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 136.104023][ T3855] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.118453][ T7064] loop3: detected capacity change from 0 to 512 [ 136.134683][ T7064] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.150479][ T7064] EXT4-fs (loop3): mount failed [ 136.256801][ T359] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 136.412485][ T7080] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 136.480489][ T7085] 9p: Bad value for 'rfdno' [ 136.494292][ T7085] loop0: detected capacity change from 0 to 1024 [ 136.509271][ T7085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.521848][ T7085] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.553556][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.685518][ T7106] netlink: 'syz.2.1123': attribute type 1 has an invalid length. [ 136.775762][ T7111] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1118'. [ 136.787902][ T29] kauditd_printk_skb: 737 callbacks suppressed [ 136.787915][ T29] audit: type=1400 audit(1766449060.785:13325): avc: denied { map_create } for pid=7093 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 136.813429][ T29] audit: type=1400 audit(1766449060.785:13326): avc: denied { perfmon } for pid=7093 comm="syz.0.1118" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.834422][ T29] audit: type=1400 audit(1766449060.785:13327): avc: denied { map_read map_write } for pid=7093 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 136.854413][ T29] audit: type=1400 audit(1766449060.795:13328): avc: denied { prog_load } for pid=7093 comm="syz.0.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 136.873597][ T29] audit: type=1400 audit(1766449060.795:13329): avc: denied { bpf } for pid=7093 comm="syz.0.1118" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.894220][ T29] audit: type=1326 audit(1766449060.805:13330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 136.917861][ T29] audit: type=1326 audit(1766449060.805:13331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 136.941409][ T29] audit: type=1326 audit(1766449060.805:13332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 136.964889][ T29] audit: type=1326 audit(1766449060.805:13333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 136.988432][ T29] audit: type=1326 audit(1766449060.805:13334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.0.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 137.655965][ T7128] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 137.697466][ T7131] 9p: Bad value for 'rfdno' [ 137.731004][ T7131] loop2: detected capacity change from 0 to 1024 [ 137.783518][ T7131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.819069][ T7131] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.920716][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.029543][ T7162] 9p: Bad value for 'rfdno' [ 138.056375][ T7162] loop2: detected capacity change from 0 to 1024 [ 138.093632][ T7164] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1141'. [ 138.176118][ T7162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.194709][ T7162] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.333930][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 138.708840][ T7170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1145'. [ 138.717936][ T7170] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1145'. [ 138.804408][ T7170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7170 comm=syz.1.1145 [ 139.160283][ T7196] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 139.330327][ T2756] Bluetooth: hci0: Frame reassembly failed (-84) [ 139.377360][ T7204] loop2: detected capacity change from 0 to 512 [ 139.384885][ T7204] EXT4-fs: Ignoring removed i_version option [ 139.391228][ T7204] EXT4-fs: dax option not supported [ 139.402940][ T7204] FAULT_INJECTION: forcing a failure. [ 139.402940][ T7204] name failslab, interval 1, probability 0, space 0, times 0 [ 139.415604][ T7204] CPU: 1 UID: 0 PID: 7204 Comm: syz.2.1157 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.415708][ T7204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.415722][ T7204] Call Trace: [ 139.415729][ T7204] [ 139.415737][ T7204] __dump_stack+0x1d/0x30 [ 139.415760][ T7204] dump_stack_lvl+0x95/0xd0 [ 139.415810][ T7204] dump_stack+0x15/0x1b [ 139.415832][ T7204] should_fail_ex+0x265/0x280 [ 139.415858][ T7204] should_failslab+0x8c/0xb0 [ 139.415881][ T7204] __kmalloc_cache_noprof+0x65/0x4c0 [ 139.415902][ T7204] ? rtnl_newlink+0x5c/0x1360 [ 139.415934][ T7204] ? __pfx_rtnl_newlink+0x10/0x10 [ 139.415955][ T7204] rtnl_newlink+0x5c/0x1360 [ 139.415969][ T7204] ? strncpy_from_kernel_nofault+0x68/0x130 [ 139.415993][ T7204] ? strncpy_from_kernel_nofault+0x112/0x130 [ 139.416024][ T7204] ? strncpy_from_kernel_nofault+0xea/0x130 [ 139.416055][ T7204] ? bpf_probe_read_compat_str+0x126/0x130 [ 139.416138][ T7204] ? __rcu_read_unlock+0x34/0x70 [ 139.416158][ T7204] ? bpf_trace_run3+0x12c/0x1e0 [ 139.416186][ T7204] ? __kfree_skb+0x109/0x150 [ 139.416279][ T7204] ? __memcg_slab_free_hook+0x135/0x230 [ 139.416316][ T7204] ? __rcu_read_unlock+0x4f/0x70 [ 139.416337][ T7204] ? avc_has_perm_noaudit+0xab/0x130 [ 139.416356][ T7204] ? cred_has_capability+0x210/0x280 [ 139.416427][ T7204] ? selinux_capable+0x31/0x40 [ 139.416450][ T7204] ? security_capable+0x83/0x90 [ 139.416491][ T7204] ? ns_capable+0x7d/0xb0 [ 139.416518][ T7204] ? __pfx_rtnl_newlink+0x10/0x10 [ 139.416600][ T7204] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 139.416626][ T7204] netlink_rcv_skb+0x123/0x220 [ 139.416654][ T7204] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 139.416757][ T7204] rtnetlink_rcv+0x1c/0x30 [ 139.416791][ T7204] netlink_unicast+0x5c0/0x690 [ 139.416864][ T7204] netlink_sendmsg+0x58b/0x6b0 [ 139.416893][ T7204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.416995][ T7204] __sock_sendmsg+0x145/0x180 [ 139.417077][ T7204] ____sys_sendmsg+0x31e/0x4a0 [ 139.417158][ T7204] ___sys_sendmsg+0x17b/0x1d0 [ 139.417200][ T7204] __x64_sys_sendmsg+0xd4/0x160 [ 139.417232][ T7204] x64_sys_call+0x17ba/0x3000 [ 139.417261][ T7204] do_syscall_64+0xca/0x2b0 [ 139.417365][ T7204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.417391][ T7204] RIP: 0033:0x7f993f04f749 [ 139.417408][ T7204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.417432][ T7204] RSP: 002b:00007f993daaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.417449][ T7204] RAX: ffffffffffffffda RBX: 00007f993f2a5fa0 RCX: 00007f993f04f749 [ 139.417540][ T7204] RDX: 0000000060044084 RSI: 0000200000000000 RDI: 0000000000000006 [ 139.417579][ T7204] RBP: 00007f993daaf090 R08: 0000000000000000 R09: 0000000000000000 [ 139.417590][ T7204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.417602][ T7204] R13: 00007f993f2a6038 R14: 00007f993f2a5fa0 R15: 00007ffcdcd33a48 [ 139.417651][ T7204] [ 139.966535][ T7213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1161'. [ 140.061414][ T7222] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1160'. [ 140.600312][ T7234] 9p: Bad value for 'rfdno' [ 140.688912][ T7234] loop4: detected capacity change from 0 to 1024 [ 140.764826][ T7234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 140.790931][ T7234] ext4 filesystem being mounted at /220/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.875158][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 140.893741][ T7246] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1173'. [ 141.392915][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 141.462864][ T3855] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 141.919105][ T7288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1185'. [ 141.956918][ T7294] veth6: entered promiscuous mode [ 141.958633][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1189'. [ 141.961989][ T7294] veth6: entered allmulticast mode [ 141.978453][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1189'. [ 141.982189][ T29] kauditd_printk_skb: 1177 callbacks suppressed [ 141.982242][ T29] audit: type=1326 audit(1766449065.990:14512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.0.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 142.024623][ T7294] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 142.043491][ T29] audit: type=1326 audit(1766449066.030:14513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.0.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c6761df90 code=0x7ffc0000 [ 142.067027][ T29] audit: type=1326 audit(1766449066.030:14514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.0.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 142.090557][ T29] audit: type=1326 audit(1766449066.030:14515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.0.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 142.114084][ T29] audit: type=1326 audit(1766449066.030:14516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.0.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 142.137638][ T29] audit: type=1326 audit(1766449066.030:14517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.0.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 142.161242][ T29] audit: type=1326 audit(1766449066.030:14518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.0.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 142.184797][ T29] audit: type=1326 audit(1766449066.030:14519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.0.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 142.208289][ T29] audit: type=1326 audit(1766449066.030:14520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.0.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 142.231801][ T29] audit: type=1326 audit(1766449066.030:14521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7291 comm="syz.0.