last executing test programs: 3.250478679s ago: executing program 2 (id=3007): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) symlinkat(0x0, 0xffffffffffffffff, 0x0) 3.20864415s ago: executing program 2 (id=3008): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x138, 0x10, 0x713, 0xffffff80, 0x0, {{@in=@broadcast, @in6=@remote}, {@in6=@remote, 0x0, 0x32}, @in=@multicast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0xe}, 0x0) 3.121157713s ago: executing program 2 (id=3011): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x2000004, 0x8000, 0x4, 0x0, 0x0, 0x0, 0xfec4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r1, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000548000/0x1000)=nil, 0x1000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x151b1000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfffffffc, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)="15f5bc7974268aa4ba8b594087db58", 0xf, 0xcc03, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) shutdown(r4, 0x2) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) 3.028562637s ago: executing program 1 (id=3014): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000440)=ANY=[@ANYRES16], 0x4, 0x283, &(0x7f0000000480)="$eJzs289OE10Yx/Eff94XXnhhqigKxvhEN7qZQL2ChkBibKJBavyTmAwy1aZDSzoNpmqEnVuvg7h0Z2K8ATZegQt3bFyyMI5hWqGFkkiiTLHfz2ae5vTXnJPnzOQsOlv33iwX86Gb96rq7TH1S+vallLqVZ/qehrX3rj+V83WdW0s+/ninfsPbmay2dl5s7nMwvW0mY1e+vDs5dvLH6vDd9+Nvh/QZurR1tf0l83xzYmt7wtPC6EVQiuVq+bZYrlc9RYD35YKYdG1F7cD3wt9K5RCv9Iyng/KKys180pLI0MrFT8MzSvVrOjXrFq2aqVm3hOvUDLXdW1kSN0mcrR2tERuY37ey/yp+aAzVCoZb0bS5IGR3EYiEwIAAInqxPO/cf4/Jpz/u8HO+f9h4/5txfkfAAAAAAAAAAAAAAAAAAAAAICTYDuKnCiKnJ/Xf6T4DZ+o8fk/SUOShiX9L2lE0qgkR1JK0ilJpyWNSToj6aykcUnnJJ2XNNH0W0mvFQcd1v8++t8Vfsf930P/Tyye/92t6cXdQWn59WpuNVe/1sczeRUUyNeUHH2Le9lQr+duZGenLJbSheW1Rn5tNdfXmp+Ws7Nh2uWn63lrzQ/E+243n5azs8Ha5dNt84O6eqUp78rRp8cqK9BSvCf38q+mzWZuZfflJ+Pv/e1c29W2f6572Hg9/wv7I5pq259+TfYnu3ZIYe150QsCv9I9hQalDpgGBUUnF0k/mXAc9pqe9EwAAAAAAAAAAAAAAAAAAEdxHH8nTHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADs9yMAAP//hXNgGQ==") rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000800)={'\x00', 0x9, 0x400, 0x4b44b3d3, 0x2, 0x3, r3}) r4 = getpid() syz_pidfd_open(r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x67, 0x2, {0x0, 0x0, 0x6}}, 0x14) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 2.93401448s ago: executing program 1 (id=3017): socket(0x2c, 0x803, 0x0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) unshare(0x2c060000) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000008c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x20040800}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}}, 0x0) unshare(0x2c020400) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/167, 0xa7}, {&(0x7f0000000280)=""/18, 0x12}, {&(0x7f0000000740)=""/236, 0xec}, {&(0x7f0000000840)=""/146, 0x92}, {&(0x7f0000000900)=""/136, 0x88}], 0x5, &(0x7f00000009c0)=""/99, 0x63}, 0xfffffff7}, {{&(0x7f0000000a40)=@can, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000400)=""/26, 0x1a}, {&(0x7f0000000ac0)=""/224, 0xe0}, {&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f0000001c00)=""/143, 0x8f}, {&(0x7f0000000c80)=""/57, 0x39}], 0x6, &(0x7f0000000d40)=""/182, 0xb6}, 0x7}], 0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x729b5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7002, 0x5, 0x20000, 0x8, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000000000000070040000900000000", @ANYRESOCT=r3, @ANYRES32], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, &(0x7f0000000180)=[{&(0x7f00000003c0)="a2", 0x1}], 0x1, 0x0, 0x0, 0xa6820000}, 0x0) 2.803202995s ago: executing program 2 (id=3022): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x2000004, 0x8000, 0x4, 0x0, 0x0, 0x0, 0xfec4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r1, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000548000/0x1000)=nil, 0x1000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x151b1000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfffffffc, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$caif_stream(0x25, 0x1, 0x2) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020500000000000000100000000000082de243ffd6044000"/36], 0x24, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 2.475744876s ago: executing program 2 (id=3029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 2.426227898s ago: executing program 2 (id=3030): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x18) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}, {&(0x7f0000000040)='\\', 0x1}], 0x2) 2.076324319s ago: executing program 1 (id=3033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.05371812s ago: executing program 1 (id=3034): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x143a81) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x14) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240e15f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) 2.021889792s ago: executing program 1 (id=3035): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, 0xffffffffffffffff, 0x6a855000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sync() ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e00000005000000060000000900000010000000", @ANYRES32, @ANYBLOB="ff00000000000000000000000000000000000000cb17e6e31c07665efe142ff4c67692719e7fd645ff2d97402643b783f732821c05d357d27adfc26e0bf203ae71b6414744fefb35678cc543c0a954411f0db497be96c81cdeb092dac8a69f1d5d3209e94cf634eb79e0203109a007569960207b854ed89187d40f157af0b7ea8c418570898b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000040000000000000b00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) r6 = dup(r5) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4, 0x100, @rand_addr=' \x01\x00'}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f00000008c0)={0x0, {{0xa, 0x4e24, 0x0, @loopback, 0x2}}, {{0xa, 0x4e21, 0xfffffff9, @remote}}}, 0x108) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000380)={0x2, 0x12, 0xf01, 0xff81, 0x0, 0x2, 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000005800000058000000090000000000000000000003000000000500000001000000000400000600000000000001000000001d001b010f0000000000000c05000000ed7cc4b90000000000000003000000000300000003000000100000000d000000000000020200000000003000305f303000"], &(0x7f0000000240)=""/113, 0x79, 0x71, 0x0, 0x1000, 0x0, @void, @value}, 0x28) io_submit(0x0, 0x3, &(0x7f00000006c0)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x5, 0x7fff, 0xffffffffffffffff, &(0x7f0000000200)="9c66b163792a7ce8278fa7334dff8f5ce0624069db3ae8acdaddc132703c0f4450a64382676517c8a9668ef4a30e30c0ffed2da0099a61dd819d", 0x3a, 0x80, 0x0, 0x1}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x6, 0x5, 0xffffffffffffffff, &(0x7f0000000500)="7c5eca928c4d4acf6ad498fafd679231c9e15e0c19ade80171d72a5c7e66620e7712d44e96c94706b2f580da098a37041b63f13dcb854d3594c9d76dcdb55cebb5bb121437e7c3a1db4e382b23f5f191af4cd446d5f1c43af72fb4031cf734d8749f7950a0cbca55e83a96c9f2dcb9fb687db4cd7948e0730e2e9abf89779670a05ebb8190439bb4f69bf5747f441a0dedd82656e0073c4e17f2556de34841ec52c5c8c051e6942b36b9311befe45bd299036328a6329d58d06384fa92116b3e8839999fe45e40bd14f394d1", 0xcc, 0x40, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x6, r2, &(0x7f0000000640)="a36af2676805dce92d3af7c6e8ddd258508d79", 0x13, 0x3, 0x0, 0x1, r6}]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r0, @ANYBLOB="ec00ffff00"/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0200000003000000850000fcffffffffffffff000000000000000000d68b4f22e729fe8bff49776085671b2ee4c5c6241016e2515b92810ea995e4b032f6c809e43695de95c534000000000000005490174a6d9b3b94572fa0e5000000000000e3fe5b026479a0a400"/115], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0x3, 0x0, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYRES32=r9, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c00028005000f007f"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) listen(r1, 0xfffffffa) 1.316633966s ago: executing program 1 (id=3045): syz_open_dev$evdev(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x80402, 0x0) write$cgroup_int(r2, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)={0x2, 0x3, 0x0, 0x3, 0x22, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x4, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}, @sadb_key={0x12, 0x8, 0x408, 0x0, "67328c217950d4ed0ce9fd283e7a39cddf91db11b8d33fe41b6225fa8075fb71275ea059e57dbe5ddb41c0ece4532edb885207438d8c8ccd0b4736f5a7f78c02c158f5c563524df4f34de949509868d522a81cd34a99546e74c7f8725419f8e1af17a281d0f7914e267c1fc4f70fee6200286b016552268cce85ede55f12704942"}]}, 0x110}, 0x1, 