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 142.262456][ T7301] veth14: entered promiscuous mode [ 142.267657][ T7301] veth14: entered allmulticast mode [ 142.278294][ T7303] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 142.296156][ T7301] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 142.389149][ T7311] loop0: detected capacity change from 0 to 4096 [ 142.408738][ T7315] 9p: Bad value for 'rfdno' [ 142.435198][ T7311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.449454][ T7315] loop4: detected capacity change from 0 to 1024 [ 142.486029][ T7315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 142.500985][ T7311] bridge_slave_0: left allmulticast mode [ 142.506687][ T7311] bridge_slave_0: left promiscuous mode [ 142.510587][ T7315] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.512465][ T7311] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.532780][ T7311] bridge_slave_1: left allmulticast mode [ 142.538497][ T7311] bridge_slave_1: left promiscuous mode [ 142.544283][ T7311] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.564564][ T7311] bond0: (slave bond_slave_0): Releasing backup interface [ 142.582048][ T7311] bond0: (slave bond_slave_1): Releasing backup interface [ 142.609070][ T7311] team0: Port device team_slave_0 removed [ 142.618545][ T7311] team0: Port device team_slave_1 removed [ 142.625507][ T7311] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.632929][ T7311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.661358][ T7311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.668895][ T7311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.801336][ T7321] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1196'. [ 142.836505][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 142.914290][ T7311] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 143.115710][ T7333] veth18: entered promiscuous mode [ 143.120962][ T7333] veth18: entered allmulticast mode [ 143.160121][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.178417][ T7333] !yz!: rxe_newlink: already configured on team_slave_0 [ 143.405162][ T7345] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 143.445758][ T7349] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 143.457480][ T7339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.471288][ T7351] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 143.479155][ T7339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.508704][ T7359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1211'. [ 143.565325][ T7364] 9p: Bad value for 'rfdno' [ 143.577542][ T7364] loop4: detected capacity change from 0 to 1024 [ 143.605322][ T7364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 143.617727][ T7364] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.647180][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 143.679071][ T7369] lo speed is unknown, defaulting to 1000 [ 143.706478][ T7354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.715109][ T7354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.725257][ T7369] wg1 speed is unknown, defaulting to 1000 [ 143.736690][ T7374] loop4: detected capacity change from 0 to 1024 [ 143.743497][ T7374] EXT4-fs: Ignoring removed nobh option [ 143.749169][ T7374] EXT4-fs: inline encryption not supported [ 143.768339][ T7374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.806482][ T7369] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1214: Allocating blocks 385-513 which overlap fs metadata [ 143.821989][ T7369] EXT4-fs (loop4): pa ffff888107637460: logic 16, phys. 129, len 24 [ 143.830068][ T7369] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 143.840589][ T7369] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 143.852838][ T7369] EXT4-fs (loop4): This should not happen!! Data will be lost [ 143.852838][ T7369] [ 143.862477][ T7369] EXT4-fs (loop4): Total free blocks count 0 [ 143.868562][ T7369] EXT4-fs (loop4): Free/Dirty block details [ 143.874594][ T7369] EXT4-fs (loop4): free_blocks=128 [ 143.879718][ T7369] EXT4-fs (loop4): dirty_blocks=0 [ 143.884825][ T7369] EXT4-fs (loop4): Block reservation details [ 143.890842][ T7369] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 143.891030][ T7374] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1214'. [ 143.910856][ T7369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=7369 comm=syz.4.1214 [ 144.099139][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 144.267357][ T7387] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 144.357139][ T7393] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1222'. [ 144.531413][ T7401] 9p: Bad value for 'rfdno' [ 144.554691][ T7401] loop0: detected capacity change from 0 to 1024 [ 144.595894][ T7401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 144.608510][ T7401] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.660224][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 144.869405][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.898933][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.311263][ T7417] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1227'. [ 145.603342][ T7422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.612057][ T7422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.828590][ T7441] veth16: entered promiscuous mode [ 145.833810][ T7441] veth16: entered allmulticast mode [ 145.858500][ T7441] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 146.047557][ T7448] 9p: Bad value for 'rfdno' [ 146.059431][ T7448] loop2: detected capacity change from 0 to 1024 [ 146.083745][ T7448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 146.096078][ T7448] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.102885][ T3855] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 146.112627][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 146.163874][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 146.247624][ T7453] x_tables: duplicate underflow at hook 1 [ 146.257304][ T7453] atomic_op ffff888103405928 conn xmit_atomic 0000000000000000 [ 146.419863][ T7455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.431303][ T7467] loop2: detected capacity change from 0 to 512 [ 146.443032][ T7455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.539380][ T7467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.566920][ T7467] ext4 filesystem being mounted at /250/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.589705][ T7467] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1245: corrupted inode contents [ 146.618241][ T7467] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #2: comm syz.2.1245: mark_inode_dirty error [ 146.634025][ T7467] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #2: comm syz.2.1245: corrupted inode contents [ 146.685110][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.727651][ T2756] Bluetooth: hci0: Frame reassembly failed (-84) [ 146.992499][ T29] kauditd_printk_skb: 874 callbacks suppressed [ 146.992515][ T29] audit: type=1326 audit(1766449071.000:15396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7488 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 147.022467][ T29] audit: type=1326 audit(1766449071.000:15397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7488 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 147.046109][ T29] audit: type=1326 audit(1766449071.000:15398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7488 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 147.055761][ T7489] 9p: Bad value for 'rfdno' [ 147.069736][ T29] audit: type=1326 audit(1766449071.000:15399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7488 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 147.097732][ T29] audit: type=1326 audit(1766449071.000:15400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7488 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 147.121354][ T29] audit: type=1326 audit(1766449071.000:15402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7488 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 147.144905][ T29] audit: type=1326 audit(1766449071.000:15401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7488 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 147.168585][ T29] audit: type=1326 audit(1766449071.000:15404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7488 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 147.192163][ T29] audit: type=1326 audit(1766449071.000:15403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7488 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 147.196699][ T7489] loop4: detected capacity change from 0 to 1024 [ 147.215646][ T29] audit: type=1326 audit(1766449071.000:15405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7488 comm="syz.4.1253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1e39ef749 code=0x7ffc0000 [ 147.254684][ T7489] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 147.266970][ T7489] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.292595][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 147.312459][ T53] Bluetooth: hci1: Frame reassembly failed (-84) [ 147.532020][ T7502] x_tables: duplicate underflow at hook 1 [ 147.538599][ T7502] atomic_op ffff888130ba6128 conn xmit_atomic 0000000000000000 [ 147.729265][ T7500] loop3: detected capacity change from 0 to 2048 [ 147.814590][ T7500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 147.998402][ T7500] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 148.013648][ T7500] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 148.026184][ T7500] EXT4-fs (loop3): This should not happen!! Data will be lost [ 148.026184][ T7500] [ 148.035939][ T7500] EXT4-fs (loop3): Total free blocks count 0 [ 148.041935][ T7500] EXT4-fs (loop3): Free/Dirty block details [ 148.047968][ T7500] EXT4-fs (loop3): free_blocks=2415919104 [ 148.053776][ T7500] EXT4-fs (loop3): dirty_blocks=8192 [ 148.059079][ T7500] EXT4-fs (loop3): Block reservation details [ 148.065186][ T7500] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 148.338171][ T53] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 148.617343][ T7523] 9p: Bad value for 'rfdno' [ 148.645245][ T7523] loop3: detected capacity change from 0 to 1024 [ 148.699025][ T7523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 148.744389][ T3593] Bluetooth: hci0: command 0x1003 tx timeout [ 148.750451][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 148.758798][ T7523] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.819856][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 148.886687][ T7531] 9p: Bad value for 'rfdno' [ 148.913421][ T7531] loop3: detected capacity change from 0 to 1024 [ 148.954835][ T7531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 148.989576][ T7531] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.067594][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 149.115947][ T7540] 9p: Bad value for 'rfdno' [ 149.146171][ T7540] loop3: detected capacity change from 0 to 1024 [ 149.176415][ T7540] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 149.191792][ T7540] ext4 filesystem being mounted at /273/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.214253][ T7547] loop2: detected capacity change from 0 to 1024 [ 149.221199][ T7547] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.245409][ T7547] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1272: Invalid block bitmap block 0 in block_group 0 [ 149.260174][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 149.271835][ T7547] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1272: Failed to acquire dquot type 0 [ 149.283855][ T7547] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.1272: Freeing blocks not in datazone - block = 0, count = 4096 [ 149.294056][ T7549] lo speed is unknown, defaulting to 1000 [ 149.299783][ T7547] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1272: Invalid inode bitmap blk 0 in block_group 0 [ 149.303407][ T6106] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 149.329934][ T7547] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 149.338889][ T7547] EXT4-fs (loop2): 1 orphan inode deleted [ 149.346756][ T7547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.369699][ T7547] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.1272: iget: bad extra_isize 65535 (inode size 256) [ 149.382987][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 149.389117][ T3855] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 149.397898][ T7547] x_tables: duplicate underflow at hook 1 [ 149.404757][ T7547] atomic_op ffff888130ba6128 conn xmit_atomic 0000000000000000 [ 149.438834][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.444886][ T7549] wg1 speed is unknown, defaulting to 1000 [ 149.690532][ T7553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.701465][ T7573] 9p: Bad value for 'rfdno' [ 149.706273][ T7553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.903014][ T7537] Process accounting paused [ 149.970594][ T7587] loop4: detected capacity change from 0 to 1024 [ 149.979109][ T7587] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.998607][ T7587] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1286: Invalid block bitmap block 0 in block_group 0 [ 150.012982][ T7587] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1286: Failed to acquire dquot type 0 [ 150.027655][ T7587] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.1286: Freeing blocks not in datazone - block = 0, count = 4096 [ 150.044106][ T7587] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1286: Invalid inode bitmap blk 0 in block_group 0 [ 150.069603][ T2756] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 150.087655][ T7587] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 150.096436][ T7587] EXT4-fs (loop4): 1 orphan inode deleted [ 150.103187][ T7587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.125434][ T7587] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.1286: iget: bad extra_isize 65535 (inode size 256) [ 150.140785][ T7587] x_tables: duplicate underflow at hook 1 [ 150.147155][ T7587] atomic_op ffff888120087d28 conn xmit_atomic 0000000000000000 [ 150.174211][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.288590][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.360827][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.132429][ T7626] x_tables: duplicate underflow at hook 1 [ 151.138586][ T7623] atomic_op ffff888120087d28 conn xmit_atomic 0000000000000000 [ 151.289696][ T7629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1301'. [ 152.043901][ T7639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.052374][ T7639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.114329][ T29] kauditd_printk_skb: 682 callbacks suppressed [ 152.114346][ T29] audit: type=1326 audit(1766449076.130:16082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.0.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 152.144273][ T29] audit: type=1326 audit(1766449076.130:16083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.0.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 152.201551][ T29] audit: type=1326 audit(1766449076.130:16084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.0.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 152.225171][ T29] audit: type=1326 audit(1766449076.130:16085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.0.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 152.248807][ T29] audit: type=1326 audit(1766449076.130:16086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.0.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 152.272331][ T29] audit: type=1326 audit(1766449076.130:16087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.0.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 152.295944][ T29] audit: type=1326 audit(1766449076.130:16088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.0.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 152.319455][ T29] audit: type=1326 audit(1766449076.130:16089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.0.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 152.343037][ T29] audit: type=1326 audit(1766449076.130:16090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.0.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 152.354926][ T7649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.366526][ T29] audit: type=1326 audit(1766449076.130:16091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7650 comm="syz.0.1309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6761f749 code=0x7ffc0000 [ 152.401136][ T7649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.478480][ T7651] syz.3.1308 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 152.489626][ T7651] CPU: 0 UID: 0 PID: 7651 Comm: syz.3.1308 Not tainted syzkaller #0 PREEMPT(voluntary) [ 152.489659][ T7651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.489676][ T7651] Call Trace: [ 152.489685][ T7651] [ 152.489696][ T7651] __dump_stack+0x1d/0x30 [ 152.489727][ T7651] dump_stack_lvl+0x95/0xd0 [ 152.489795][ T7651] dump_stack+0x15/0x1b [ 152.489820][ T7651] dump_header+0x81/0x240 [ 152.489840][ T7651] oom_kill_process+0x295/0x350 [ 152.489867][ T7651] out_of_memory+0x97b/0xb80 [ 152.489935][ T7651] try_charge_memcg+0x610/0xa10 [ 152.489962][ T7651] charge_memcg+0x51/0xc0 [ 152.490028][ T7651] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 152.490090][ T7651] __read_swap_cache_async+0x17b/0x2d0 [ 152.490174][ T7651] swap_cluster_readahead+0x362/0x3c0 [ 152.490216][ T7651] swapin_readahead+0xde/0x820 [ 152.490250][ T7651] ? plist_check_list+0x199/0x1b0 [ 152.490284][ T7651] ? __rcu_read_unlock+0x4f/0x70 [ 152.490332][ T7651] ? swap_cache_get_folio+0x277/0x280 [ 152.490364][ T7651] do_swap_page+0x2b4/0x21e0 [ 152.490402][ T7651] ? __pfx_futex_wake_mark+0x10/0x10 [ 152.490518][ T7651] ? __pfx_default_wake_function+0x10/0x10 [ 152.490553][ T7651] handle_mm_fault+0x9d8/0x2c60 [ 152.490588][ T7651] do_user_addr_fault+0x630/0x1080 [ 152.490624][ T7651] exc_page_fault+0x62/0xa0 [ 152.490655][ T7651] asm_exc_page_fault+0x26/0x30 [ 152.490703][ T7651] RIP: 0033:0x7f904a365460 [ 152.490720][ T7651] Code: ff ff 4c 8b 84 24 a0 00 00 00 48 8d 1d 59 29 38 00 4c 89 c5 eb 14 0f 1f 40 00 48 81 c5 f0 00 00 00 48 39 dd 0f 84 ab fb ff ff <80> 7d 20 00 74 ea 8b 45 0c 85 c0 74 e3 48 89 ef e8 bb c9 ff ff eb [ 152.490740][ T7651] RSP: 002b:00007ffd47be30f0 EFLAGS: 00010287 [ 152.490757][ T7651] RAX: 0000000000000000 RBX: 00007f904a6e7da0 RCX: 00000000000251c0 [ 152.490787][ T7651] RDX: 0000000000000033 RSI: 00007ffd47be3200 RDI: 0000000000000001 [ 152.490830][ T7651] RBP: 00007f904a6e6090 R08: 00007f904a6e5fa0 R09: 7fffffffffffffff [ 152.490843][ T7651] R10: 3fffffffffffffff R11: 0000000000000246 R12: 00007f904a6e5fac [ 152.490854][ T7651] R13: 00007ffd47be31e0 R14: 0000000000025376 R15: 00007ffd47be3200 [ 152.490870][ T7651] [ 152.490876][ T7651] memory: usage 307200kB, limit 307200kB, failcnt 3464 [ 152.706258][ T7651] memory+swap: usage 255048kB, limit 9007199254740988kB, failcnt 0 [ 152.714202][ T7651] kmem: usage 247184kB, limit 9007199254740988kB, failcnt 0 [ 152.721494][ T7651] Memory cgroup stats for /syz3: [ 152.721974][ T7651] cache 524288 [ 152.730473][ T7651] rss 8192 [ 152.733612][ T7651] shmem 0 [ 152.736561][ T7651] mapped_file 65536 [ 152.740373][ T7651] dirty 0 [ 152.743411][ T7651] writeback 0 [ 152.746693][ T7651] workingset_refault_anon 146 [ 152.751375][ T7651] workingset_refault_file 4254 [ 152.756176][ T7651] swap 4624384 [ 152.759552][ T7651] swapcached 8192 [ 152.763251][ T7651] pgpgin 209814 [ 152.766723][ T7651] pgpgout 209682 [ 152.770275][ T7651] pgfault 168439 [ 152.773889][ T7651] pgmajfault 94 [ 152.777359][ T7651] inactive_anon 0 [ 152.781000][ T7651] active_anon 8192 [ 152.784754][ T7651] inactive_file 0 [ 152.788473][ T7651] active_file 532480 [ 152.792382][ T7651] unevictable 0 [ 152.795874][ T7651] hierarchical_memory_limit 314572800 [ 152.801257][ T7651] hierarchical_memsw_limit 9223372036854771712 [ 152.807465][ T7651] total_cache 524288 [ 152.811414][ T7651] total_rss 8192 [ 152.814984][ T7651] total_shmem 0 [ 152.818506][ T7651] total_mapped_file 65536 [ 152.822895][ T7651] total_dirty 0 [ 152.826358][ T7651] total_writeback 0 [ 152.830185][ T7651] total_workingset_refault_anon 146 [ 152.835404][ T7651] total_workingset_refault_file 4254 [ 152.840702][ T7651] total_swap 4624384 [ 152.844634][ T7651] total_swapcached 8192 [ 152.848855][ T7651] total_pgpgin 209814 [ 152.852876][ T7651] total_pgpgout 209682 [ 152.857071][ T7651] total_pgfault 168439 [ 152.861382][ T7651] total_pgmajfault 94 [ 152.865480][ T7651] total_inactive_anon 0 [ 152.869651][ T7651] total_active_anon 8192 [ 152.873936][ T7651] total_inactive_file 0 [ 152.878144][ T7651] total_active_file 532480 [ 152.882578][ T7651] total_unevictable 0 [ 152.886717][ T7651] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1308,pid=7651,uid=0 [ 152.901444][ T7651] Memory cgroup out of memory: Killed process 7651 (syz.3.1308) total-vm:95884kB, anon-rss:1132kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 152.993171][ T7663] 9p: Bad value for 'rfdno' [ 153.008695][ T7663] loop4: detected capacity change from 0 to 1024 [ 153.019074][ T7665] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 153.043322][ T7663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 153.093000][ T7663] ext4 filesystem being mounted at /246/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.194433][ T7672] loop3: detected capacity change from 0 to 1024 [ 153.223979][ T7672] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.236250][ T7672] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1314: Invalid block bitmap block 0 in block_group 0 [ 153.250227][ T7672] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1314: Failed to acquire dquot type 0 [ 153.271526][ T7672] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.1314: Freeing blocks not in datazone - block = 0, count = 4096 [ 153.285319][ T7672] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1314: Invalid inode bitmap blk 0 in block_group 0 [ 153.298260][ T7672] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 153.310663][ T7672] EXT4-fs (loop3): 1 orphan inode deleted [ 153.316603][ T65] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 153.328591][ T7672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.404167][ T7682] x_tables: duplicate underflow at hook 1 [ 153.410148][ T7682] atomic_op ffff888120084d28 conn xmit_atomic 0000000000000000 [ 153.449382][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 153.458962][ T7672] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.1314: iget: bad extra_isize 65535 (inode size 256) [ 153.494811][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.561691][ T7692] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1318'. [ 154.493891][ T7708] 9p: Bad value for 'rfdno' [ 154.563588][ T7708] loop4: detected capacity change from 0 to 1024 [ 154.604133][ T7708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 154.626397][ T7708] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.775784][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 154.909669][ T7724] loop4: detected capacity change from 0 to 1024 [ 154.926560][ T7724] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 154.954351][ T7724] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1331: Invalid block bitmap block 0 in block_group 0 [ 154.973138][ T7724] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1331: Failed to acquire dquot type 0 [ 154.993141][ T7724] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.1331: Freeing blocks not in datazone - block = 0, count = 4096 [ 155.027178][ T7724] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1331: Invalid inode bitmap blk 0 in block_group 0 [ 155.043010][ T6106] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 155.056894][ T7724] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 155.099990][ T7724] EXT4-fs (loop4): 1 orphan inode deleted [ 155.110427][ T7724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.158963][ T7724] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.1331: iget: bad extra_isize 65535 (inode size 256) [ 155.272993][ T7724] x_tables: duplicate underflow at hook 1 [ 155.279148][ T7724] atomic_op ffff888102109928 conn xmit_atomic 0000000000000000 [ 155.374443][ T7743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1335'. [ 155.480526][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.548379][ T7748] 9p: Bad value for 'rfdno' [ 155.577555][ T7740] block device autoloading is deprecated and will be removed. [ 155.608762][ T7748] loop4: detected capacity change from 0 to 1024 [ 155.735317][ T7748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 155.810370][ T7748] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.969670][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.183127][ T7756] 9p: Bad value for 'rfdno' [ 156.233905][ T7756] loop4: detected capacity change from 0 to 1024 [ 156.268537][ T7756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 156.290897][ T7756] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.346204][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 156.508457][ T7762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.517033][ T7762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.930987][ T7785] loop2: detected capacity change from 0 to 1024 [ 156.960722][ T7785] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 156.995167][ T7785] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.1348: Invalid block bitmap block 0 in block_group 0 [ 157.052903][ T7785] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1348: Failed to acquire dquot type 0 [ 157.073419][ T7785] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.1348: Freeing blocks not in datazone - block = 0, count = 4096 [ 157.087467][ T7785] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1348: Invalid inode bitmap blk 0 in block_group 0 [ 157.103598][ T65] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 157.106147][ T7785] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 157.147290][ T7785] EXT4-fs (loop2): 1 orphan inode deleted [ 157.155573][ T7785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.215434][ T7785] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.1348: iget: bad extra_isize 65535 (inode size 256) [ 157.267359][ T7785] x_tables: duplicate underflow at hook 1 [ 157.273304][ T7785] atomic_op ffff888130ba5128 conn xmit_atomic 0000000000000000 [ 157.370403][ T29] kauditd_printk_skb: 539 callbacks suppressed [ 157.370421][ T29] audit: type=1400 audit(1766449081.385:16622): avc: denied { unlink } for pid=3321 comm="syz-executor" name="file0" dev="tmpfs" ino=1424 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 157.426216][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.184550][ T29] audit: type=1326 audit(1766449082.205:16623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993f04f749 code=0x7ffc0000 [ 158.215438][ T7804] 9p: Bad value for 'rfdno' [ 158.282068][ T7804] loop2: detected capacity change from 0 to 1024 [ 158.301883][ T29] audit: type=1326 audit(1766449082.205:16624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993f04f749 code=0x7ffc0000 [ 158.325558][ T29] audit: type=1326 audit(1766449082.205:16625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993f04f749 code=0x7ffc0000 [ 158.349067][ T29] audit: type=1326 audit(1766449082.235:16626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f993f04f749 code=0x7ffc0000 [ 158.372929][ T29] audit: type=1326 audit(1766449082.235:16627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993f04f749 code=0x7ffc0000 [ 158.396442][ T29] audit: type=1326 audit(1766449082.235:16628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993f04f749 code=0x7ffc0000 [ 158.420099][ T29] audit: type=1326 audit(1766449082.235:16629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993f04f749 code=0x7ffc0000 [ 158.443778][ T29] audit: type=1326 audit(1766449082.235:16631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f993f04f749 code=0x7ffc0000 [ 158.467279][ T29] audit: type=1326 audit(1766449082.235:16630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7803 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f993f04f749 code=0x7ffc0000 [ 158.494408][ T7804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 158.506627][ T7804] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.531739][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 158.712341][ T7818] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 158.925685][ T7816] blktrace: Concurrent blktraces are not allowed on loop5 [ 158.975619][ T7816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.984367][ T7816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.001561][ T7820] block device autoloading is deprecated and will be removed. [ 159.077044][ T7820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.086900][ T7820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.326574][ T7832] loop1: detected capacity change from 0 to 1024 [ 159.333971][ T7832] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.346454][ T7832] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1361: Invalid block bitmap block 0 in block_group 0 [ 159.360309][ T7832] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1361: Failed to acquire dquot type 0 [ 159.371954][ T7832] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.1361: Freeing blocks not in datazone - block = 0, count = 4096 [ 159.386127][ T7832] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1361: Invalid inode bitmap blk 0 in block_group 0 [ 159.399140][ T7832] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 159.408331][ T65] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 159.420483][ T7832] EXT4-fs (loop1): 1 orphan inode deleted [ 159.426988][ T7832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.443758][ T7832] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.1361: iget: bad extra_isize 65535 (inode size 256) [ 159.458070][ T7832] x_tables: duplicate underflow at hook 1 [ 159.464047][ T7832] atomic_op ffff888102109528 conn xmit_atomic 0000000000000000 [ 159.484089][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.224118][ T7849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.252936][ T7849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.344754][ T7866] openvswitch: netlink: Missing key (keys=40, expected=100) [ 160.460939][ T7868] loop1: detected capacity change from 0 to 1024 [ 160.479120][ T7868] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 160.509143][ T7868] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1373: Invalid block bitmap block 0 in block_group 0 [ 160.523083][ T7868] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1373: Failed to acquire dquot type 0 [ 160.554695][ T7868] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.1373: Freeing blocks not in datazone - block = 0, count = 4096 [ 160.603074][ T7868] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1373: Invalid inode bitmap blk 0 in block_group 0 [ 160.622952][ T31] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 0 [ 160.654795][ T7868] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 160.684078][ T7868] EXT4-fs (loop1): 1 orphan inode deleted [ 160.703471][ T7868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.763206][ T7868] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.1373: iget: bad extra_isize 65535 (inode size 256) [ 160.814170][ T7868] x_tables: duplicate underflow at hook 1 [ 160.826944][ T7868] atomic_op ffff888130b5b128 conn xmit_atomic 0000000000000000 [ 160.981385][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.174702][ T7902] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 161.387571][ T7902] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1383'. [ 161.816751][ T7907] blktrace: Concurrent blktraces are not allowed on loop9 [ 161.857566][ T7906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.866155][ T7906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.028589][ T7897] Can't find ip_set type hash:ip,ma [ 162.105403][ T7921] x_tables: duplicate underflow at hook 1 [ 162.108205][ T7894] syz.1.1381 (7894) used greatest stack depth: 6200 bytes left [ 162.111633][ T7921] atomic_op ffff888120087d28 conn xmit_atomic 0000000000000000 [ 162.413713][ T7931] loop1: detected capacity change from 0 to 4096 [ 162.431937][ T7931] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.439466][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 162.439481][ T29] audit: type=1400 audit(1766449086.455:16865): avc: denied { bind } for pid=7932 comm="syz.4.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.475325][ T7931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.519480][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.534291][ T29] audit: type=1400 audit(1766449086.455:16866): avc: denied { write } for pid=7932 comm="syz.4.1393" path="socket:[19079]" dev="sockfs" ino=19079 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.558351][ T29] audit: type=1400 audit(1766449086.525:16867): avc: denied { read write } for pid=7930 comm="LX[X" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.580555][ T29] audit: type=1400 audit(1766449086.525:16868): avc: denied { open } for pid=7930 comm="LX[X" path="/278/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 162.603497][ T29] audit: type=1326 audit(1766449086.525:16869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="LX[X" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 162.626559][ T29] audit: type=1326 audit(1766449086.525:16870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="LX[X" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 162.649773][ T29] audit: type=1326 audit(1766449086.525:16871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="LX[X" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 162.672780][ T29] audit: type=1326 audit(1766449086.525:16872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="LX[X" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 162.695831][ T29] audit: type=1326 audit(1766449086.525:16873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="LX[X" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 162.719152][ T29] audit: type=1326 audit(1766449086.525:16874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7930 comm="LX[X" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 162.805871][ T7941] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 163.181911][ T7960] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1403'. [ 163.362727][ T7962] 9p: Bad value for 'rfdno' [ 163.444627][ T7962] loop1: detected capacity change from 0 to 1024 [ 163.507029][ T7962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 163.575187][ T7962] ext4 filesystem being mounted at /281/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.732907][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 164.038096][ T7973] openvswitch: netlink: Missing key (keys=40, expected=100) [ 164.087091][ T7978] loop1: detected capacity change from 0 to 1024 [ 164.098096][ T7978] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 164.128863][ T7978] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.1409: Invalid block bitmap block 0 in block_group 0 [ 164.129800][ T7976] 9p: Bad value for 'rfdno' [ 164.153053][ T7978] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1409: Failed to acquire dquot type 0 [ 164.164607][ T7978] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.1409: Freeing blocks not in datazone - block = 0, count = 4096 [ 164.183205][ T7978] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.1409: Invalid inode bitmap blk 0 in block_group 0 [ 164.200336][ T7983] openvswitch: netlink: Missing key (keys=40, expected=100) [ 164.207762][ T65] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 164.221072][ T7978] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 164.233022][ T7978] EXT4-fs (loop1): 1 orphan inode deleted [ 164.239179][ T7978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.261458][ T7978] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.1409: iget: bad extra_isize 65535 (inode size 256) [ 164.292998][ T7978] x_tables: duplicate underflow at hook 1 [ 164.299231][ T7978] atomic_op ffff888102108928 conn xmit_atomic 0000000000000000 [ 164.384546][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.978499][ T8023] 9p: Bad value for 'rfdno' [ 164.990918][ T8023] loop1: detected capacity change from 0 to 1024 [ 165.008823][ T8023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 165.062071][ T8023] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.115235][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 165.130648][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.139178][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.152226][ T8033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 165.324062][ T8043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1431'. [ 165.333555][ T8043] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 165.355438][ T8041] lo speed is unknown, defaulting to 1000 [ 165.400641][ T8041] wg1 speed is unknown, defaulting to 1000 [ 165.412730][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1430'. [ 165.535321][ T8049] 9p: Bad value for 'rfdno' [ 165.786662][ T8064] block device autoloading is deprecated and will be removed. [ 165.794308][ T8061] loop1: detected capacity change from 0 to 128 [ 166.085707][ T7991] syz.4.1413 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 166.096836][ T7991] CPU: 1 UID: 0 PID: 7991 Comm: syz.4.1413 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.096871][ T7991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 166.096934][ T7991] Call Trace: [ 166.096943][ T7991] [ 166.096953][ T7991] __dump_stack+0x1d/0x30 [ 166.096985][ T7991] dump_stack_lvl+0x95/0xd0 [ 166.097026][ T7991] dump_stack+0x15/0x1b [ 166.097053][ T7991] dump_header+0x81/0x240 [ 166.097141][ T7991] oom_kill_process+0x295/0x350 [ 166.097303][ T7991] out_of_memory+0x97b/0xb80 [ 166.097338][ T7991] try_charge_memcg+0x610/0xa10 [ 166.097372][ T7991] charge_memcg+0x51/0xc0 [ 166.097411][ T7991] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 166.097446][ T7991] __read_swap_cache_async+0x17b/0x2d0 [ 166.097495][ T7991] swap_cluster_readahead+0x362/0x3c0 [ 166.097539][ T7991] swapin_readahead+0xde/0x820 [ 166.097573][ T7991] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 166.097665][ T7991] ? __rcu_read_unlock+0x34/0x70 [ 166.097695][ T7991] ? __rcu_read_unlock+0x4f/0x70 [ 166.097719][ T7991] ? swap_cache_get_folio+0x277/0x280 [ 166.097769][ T7991] do_swap_page+0x2b4/0x21e0 [ 166.097821][ T7991] ? __pfx_default_wake_function+0x10/0x10 [ 166.097862][ T7991] handle_mm_fault+0x9d8/0x2c60 [ 166.097924][ T7991] do_user_addr_fault+0x630/0x1080 [ 166.097985][ T7991] exc_page_fault+0x62/0xa0 [ 166.098079][ T7991] asm_exc_page_fault+0x26/0x30 [ 166.098098][ T7991] RIP: 0033:0x7fd1e38cef94 [ 166.098115][ T7991] Code: 82 b5 03 00 00 c6 44 24 1e 01 45 31 ff 45 31 f6 44 0f b6 e6 85 c0 0f 84 9e 00 00 00 44 89 f9 49 8b 50 40 4c 89 f0 49 03 14 ca <80> 3d 0d 8e 37 00 00 49 89 d6 48 89 d5 74 28 25 ff 0f 00 00 83 f0 [ 166.098170][ T7991] RSP: 002b:00007fff9254adb0 EFLAGS: 00010286 [ 166.098186][ T7991] RAX: ffffffff8198184a RBX: 00007fd1e4775720 RCX: 0000000000000005 [ 166.098211][ T7991] RDX: ffffffff84532fbe RSI: 0000000000002054 RDI: 0000000000000002 [ 166.098221][ T7991] RBP: ffffffff8198150b R08: 00007fd1e3c46038 R09: 00007fd1e3c32000 [ 166.098232][ T7991] R10: 00007fd1e345f008 R11: 0000000000000007 R12: 0000000000000007 [ 166.098263][ T7991] R13: 0000000000000000 R14: ffffffff8198184a R15: 0000000000000005 [ 166.098278][ T7991] ? fdget+0xfa/0x110 [ 166.098304][ T7991] ? fget_task_next+0x1db/0x250 [ 166.098332][ T7991] ? fdget+0xfa/0x110 [ 166.098426][ T7991] ? __x64_sys_sendmsg+0xbe/0x160 [ 166.098457][ T7991] [ 166.098476][ T7991] memory: usage 307200kB, limit 307200kB, failcnt 2568 [ 166.331501][ T7991] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 166.339513][ T7991] kmem: usage 301316kB, limit 9007199254740988kB, failcnt 0 [ 166.346872][ T7991] Memory cgroup stats for /syz4: [ 166.350265][ T7991] cache 0 [ 166.358217][ T7991] rss 6017024 [ 166.361513][ T7991] shmem 0 [ 166.364527][ T7991] mapped_file 0 [ 166.368000][ T7991] dirty 0 [ 166.370956][ T7991] writeback 0 [ 166.374287][ T7991] workingset_refault_anon 1738 [ 166.379122][ T7991] workingset_refault_file 4790 [ 166.383927][ T7991] swap 217088 [ 166.387242][ T7991] swapcached 0 [ 166.390709][ T7991] pgpgin 158842 [ 166.394237][ T7991] pgpgout 157371 [ 166.397798][ T7991] pgfault 149851 [ 166.401373][ T7991] pgmajfault 484 [ 166.404979][ T7991] inactive_anon 0 [ 166.408689][ T7991] active_anon 0 [ 166.412160][ T7991] inactive_file 6017024 [ 166.416395][ T7991] active_file 8192 [ 166.420135][ T7991] unevictable 0 [ 166.423654][ T7991] hierarchical_memory_limit 314572800 [ 166.429098][ T7991] hierarchical_memsw_limit 9223372036854771712 [ 166.435352][ T7991] total_cache 0 [ 166.438831][ T7991] total_rss 6017024 [ 166.442655][ T7991] total_shmem 0 [ 166.446156][ T7991] total_mapped_file 0 [ 166.450144][ T7991] total_dirty 0 [ 166.453705][ T7991] total_writeback 0 [ 166.457565][ T7991] total_workingset_refault_anon 1738 [ 166.462996][ T7991] total_workingset_refault_file 4790 [ 166.468298][ T7991] total_swap 217088 [ 166.472109][ T7991] total_swapcached 0 [ 166.476086][ T7991] total_pgpgin 158842 [ 166.480100][ T7991] total_pgpgout 157371 [ 166.484219][ T7991] total_pgfault 149851 [ 166.488362][ T7991] total_pgmajfault 484 [ 166.492454][ T7991] total_inactive_anon 0 [ 166.496689][ T7991] total_active_anon 0 [ 166.498554][ T8071] 9p: Bad value for 'rfdno' [ 166.500678][ T7991] total_inactive_file 6017024 [ 166.500689][ T7991] total_active_file 8192 [ 166.500699][ T7991] total_unevictable 0 [ 166.500708][ T7991] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1413,pid=7991,uid=0 [ 166.532845][ T7991] Memory cgroup out of memory: Killed process 7991 (syz.4.1413) total-vm:93968kB, anon-rss:7204kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 166.640364][ T8073] 9p: Bad value for 'rfdno' [ 166.797502][ T8075] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 167.463098][ T29] kauditd_printk_skb: 1063 callbacks suppressed [ 167.463113][ T29] audit: type=1400 audit(1766449091.483:17935): avc: denied { write } for pid=8097 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.527146][ T29] audit: type=1400 audit(1766449091.483:17936): avc: denied { connect } for pid=8097 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.546919][ T29] audit: type=1400 audit(1766449091.483:17937): avc: denied { name_connect } for pid=8097 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 167.567250][ T29] audit: type=1400 audit(1766449091.483:17938): avc: denied { name_connect } for pid=8097 comm="syz.1.1453" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 167.589473][ T29] audit: type=1400 audit(1766449091.503:17939): avc: denied { shutdown } for pid=8097 comm="syz.1.1453" lport=46013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.610391][ T29] audit: type=1400 audit(1766449091.503:17940): avc: denied { getopt } for pid=8097 comm="syz.1.1453" lport=46013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.631109][ T29] audit: type=1400 audit(1766449091.503:17941): avc: denied { write } for pid=8097 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.733724][ T29] audit: type=1400 audit(1766449091.553:17942): avc: denied { create } for pid=8097 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.754413][ T29] audit: type=1400 audit(1766449091.563:17943): avc: denied { connect } for pid=8097 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.774454][ T29] audit: type=1400 audit(1766449091.563:17944): avc: denied { bind } for pid=8097 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 167.886625][ T8103] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 167.991553][ T8113] 9p: Bad value for 'rfdno' [ 168.082761][ T8116] 9p: Bad value for 'rfdno' [ 168.127532][ T8116] loop4: detected capacity change from 0 to 1024 [ 168.165016][ T8116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 168.213550][ T8116] ext4 filesystem being mounted at /268/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.346510][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 168.732674][ T8128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.743323][ T8128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.073878][ T8134] 9p: Bad value for 'rfdno' [ 169.294007][ T8145] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 169.877133][ T8169] loop4: detected capacity change from 0 to 2048 [ 170.387599][ T8169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 170.453243][ T8174] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1480'. [ 170.526042][ T8179] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 170.725874][ T8169] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 170.751956][ T8169] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1872 with error 28 [ 170.764675][ T8169] EXT4-fs (loop4): This should not happen!! Data will be lost [ 170.764675][ T8169] [ 170.774339][ T8169] EXT4-fs (loop4): Total free blocks count 0 [ 170.780399][ T8169] EXT4-fs (loop4): Free/Dirty block details [ 170.786386][ T8169] EXT4-fs (loop4): free_blocks=2415919104 [ 170.792215][ T8169] EXT4-fs (loop4): dirty_blocks=1872 [ 170.797548][ T8169] EXT4-fs (loop4): Block reservation details [ 170.803554][ T8169] EXT4-fs (loop4): i_reserved_data_blocks=117 [ 171.170700][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 171.425345][ T8227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1499'. [ 172.490296][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 172.490313][ T29] audit: type=1400 audit(1766449096.503:18417): avc: denied { create } for pid=8256 comm="syz.1.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 172.521886][ T29] audit: type=1400 audit(1766449096.533:18418): avc: denied { create } for pid=8256 comm="syz.1.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.541850][ T29] audit: type=1400 audit(1766449096.533:18419): avc: denied { setopt } for pid=8256 comm="syz.1.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.561680][ T29] audit: type=1400 audit(1766449096.533:18420): avc: denied { ioctl } for pid=8256 comm="syz.1.1516" path="socket:[19909]" dev="sockfs" ino=19909 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.586909][ T29] audit: type=1400 audit(1766449096.533:18421): avc: denied { write } for pid=8256 comm="syz.1.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 172.704265][ T29] audit: type=1400 audit(1766449096.623:18422): avc: denied { execmem } for pid=8257 comm="syz.3.1515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 172.723693][ T29] audit: type=1400 audit(1766449096.713:18423): avc: denied { module_request } for pid=8257 comm="syz.3.1515" kmod="ipt_TOS" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 173.259184][ T29] audit: type=1400 audit(1766449097.273:18424): avc: denied { open } for pid=8267 comm="syz.3.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 173.278599][ T29] audit: type=1400 audit(1766449097.273:18425): avc: denied { kernel } for pid=8267 comm="syz.3.1517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 173.300589][ T29] audit: type=1400 audit(1766449097.313:18426): avc: denied { name_bind } for pid=8267 comm="syz.3.1517" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 173.586515][ T8274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.612897][ T8274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.972202][ T8303] lo speed is unknown, defaulting to 1000 [ 174.044991][ T8303] wg1 speed is unknown, defaulting to 1000 [ 174.874579][ T8340] openvswitch: netlink: EtherType 0 is less than min 600 [ 174.900355][ T8344] loop4: detected capacity change from 0 to 1024 [ 174.911064][ T8344] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 174.923655][ T8344] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1544: Invalid block bitmap block 0 in block_group 0 [ 174.948349][ T8344] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1544: Failed to acquire dquot type 0 [ 174.962894][ T8344] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.1544: Freeing blocks not in datazone - block = 0, count = 4096 [ 174.979300][ T8344] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1544: Invalid inode bitmap blk 0 in block_group 0 [ 175.063994][ T359] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 175.075899][ T8342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.086649][ T8344] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 175.099741][ T8342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.142896][ T8344] EXT4-fs (loop4): 1 orphan inode deleted [ 175.149341][ T8344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.179076][ T8344] EXT4-fs error (device loop4): ext4_lookup:1785: inode #15: comm syz.4.1544: iget: bad extra_isize 65535 (inode size 256) [ 175.196419][ T8344] x_tables: duplicate underflow at hook 1 [ 175.202591][ T8344] atomic_op ffff88811b5b9528 conn xmit_atomic 0000000000000000 [ 175.266522][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.356918][ T8365] FAULT_INJECTION: forcing a failure. [ 175.356918][ T8365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.370073][ T8365] CPU: 0 UID: 0 PID: 8365 Comm: syz.2.1551 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.370170][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.370186][ T8365] Call Trace: [ 175.370194][ T8365] [ 175.370203][ T8365] __dump_stack+0x1d/0x30 [ 175.370233][ T8365] dump_stack_lvl+0x95/0xd0 [ 175.370260][ T8365] dump_stack+0x15/0x1b [ 175.370352][ T8365] should_fail_ex+0x265/0x280 [ 175.370378][ T8365] should_fail+0xb/0x20 [ 175.370403][ T8365] should_fail_usercopy+0x1a/0x20 [ 175.370433][ T8365] copy_to_user_nofault+0x7f/0x120 [ 175.370469][ T8365] bpf_probe_write_user+0x83/0xc0 [ 175.370566][ T8365] bpf_prog_8f5dadf009f59a0a+0x44/0x4c [ 175.370587][ T8365] bpf_trace_run2+0x107/0x1d0 [ 175.370624][ T8365] ? lsm_fill_user_ctx+0x179/0x1e0 [ 175.370663][ T8365] ? lsm_fill_user_ctx+0x179/0x1e0 [ 175.370708][ T8365] kfree+0x353/0x3c0 [ 175.370728][ T8365] lsm_fill_user_ctx+0x179/0x1e0 [ 175.370763][ T8365] selinux_getselfattr+0x87/0xd0 [ 175.370854][ T8365] security_getselfattr+0x24d/0x500 [ 175.370882][ T8365] __x64_sys_lsm_get_self_attr+0x51/0x60 [ 175.370920][ T8365] x64_sys_call+0x2f69/0x3000 [ 175.370944][ T8365] do_syscall_64+0xca/0x2b0 [ 175.370998][ T8365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.371042][ T8365] RIP: 0033:0x7f993f04f749 [ 175.371060][ T8365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.371080][ T8365] RSP: 002b:00007f993daaf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 175.371099][ T8365] RAX: ffffffffffffffda RBX: 00007f993f2a5fa0 RCX: 00007f993f04f749 [ 175.371184][ T8365] RDX: 0000200000000580 RSI: 0000200000000480 RDI: 0000000000000069 [ 175.371196][ T8365] RBP: 00007f993daaf090 R08: 0000000000000000 R09: 0000000000000000 [ 175.371238][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.371253][ T8365] R13: 00007f993f2a6038 R14: 00007f993f2a5fa0 R15: 00007ffcdcd33a48 [ 175.371297][ T8365] [ 175.725778][ T8382] 9p: Bad value for 'rfdno' [ 175.836232][ T8388] x_tables: duplicate underflow at hook 1 [ 175.842182][ T8388] atomic_op ffff88814251f928 conn xmit_atomic 0000000000000000 [ 176.144098][ T8410] block device autoloading is deprecated and will be removed. [ 176.220217][ T8414] loop0: detected capacity change from 0 to 2048 [ 176.236273][ T8414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 176.411243][ T8410] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 176.426321][ T8410] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 176.438901][ T8410] EXT4-fs (loop0): This should not happen!! Data will be lost [ 176.438901][ T8410] [ 176.448584][ T8410] EXT4-fs (loop0): Total free blocks count 0 [ 176.454606][ T8410] EXT4-fs (loop0): Free/Dirty block details [ 176.460521][ T8410] EXT4-fs (loop0): free_blocks=2415919104 [ 176.466281][ T8410] EXT4-fs (loop0): dirty_blocks=8192 [ 176.471597][ T8410] EXT4-fs (loop0): Block reservation details [ 176.477623][ T8410] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 176.530312][ T8431] x_tables: duplicate underflow at hook 1 [ 176.536413][ T8431] atomic_op ffff88814251c128 conn xmit_atomic 0000000000000000 [ 176.650574][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 176.704298][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 177.010845][ T8442] 9p: Bad value for 'rfdno' [ 177.282475][ T8462] loop4: detected capacity change from 0 to 2048 [ 177.294351][ T8462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 177.387431][ T8457] blktrace: Concurrent blktraces are not allowed on loop1 [ 177.416498][ T8457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.425090][ T8457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.488062][ T8461] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 177.503279][ T8461] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 177.515787][ T8461] EXT4-fs (loop4): This should not happen!! Data will be lost [ 177.515787][ T8461] [ 177.525492][ T8461] EXT4-fs (loop4): Total free blocks count 0 [ 177.531467][ T8461] EXT4-fs (loop4): Free/Dirty block details [ 177.537428][ T8461] EXT4-fs (loop4): free_blocks=2415919104 [ 177.543471][ T8461] EXT4-fs (loop4): dirty_blocks=8192 [ 177.548848][ T8461] EXT4-fs (loop4): Block reservation details [ 177.555073][ T8461] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 177.703298][ T65] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 177.894868][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 177.894884][ T29] audit: type=1400 audit(1766449101.913:18632): avc: denied { ioctl } for pid=8476 comm="syz.2.1589" path="socket:[21181]" dev="sockfs" ino=21181 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.948481][ T8482] 9p: Bad value for 'rfdno' [ 177.973965][ T29] audit: type=1400 audit(1766449101.993:18633): avc: denied { allowed } for pid=8483 comm="syz.2.1591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 177.995195][ T29] audit: type=1400 audit(1766449102.013:18634): avc: denied { create } for pid=8483 comm="syz.2.1591" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.016787][ T29] audit: type=1400 audit(1766449102.013:18635): avc: denied { map } for pid=8483 comm="syz.2.1591" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.041193][ T29] audit: type=1400 audit(1766449102.013:18636): avc: denied { read write } for pid=8483 comm="syz.2.1591" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=21194 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.286826][ T8497] block device autoloading is deprecated and will be removed. [ 178.357033][ T8498] loop1: detected capacity change from 0 to 2048 [ 178.374314][ T8498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 178.533524][ T8497] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 178.548540][ T8497] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 178.561105][ T8497] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.561105][ T8497] [ 178.570799][ T8497] EXT4-fs (loop1): Total free blocks count 0 [ 178.576834][ T8497] EXT4-fs (loop1): Free/Dirty block details [ 178.582741][ T8497] EXT4-fs (loop1): free_blocks=2415919104 [ 178.588500][ T8497] EXT4-fs (loop1): dirty_blocks=8192 [ 178.593781][ T8497] EXT4-fs (loop1): Block reservation details [ 178.599758][ T8497] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 178.662848][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 178.668894][ T3855] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 178.808496][ T6109] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 178.896947][ T8508] lo speed is unknown, defaulting to 1000 [ 178.933015][ T8508] wg1 speed is unknown, defaulting to 1000 [ 178.987641][ T8515] 9p: Bad value for 'rfdno' [ 179.083779][ T29] audit: type=1400 audit(1766449103.093:18637): avc: denied { execute } for pid=8520 comm="syz.2.1605" path=2F6D656D66643A0B656DDA9952406DFCFE9B232AFF202864656C6574656429 dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 179.111018][ T29] audit: type=1400 audit(1766449103.103:18638): avc: denied { create } for pid=8520 comm="syz.2.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.130567][ T29] audit: type=1400 audit(1766449103.103:18639): avc: denied { connect } for pid=8520 comm="syz.2.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 179.241452][ T29] audit: type=1400 audit(1766449103.253:18640): avc: denied { create } for pid=8530 comm="syz.2.1609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 179.344827][ T29] audit: type=1400 audit(1766449103.363:18641): avc: denied { read write } for pid=8530 comm="syz.2.1609" name="loop2" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 179.345786][ T8539] loop2: detected capacity change from 0 to 128 [ 179.380291][ T8539] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 179.672621][ T8542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1613'. [ 179.915809][ T8551] lo speed is unknown, defaulting to 1000 [ 179.977309][ T8551] wg1 speed is unknown, defaulting to 1000 [ 180.033292][ T8522] Process accounting resumed [ 180.235955][ T8565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1624'. [ 180.350584][ T8583] loop2: detected capacity change from 0 to 1024 [ 180.357460][ T8583] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 180.389635][ T8583] netlink: 'syz.2.1631': attribute type 1 has an invalid length. [ 180.406082][ T8583] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.415697][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1631'. [ 180.426931][ T8583] bond1 (unregistering): Released all slaves [ 180.438359][ T8563] block device autoloading is deprecated and will be removed. [ 180.467344][ T8591] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1631'. [ 180.543379][ T8563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.557618][ T8563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.133136][ T8614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1638'. [ 181.281750][ T8622] FAULT_INJECTION: forcing a failure. [ 181.281750][ T8622] name failslab, interval 1, probability 0, space 0, times 0 [ 181.294441][ T8622] CPU: 1 UID: 0 PID: 8622 Comm: syz.3.1643 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.294465][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.294476][ T8622] Call Trace: [ 181.294484][ T8622] [ 181.294491][ T8622] __dump_stack+0x1d/0x30 [ 181.294513][ T8622] dump_stack_lvl+0x95/0xd0 [ 181.294548][ T8622] dump_stack+0x15/0x1b [ 181.294565][ T8622] should_fail_ex+0x265/0x280 [ 181.294588][ T8622] should_failslab+0x8c/0xb0 [ 181.294662][ T8622] __kmalloc_node_noprof+0xbe/0x5c0 [ 181.294724][ T8622] ? __vmalloc_node_range_noprof+0x433/0x1310 [ 181.294759][ T8622] __vmalloc_node_range_noprof+0x433/0x1310 [ 181.294837][ T8622] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 181.294858][ T8622] __vmalloc_noprof+0xa4/0xf0 [ 181.294898][ T8622] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 181.294918][ T8622] bpf_prog_alloc_no_stats+0x47/0x390 [ 181.294999][ T8622] ? bpf_prog_alloc+0x2a/0x150 [ 181.295018][ T8622] bpf_prog_alloc+0x3c/0x150 [ 181.295037][ T8622] bpf_prog_load+0x506/0x1140 [ 181.295068][ T8622] ? security_bpf+0x2b/0x90 [ 181.295107][ T8622] __sys_bpf+0x469/0x7c0 [ 181.295219][ T8622] __x64_sys_bpf+0x41/0x50 [ 181.295382][ T8622] x64_sys_call+0x28e1/0x3000 [ 181.295413][ T8622] do_syscall_64+0xca/0x2b0 [ 181.295456][ T8622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.295484][ T8622] RIP: 0033:0x7f904a48f749 [ 181.295502][ T8622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.295570][ T8622] RSP: 002b:00007f9048eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.295592][ T8622] RAX: ffffffffffffffda RBX: 00007f904a6e5fa0 RCX: 00007f904a48f749 [ 181.295608][ T8622] RDX: 0000000000000094 RSI: 0000200000000a40 RDI: 0000000000000005 [ 181.295621][ T8622] RBP: 00007f9048eef090 R08: 0000000000000000 R09: 0000000000000000 [ 181.295689][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.295703][ T8622] R13: 00007f904a6e6038 R14: 00007f904a6e5fa0 R15: 00007ffd47be2f88 [ 181.295786][ T8622] [ 181.295794][ T8622] syz.3.1643: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 181.517771][ T8622] CPU: 1 UID: 0 PID: 8622 Comm: syz.3.1643 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.517800][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.517832][ T8622] Call Trace: [ 181.517838][ T8622] [ 181.517847][ T8622] __dump_stack+0x1d/0x30 [ 181.517881][ T8622] dump_stack_lvl+0x95/0xd0 [ 181.517905][ T8622] dump_stack+0x15/0x1b [ 181.517988][ T8622] warn_alloc+0x12b/0x1a0 [ 181.518021][ T8622] __vmalloc_node_range_noprof+0x7fc/0x1310 [ 181.518116][ T8622] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 181.518163][ T8622] __vmalloc_noprof+0xa4/0xf0 [ 181.518188][ T8622] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 181.518210][ T8622] bpf_prog_alloc_no_stats+0x47/0x390 [ 181.518292][ T8622] ? bpf_prog_alloc+0x2a/0x150 [ 181.518311][ T8622] bpf_prog_alloc+0x3c/0x150 [ 181.518327][ T8622] bpf_prog_load+0x506/0x1140 [ 181.518353][ T8622] ? security_bpf+0x2b/0x90 [ 181.518383][ T8622] __sys_bpf+0x469/0x7c0 [ 181.518469][ T8622] __x64_sys_bpf+0x41/0x50 [ 181.518497][ T8622] x64_sys_call+0x28e1/0x3000 [ 181.518579][ T8622] do_syscall_64+0xca/0x2b0 [ 181.518612][ T8622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.518630][ T8622] RIP: 0033:0x7f904a48f749 [ 181.518645][ T8622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.518665][ T8622] RSP: 002b:00007f9048eef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 181.518725][ T8622] RAX: ffffffffffffffda RBX: 00007f904a6e5fa0 RCX: 00007f904a48f749 [ 181.518737][ T8622] RDX: 0000000000000094 RSI: 0000200000000a40 RDI: 0000000000000005 [ 181.518747][ T8622] RBP: 00007f9048eef090 R08: 0000000000000000 R09: 0000000000000000 [ 181.518758][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.518817][ T8622] R13: 00007f904a6e6038 R14: 00007f904a6e5fa0 R15: 00007ffd47be2f88 [ 181.518842][ T8622] [ 181.518851][ T8622] Mem-Info: [ 181.703120][ T8629] loop4: detected capacity change from 0 to 128 [ 181.704455][ T8622] active_anon:15857 inactive_anon:5 isolated_anon:0 [ 181.704455][ T8622] active_file:6942 inactive_file:15860 isolated_file:0 [ 181.704455][ T8622] unevictable:0 dirty:123 writeback:0 [ 181.704455][ T8622] slab_reclaimable:3481 slab_unreclaimable:17037 [ 181.704455][ T8622] mapped:31969 shmem:11664 pagetables:2134 [ 181.704455][ T8622] sec_pagetables:0 bounce:0 [ 181.704455][ T8622] kernel_misc_reclaimable:0 [ 181.704455][ T8622] free:1820035 free_pcp:44513 free_cma:0 [ 181.762010][ T8622] Node 0 active_anon:63428kB inactive_anon:20kB active_file:27768kB inactive_file:63440kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:127876kB dirty:492kB writeback:0kB shmem:46656kB kernel_stack:4304kB pagetables:8536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 181.789445][ T8622] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 181.819175][ T8622] lowmem_reserve[]: 0 2880 7859 7859 [ 181.824585][ T8622] Node 0 DMA32 free:2945988kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 181.855712][ T8622] lowmem_reserve[]: 0 0 4978 4978 [ 181.860866][ T8622] Node 0 Normal free:4318792kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63428kB inactive_anon:20kB active_file:27768kB inactive_file:63440kB unevictable:0kB writepending:492kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:174480kB local_pcp:118020kB free_cma:0kB [ 181.894183][ T8622] lowmem_reserve[]: 0 0 0 0 [ 181.898885][ T8622] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 181.911767][ T8622] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945988kB [ 181.927978][ T8622] Node 0 Normal: 3525*4kB (UME) 2529*8kB (UME) 2155*16kB (UME) 1448*32kB (UME) 937*64kB (UME) 389*128kB (UME) 368*256kB (UME) 296*512kB (UM) 258*1024kB (UME) 162*2048kB (UM) 794*4096kB (UM) = 4318860kB [ 181.947920][ T8622] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 181.957235][ T8622] 34467 total pagecache pages [ 181.961925][ T8622] 15 pages in swap cache [ 181.966218][ T8622] Free swap = 50896kB [ 181.970292][ T8622] Total swap = 124996kB [ 181.974488][ T8622] 2097051 pages RAM [ 181.978307][ T8622] 0 pages HighMem/MovableOnly [ 181.983018][ T8622] 81272 pages reserved [ 181.987806][ T8629] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 182.017630][ T8629] ext4 filesystem being mounted at /310/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 182.095643][ T8639] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1649'. [ 182.140501][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 182.294917][ T8660] loop3: detected capacity change from 0 to 512 [ 182.334296][ T8660] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 182.350389][ T8665] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1657'. [ 182.382915][ T8660] EXT4-fs (loop3): mount failed [ 182.840496][ T8676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1662'. [ 182.893740][ T8678] pim6reg: entered allmulticast mode [ 182.908128][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 182.908144][ T29] audit: type=1400 audit(1766449106.923:18898): avc: denied { create } for pid=8677 comm="syz.1.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.940108][ T29] audit: type=1400 audit(1766449106.953:18899): avc: denied { bind } for pid=8677 comm="syz.1.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.959630][ T29] audit: type=1400 audit(1766449106.953:18900): avc: denied { listen } for pid=8677 comm="syz.1.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 182.979278][ T29] audit: type=1400 audit(1766449106.953:18901): avc: denied { connect } for pid=8677 comm="syz.1.1663" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.999839][ T29] audit: type=1400 audit(1766449106.953:18902): avc: denied { write } for pid=8677 comm="syz.1.1663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 183.064708][ T29] audit: type=1326 audit(1766449107.083:18903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 183.092272][ T29] audit: type=1326 audit(1766449107.083:18904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 183.116014][ T29] audit: type=1326 audit(1766449107.083:18905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 183.139605][ T29] audit: type=1326 audit(1766449107.083:18906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 183.146775][ T8690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1668'. [ 183.163126][ T29] audit: type=1326 audit(1766449107.083:18907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.1.1666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4faffef749 code=0x7ffc0000 [ 183.291413][ T8707] FAULT_INJECTION: forcing a failure. [ 183.291413][ T8707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.304654][ T8707] CPU: 0 UID: 0 PID: 8707 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 183.304712][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 183.304788][ T8707] Call Trace: [ 183.304800][ T8707] [ 183.304808][ T8707] __dump_stack+0x1d/0x30 [ 183.304918][ T8707] dump_stack_lvl+0x95/0xd0 [ 183.304957][ T8707] dump_stack+0x15/0x1b [ 183.304977][ T8707] should_fail_ex+0x265/0x280 [ 183.305003][ T8707] should_fail+0xb/0x20 [ 183.305023][ T8707] should_fail_usercopy+0x1a/0x20 [ 183.305049][ T8707] _copy_from_user+0x1c/0xb0 [ 183.305159][ T8707] memdup_user+0x5e/0xd0 [ 183.305244][ T8707] nvram_misc_write+0x78/0xd0 [ 183.305269][ T8707] vfs_writev+0x406/0x8b0 [ 183.305296][ T8707] ? __pfx_nvram_misc_write+0x10/0x10 [ 183.305329][ T8707] __x64_sys_pwritev+0xfd/0x1c0 [ 183.305362][ T8707] x64_sys_call+0x161b/0x3000 [ 183.305388][ T8707] do_syscall_64+0xca/0x2b0 [ 183.305424][ T8707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.305447][ T8707] RIP: 0033:0x7f7c6761f749 [ 183.305479][ T8707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.305502][ T8707] RSP: 002b:00007f7c6607f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 183.305598][ T8707] RAX: ffffffffffffffda RBX: 00007f7c67875fa0 RCX: 00007f7c6761f749 [ 183.305612][ T8707] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: 0000000000000003 [ 183.305672][ T8707] RBP: 00007f7c6607f090 R08: 0000000000000000 R09: 0000000000000000 [ 183.305684][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.305697][ T8707] R13: 00007f7c67876038 R14: 00007f7c67875fa0 R15: 00007fffdd5050a8 [ 183.305718][ T8707] [ 183.523089][ T8717] 9p: Bad value for 'rfdno' [ 183.713680][ T8731] loop0: detected capacity change from 0 to 512 [ 183.745694][ T8731] EXT4-fs (loop0): too many log groups per flexible block group [ 183.753663][ T8731] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 183.760539][ T8731] EXT4-fs (loop0): mount failed [ 183.773936][ T8731] macvtap0: refused to change device tx_queue_len [ 183.855203][ T8737] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1685'. [ 184.409316][ T8760] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 185.234343][ T8783] blktrace: Concurrent blktraces are not allowed on loop7 [ 185.312886][ T8779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.403020][ T8779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.510663][ T65] Bluetooth: hci0: Frame reassembly failed (-84) [ 185.847602][ T53] Bluetooth: hci1: Frame reassembly failed (-84) [ 185.891080][ T8807] __nla_validate_parse: 4 callbacks suppressed [ 185.891096][ T8807] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1714'. [ 185.913385][ T8807] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1714'. [ 186.158580][ T8821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1716'. [ 186.191135][ T8823] FAULT_INJECTION: forcing a failure. [ 186.191135][ T8823] name failslab, interval 1, probability 0, space 0, times 0 [ 186.203884][ T8823] CPU: 1 UID: 0 PID: 8823 Comm: syz.0.1718 Not tainted syzkaller #0 PREEMPT(voluntary) [ 186.203911][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 186.203922][ T8823] Call Trace: [ 186.203928][ T8823] [ 186.203934][ T8823] __dump_stack+0x1d/0x30 [ 186.203959][ T8823] dump_stack_lvl+0x95/0xd0 [ 186.203983][ T8823] dump_stack+0x15/0x1b [ 186.204054][ T8823] should_fail_ex+0x265/0x280 [ 186.204080][ T8823] should_failslab+0x8c/0xb0 [ 186.204104][ T8823] __kmalloc_cache_noprof+0x65/0x4c0 [ 186.204131][ T8823] ? bpf_xdp_link_attach+0x1a7/0x5d0 [ 186.204166][ T8823] bpf_xdp_link_attach+0x1a7/0x5d0 [ 186.204234][ T8823] link_create+0x4d2/0x690 [ 186.204306][ T8823] __sys_bpf+0x628/0x7c0 [ 186.204403][ T8823] __x64_sys_bpf+0x41/0x50 [ 186.204440][ T8823] x64_sys_call+0x28e1/0x3000 [ 186.204469][ T8823] do_syscall_64+0xca/0x2b0 [ 186.204507][ T8823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.204540][ T8823] RIP: 0033:0x7f7c6761f749 [ 186.204556][ T8823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.204666][ T8823] RSP: 002b:00007f7c6607f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.204707][ T8823] RAX: ffffffffffffffda RBX: 00007f7c67875fa0 RCX: 00007f7c6761f749 [ 186.204723][ T8823] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000001c [ 186.204735][ T8823] RBP: 00007f7c6607f090 R08: 0000000000000000 R09: 0000000000000000 [ 186.204749][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.204828][ T8823] R13: 00007f7c67876038 R14: 00007f7c67875fa0 R15: 00007fffdd5050a8 [ 186.204848][ T8823] [ 186.747445][ T8833] loop0: detected capacity change from 0 to 2048 [ 186.837823][ T8833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 187.153580][ T8833] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 187.169001][ T8833] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 187.181525][ T8833] EXT4-fs (loop0): This should not happen!! Data will be lost [ 187.181525][ T8833] [ 187.191273][ T8833] EXT4-fs (loop0): Total free blocks count 0 [ 187.197278][ T8833] EXT4-fs (loop0): Free/Dirty block details [ 187.203210][ T8833] EXT4-fs (loop0): free_blocks=2415919104 [ 187.208987][ T8833] EXT4-fs (loop0): dirty_blocks=8192 [ 187.214321][ T8833] EXT4-fs (loop0): Block reservation details [ 187.220337][ T8833] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 187.293142][ T65] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 187.548281][ T3593] Bluetooth: hci0: command 0x1003 tx timeout [ 187.554394][ T3855] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 187.864052][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 187.864401][ T3855] Bluetooth: hci1: command 0x1003 tx timeout [ 187.951511][ T8853] loop2: detected capacity change from 0 to 512 [ 187.958311][ T8853] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.966362][ T8853] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1727: error while reading EA inode 32 err=-116 [ 187.983607][ T8851] loop3: detected capacity change from 0 to 1024 [ 187.993484][ T8851] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.013198][ T8853] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1727: error while reading EA inode 32 err=-116 [ 188.026521][ T8853] EXT4-fs (loop2): 1 orphan inode deleted [ 188.033653][ T8853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.053547][ T8851] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1728: Invalid block bitmap block 0 in block_group 0 [ 188.076963][ T8851] __quota_error: 227 callbacks suppressed [ 188.076977][ T8851] Quota error (device loop3): write_blk: dquota write failed [ 188.090162][ T8851] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 188.113133][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.129539][ T8851] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1728: Failed to acquire dquot type 0 [ 188.142947][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.151148][ T8851] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.1728: Freeing blocks not in datazone - block = 0, count = 4096 [ 188.177709][ T8851] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1728: Invalid inode bitmap blk 0 in block_group 0 [ 188.192979][ T359] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 188.193029][ T8851] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 188.202005][ T359] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:8: Failed to release dquot type 0 [ 188.211065][ T8851] EXT4-fs (loop3): 1 orphan inode deleted [ 188.228698][ T8851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.265606][ T8851] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.1728: iget: bad extra_isize 65535 (inode size 256) [ 188.279925][ T29] audit: type=1400 audit(1766449112.293:19135): avc: denied { create } for pid=8850 comm="syz.3.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.282055][ T8851] x_tables: duplicate underflow at hook 1 [ 188.306200][ T8851] atomic_op ffff888130b58d28 conn xmit_atomic 0000000000000000 [ 188.314071][ T29] audit: type=1400 audit(1766449112.333:19136): avc: denied { bind } for pid=8850 comm="syz.3.1728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 188.344107][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.424526][ T29] audit: type=1404 audit(1766449112.443:19137): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 188.440340][ T29] audit: type=1404 audit(1766449112.463:19138): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 188.456227][ T29] audit: type=1400 audit(1766449112.463:19139): avc: denied { prog_load } for pid=8873 comm="syz.3.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 188.475529][ T29] audit: type=1400 audit(1766449112.463:19140): avc: denied { bpf } for pid=8873 comm="syz.3.1733" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.496156][ T29] audit: type=1400 audit(1766449112.463:19141): avc: denied { perfmon } for pid=8873 comm="syz.3.1733" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 188.584170][ T8877] loop1: detected capacity change from 0 to 2048 [ 188.605471][ T8876] loop3: detected capacity change from 0 to 2048 [ 188.610609][ T8877] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 188.635598][ T8876] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.666832][ T8876] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.685379][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.822360][ T8875] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 188.837692][ T8875] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 188.850298][ T8875] EXT4-fs (loop1): This should not happen!! Data will be lost [ 188.850298][ T8875] [ 188.860065][ T8875] EXT4-fs (loop1): Total free blocks count 0 [ 188.866066][ T8875] EXT4-fs (loop1): Free/Dirty block details [ 188.871965][ T8875] EXT4-fs (loop1): free_blocks=2415919104 [ 188.877727][ T8875] EXT4-fs (loop1): dirty_blocks=8192 [ 188.883042][ T8875] EXT4-fs (loop1): Block reservation details [ 188.889033][ T8875] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 189.014313][ T65] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 189.275347][ T8909] 9p: Bad value for 'rfdno' [ 189.310024][ T8912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.322979][ T8890] ================================================================== [ 189.329062][ T8912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.331206][ T8890] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 189.348651][ T8890] [ 189.350987][ T8890] read-write to 0xffffffff86809a00 of 8 bytes by interrupt on cpu 0: [ 189.359066][ T8890] tick_do_update_jiffies64+0x113/0x1c0 [ 189.364667][ T8890] tick_nohz_handler+0x8d/0x3d0 [ 189.369540][ T8890] __hrtimer_run_queues+0x20f/0x5a0 [ 189.374774][ T8890] hrtimer_interrupt+0x21a/0x460 [ 189.379744][ T8890] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 189.385662][ T8890] sysvec_apic_timer_interrupt+0x6f/0x80 [ 189.391319][ T8890] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 189.397331][ T8890] _raw_spin_unlock_irq+0x2f/0x50 [ 189.402392][ T8890] evict_folios+0x338b/0x35a0 [ 189.407090][ T8890] try_to_shrink_lruvec+0x5b5/0x950 [ 189.412323][ T8890] shrink_lruvec+0x22e/0x1b50 [ 189.417034][ T8890] shrink_node+0x66c/0x2010 [ 189.421563][ T8890] do_try_to_free_pages+0x3f6/0xcd0 [ 189.426885][ T8890] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 189.432803][ T8890] try_charge_memcg+0x383/0xa10 [ 189.437668][ T8890] charge_memcg+0x51/0xc0 [ 189.442018][ T8890] __mem_cgroup_charge+0x28/0xb0 [ 189.446980][ T8890] handle_mm_fault+0xf16/0x2c60 [ 189.451859][ T8890] __get_user_pages+0x1024/0x1ed0 [ 189.456906][ T8890] __mm_populate+0x243/0x3a0 [ 189.461513][ T8890] vm_mmap_pgoff+0x232/0x2e0 [ 189.466118][ T8890] ksys_mmap_pgoff+0xc2/0x310 [ 189.470810][ T8890] x64_sys_call+0x16bb/0x3000 [ 189.475503][ T8890] do_syscall_64+0xca/0x2b0 [ 189.480059][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.485976][ T8890] [ 189.488308][ T8890] read to 0xffffffff86809a00 of 8 bytes by task 8890 on cpu 1: [ 189.495855][ T8890] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 189.502109][ T8890] count_shadow_nodes+0x6a/0x230 [ 189.507076][ T8890] do_shrink_slab+0x63/0x680 [ 189.511680][ T8890] shrink_slab+0x4f5/0x840 [ 189.516104][ T8890] shrink_node+0x6a9/0x2010 [ 189.520634][ T8890] do_try_to_free_pages+0x3f6/0xcd0 [ 189.525861][ T8890] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 189.531780][ T8890] try_charge_memcg+0x383/0xa10 [ 189.536640][ T8890] obj_cgroup_charge_pages+0xa6/0x150 [ 189.542034][ T8890] __memcg_kmem_charge_page+0x9f/0x170 [ 189.547514][ T8890] __alloc_frozen_pages_noprof+0x18f/0x360 [ 189.553349][ T8890] alloc_pages_mpol+0xb3/0x260 [ 189.558137][ T8890] alloc_pages_noprof+0x90/0x130 [ 189.563096][ T8890] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 189.569023][ T8890] __kvmalloc_node_noprof+0x492/0x6b0 [ 189.574428][ T8890] ip_set_alloc+0x24/0x30 [ 189.578832][ T8890] hash_netiface_create+0x282/0x740 [ 189.584059][ T8890] ip_set_create+0x3cc/0x970 [ 189.588663][ T8890] nfnetlink_rcv_msg+0x4c6/0x590 [ 189.593620][ T8890] netlink_rcv_skb+0x123/0x220 [ 189.598404][ T8890] nfnetlink_rcv+0x167/0x16c0 [ 189.603098][ T8890] netlink_unicast+0x5c0/0x690 [ 189.607883][ T8890] netlink_sendmsg+0x58b/0x6b0 [ 189.612685][ T8890] __sock_sendmsg+0x145/0x180 [ 189.617374][ T8890] ____sys_sendmsg+0x31e/0x4a0 [ 189.622180][ T8890] ___sys_sendmsg+0x17b/0x1d0 [ 189.626896][ T8890] __x64_sys_sendmsg+0xd4/0x160 [ 189.631812][ T8890] x64_sys_call+0x17ba/0x3000 [ 189.636529][ T8890] do_syscall_64+0xca/0x2b0 [ 189.641089][ T8890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.647019][ T8890] [ 189.649437][ T8890] value changed: 0x00000000ffffd499 -> 0x00000000ffffd49a [ 189.656571][ T8890] [ 189.658924][ T8890] Reported by Kernel Concurrency Sanitizer on: [ 189.665095][ T8890] CPU: 1 UID: 0 PID: 8890 Comm: syz.0.1737 Not tainted syzkaller #0 PREEMPT(voluntary) [ 189.674836][ T8890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.684915][ T8890] ================================================================== [ 189.969611][ T8911] loop3: detected capacity change from 0 to 32768