0x7}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x4, 0x6}, 0x400, 0xfffffffd, 0x6, 0x3, 0x1, 0x1, 0xfff6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)={0x14, 0x6a, 0x100, 0x0, 0x0, "", [@nested={0x4, 0x9}]}, 0x14}], 0x1}, 0x0) r5 = syz_usb_connect$cdc_ncm(0x1, 0x73, &(0x7f0000000280)=ANY=[@ANYBLOB="12010001020000ff2505a1a44000010203010902610002010190fc0904000001020d0000052406000105240007000d1a01000c05240101030905810320000008d5b251c199a3bf900a0904010000020d00000904010102020d0000090582020800e502100905030220000102f500"/123], &(0x7f00000042c0)={0xa, &(0x7f0000004040)={0xa, 0x6, 0x201, 0xf4, 0x4, 0x3, 0x40, 0xe}, 0x54, &(0x7f0000004080)={0x5, 0xf, 0x54, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "cb7314e227fe9eb92928b4ed6ecf5337"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x4, 0x800}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "bad3ef35787a159559c4e4f6ff5523ba"}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x8, 0xff00, 0x1, [0xc0, 0xfff0, 0xffbe00, 0xf0, 0xc0]}]}, 0x4, [{0x8c, &(0x7f0000004100)=@string={0x8c, 0x3, "3b02bbdbf2c4826c522f1bcb4280f74a6bcbf8f2e62d544b03043a1801fe81c98169383775e5d976c3090db3a24d0dbd6a8ac60f7f96beb6974cf32519d2eb9d82f26795e61028b7974e819796dd21c193c13a3f1feac6e109b59b5eed593809ce712d2a098278c46b63f98f440167e19775f14e969e73189458f30c305d902a53cdde8753b645a4f935"}}, {0x57, &(0x7f00000041c0)=@string={0x57, 0x3, "0da29772aaa9f5b8e22ab527fde4c64d6ca66e2c5d712d619961514bbaf46a25b2cd7ecbc471d9e2371af8a7b79ba0f114cb6f20627d7d1331fbfe7e6f9f3c3e2c4b4b6e292ff355fe6c417d542b1371d1c75b1f93"}}, {0x4, &(0x7f0000004240)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000004280)=@lang_id={0x4, 0x3, 0x810}}]}) syz_usb_disconnect(r5) syz_usb_disconnect(r5) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.275790567s ago: executing program 3 (id=3047): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r4, 0x303, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0300002000"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r2, 0x0, 0x8}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x6, @empty, 0x2}, @in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x6c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x1) socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.242460668s ago: executing program 4 (id=3048): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1a, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000c28b3684ac1eb96ef497000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) 944.789948ms ago: executing program 3 (id=3049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x6, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 917.580099ms ago: executing program 3 (id=3050): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x419, 0x600, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}}}]}}]}}, 0x0) 555.726862ms ago: executing program 0 (id=3051): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) msgget$private(0x0, 0x10c) 478.051724ms ago: executing program 0 (id=3052): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) brk(0x20ffc004) 455.623815ms ago: executing program 0 (id=3053): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) memfd_secret(0x80000) 352.701689ms ago: executing program 3 (id=3054): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x21000e, &(0x7f0000000380), 0xde, 0x529, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) read(r0, 0x0, 0x59) 347.976279ms ago: executing program 4 (id=3055): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000cea50000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x89, 0x2c, 0x0, 0x4}]}) 332.425199ms ago: executing program 0 (id=3056): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x143a81) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x14) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240e15f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) 269.489581ms ago: executing program 0 (id=3057): listen(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, 0x0, 0x4048080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x9403, 0x0, 0x230, 0x2c0, 0x340, 0x3d8, 0x3d8, 0x340, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@physdev={{0x68}, {'ip6tnl0\x00', {0xff}, 'erspan0\x00', {}, 0x8, 0x2}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xfffffffc]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0xf5}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r4 = dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x20004001}, 0x800) sendmmsg(r2, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000012c0)="23a0be3ec0d9edaccda531874ecf98434f3d10665f6e0346136984c1f2f15d", 0x1f}, {&(0x7f0000001300)="11ca5641cbf9577fa297e890dc4746449416908fa7066d54ca4ed8fb87a71d621ef53449e793c55ba58eab20a5044fd1ec07cc77e4e3bf3b8da2812b8943441c0c565de0c5dbc8c8", 0x48}, {&(0x7f0000001380)="190be02b544a87c33aa4aaaaabfccb6154043a8b5a2ea95211900186170c7a4f2651d264466253c5f9851a58793efcaf45a2c0f7546bf143b9bff46892f86a3e98e625eabbd1043b1e15036c9cf221d620f792d835bcad5a583cdd666c527279ce68530f3e71f6c170d033e0eec71d019b7058f398e887abb014e1930ffe52fe9b32fb847022f7298ba564e6fabd049f56aefe1e966ab30d411e62a5394c8bc6146b171d44ce5dc32018a6b0e15828d2e6853b3b2fec4d21c718e79ee351a06755a9", 0xc2}, {&(0x7f0000002600)="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", 0x4b4}], 0x4}}], 0x6, 0x200040d1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000002000f000000050030000000000005002f000000000008000300", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 163.344965ms ago: executing program 0 (id=3058): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x2000004, 0x8000, 0x4, 0x0, 0x0, 0x0, 0xfec4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r1, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000548000/0x1000)=nil, 0x1000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x151b1000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfffffffc, 0x0, 0x400, 0x0, 0x30}, 0x9c) sendto$inet6(r4, &(0x7f00000002c0)="15f5bc7974268aa4ba8b594087db58", 0xf, 0xcc03, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) shutdown(r4, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$caif_stream(0x25, 0x1, 0x2) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020500000000000000100000000000082de243ffd6044000"/36], 0x24, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 120.267466ms ago: executing program 4 (id=3059): r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x204, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000400000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) keyctl$chown(0x4, r0, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0x0, 0x0) 119.696086ms ago: executing program 4 (id=3060): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}}) 111.451747ms ago: executing program 3 (id=3061): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) symlinkat(0x0, 0xffffffffffffffff, 0x0) 65.252878ms ago: executing program 4 (id=3062): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) brk(0x20ffc004) 47.846479ms ago: executing program 3 (id=3063): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) mkdir(&(0x7f0000000040)='.\x02\x00', 0xe88022b11028290f) r1 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x0, 0x2000004, 0x8000, 0x4, 0x0, 0x0, 0x0, 0xfec4}, 0x0, 0x0, 0xffffffffffffffff, 0x3) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r1, 0x3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000548000/0x1000)=nil, 0x1000, 0x1000000, 0x80010, 0xffffffffffffffff, 0x151b1000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0xfffffffc, 0x0, 0x400, 0x0, 0x30}, 0x9c) sendto$inet6(r4, &(0x7f00000002c0)="15f5bc7974268aa4ba8b594087db58", 0xf, 0xcc03, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) shutdown(r4, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$caif_stream(0x25, 0x1, 0x2) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="020500000000000000100000000000082de243ffd6044000"/36], 0x24, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000003c0)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_access\x00') 0s ago: executing program 4 (id=3064): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x18) socket$inet6(0xa, 0x3, 0x3c) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x101, 0x1e2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) flock(r0, 0xe) kernel console output (not intermixed with test programs): ype 1: error -2 [ 152.386531][ T9343] EXT4-fs (loop1): 1 truncate cleaned up [ 152.392913][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.394003][ T9343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.460016][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.473979][ T9348] tmpfs: Bad value for 'defcontext' [ 152.484258][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2093'. [ 152.584227][ T9360] tmpfs: Bad value for 'defcontext' [ 152.595527][ T9360] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2098'. [ 152.895624][ T9363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.904101][ T9363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.667445][ T9383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.676796][ T9383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.688249][ T9383] loop2: detected capacity change from 0 to 1024 [ 153.713945][ T9383] EXT4-fs error (device loop2): __ext4_fill_super:5502: inode #2: comm syz.2.2106: casefold flag without casefold feature [ 153.726915][ T9383] EXT4-fs (loop2): get root inode failed [ 153.732712][ T9383] EXT4-fs (loop2): mount failed [ 153.906215][ T9387] tmpfs: Bad value for 'defcontext' [ 153.915910][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2107'. [ 154.029331][ T9392] loop1: detected capacity change from 0 to 512 [ 154.036203][ T9392] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.045294][ T9392] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 154.054198][ T9392] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 154.063773][ T9392] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 154.071905][ T9392] System zones: 0-2, 18-18, 34-34 [ 154.077309][ T9392] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 154.092114][ T9392] EXT4-fs (loop1): 1 truncate cleaned up [ 154.098244][ T9392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.265253][ T9397] loop2: detected capacity change from 0 to 128 [ 154.271881][ T9397] vfat: Unknown parameter 'ÿÿ' [ 154.391501][ T9412] loop4: detected capacity change from 0 to 512 [ 154.398638][ T9412] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 154.407844][ T9412] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 154.416996][ T9412] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 154.426045][ T9412] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 154.434101][ T9412] System zones: 0-2, 18-18, 34-34 [ 154.439648][ T9412] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 154.454372][ T9412] EXT4-fs (loop4): 1 truncate cleaned up [ 154.460408][ T9412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.817151][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.840118][ T9418] tmpfs: Bad value for 'defcontext' [ 154.849805][ T9418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2119'. [ 155.054781][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2122'. [ 155.139237][ T9429] FAULT_INJECTION: forcing a failure. [ 155.139237][ T9429] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 155.152616][ T9429] CPU: 1 UID: 0 PID: 9429 Comm: syz.1.2123 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 155.152653][ T9429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.152669][ T9429] Call Trace: [ 155.152678][ T9429] [ 155.152688][ T9429] __dump_stack+0x1d/0x30 [ 155.152876][ T9429] dump_stack_lvl+0xe8/0x140 [ 155.152964][ T9429] dump_stack+0x15/0x1b [ 155.152981][ T9429] should_fail_ex+0x265/0x280 [ 155.153021][ T9429] should_fail_alloc_page+0xf2/0x100 [ 155.153054][ T9429] __alloc_frozen_pages_noprof+0xff/0x360 [ 155.153141][ T9429] alloc_pages_mpol+0xb3/0x250 [ 155.153166][ T9429] alloc_migration_target_by_mpol+0x11b/0x240 [ 155.153242][ T9429] migrate_pages_batch+0x2e4/0x17d0 [ 155.153319][ T9429] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 155.153354][ T9429] ? __walk_page_range+0x324/0x340 [ 155.153383][ T9429] ? find_vma+0x6c/0xa0 [ 155.153415][ T9429] migrate_pages+0xf99/0x17f0 [ 155.153546][ T9429] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 155.153602][ T9429] __se_sys_mbind+0x975/0xac0 [ 155.153698][ T9429] __x64_sys_mbind+0x78/0x90 [ 155.153726][ T9429] x64_sys_call+0x14af/0x2fb0 [ 155.153753][ T9429] do_syscall_64+0xd0/0x1a0 [ 155.153783][ T9429] ? clear_bhb_loop+0x40/0x90 [ 155.153831][ T9429] ? clear_bhb_loop+0x40/0x90 [ 155.153860][ T9429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.153888][ T9429] RIP: 0033:0x7f04d677e969 [ 155.153905][ T9429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.153923][ T9429] RSP: 002b:00007f04d4de7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 155.154014][ T9429] RAX: ffffffffffffffda RBX: 00007f04d69a5fa0 RCX: 00007f04d677e969 [ 155.154029][ T9429] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 155.154045][ T9429] RBP: 00007f04d4de7090 R08: 0000000000000000 R09: 0000000000000002 [ 155.154061][ T9429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.154077][ T9429] R13: 0000000000000000 R14: 00007f04d69a5fa0 R15: 00007ffcb5cbdf78 [ 155.154155][ T9429] [ 155.416528][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.454304][ T9436] loop2: detected capacity change from 0 to 1024 [ 155.461143][ T9436] EXT4-fs: Ignoring removed orlov option [ 155.466913][ T9436] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.486356][ T9436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.608393][ T9461] tmpfs: Bad value for 'defcontext' [ 155.619089][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2136'. [ 155.676255][ T9457] loop3: detected capacity change from 0 to 8192 [ 156.391269][ T9436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.486894][ T9480] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2143'. [ 156.554102][ T29] kauditd_printk_skb: 688 callbacks suppressed [ 156.554120][ T29] audit: type=1400 audit(1747857873.128:12858): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 156.631918][ T29] audit: type=1400 audit(1747857873.198:12859): avc: denied { mount } for pid=9490 comm="syz.2.2150" name="/" dev="hugetlbfs" ino=24139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 156.678585][ T9497] tmpfs: Bad value for 'defcontext' [ 156.685677][ T9500] loop3: detected capacity change from 0 to 512 [ 156.693312][ T29] audit: type=1400 audit(1747857873.228:12860): avc: denied { create } for pid=9490 comm="syz.2.2150" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 156.714139][ T29] audit: type=1400 audit(1747857873.228:12861): avc: denied { mount } for pid=9490 comm="syz.2.2150" name="/" dev="ramfs" ino=24143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 156.736552][ T29] audit: type=1326 audit(1747857873.238:12862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9491 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d677e969 code=0x7ffc0000 [ 156.760391][ T29] audit: type=1326 audit(1747857873.238:12863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9491 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04d677e969 code=0x7ffc0000 [ 156.783968][ T29] audit: type=1326 audit(1747857873.238:12864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9491 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d677e969 code=0x7ffc0000 [ 156.807755][ T29] audit: type=1326 audit(1747857873.238:12865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9491 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f04d677e969 code=0x7ffc0000 [ 156.831425][ T29] audit: type=1326 audit(1747857873.238:12866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9491 comm="syz.1.2149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04d677e969 code=0x7ffc0000 [ 156.841016][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 156.855111][ T29] audit: type=1326 audit(1747857873.238:12867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9490 comm="syz.2.2150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bae95e969 code=0x7ffc0000 [ 156.890330][ T9500] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 156.903940][ T9500] ext4 filesystem being mounted at /399/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.937632][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 156.973171][ T9514] loop1: detected capacity change from 0 to 8192 [ 157.537656][ T9526] FAULT_INJECTION: forcing a failure. [ 157.537656][ T9526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.550826][ T9526] CPU: 1 UID: 0 PID: 9526 Comm: syz.0.2163 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 157.550864][ T9526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.550882][ T9526] Call Trace: [ 157.550890][ T9526] [ 157.550899][ T9526] __dump_stack+0x1d/0x30 [ 157.550928][ T9526] dump_stack_lvl+0xe8/0x140 [ 157.551015][ T9526] dump_stack+0x15/0x1b [ 157.551032][ T9526] should_fail_ex+0x265/0x280 [ 157.551066][ T9526] should_fail+0xb/0x20 [ 157.551120][ T9526] should_fail_usercopy+0x1a/0x20 [ 157.551216][ T9526] _copy_from_user+0x1c/0xb0 [ 157.551239][ T9526] ___sys_sendmsg+0xc1/0x1d0 [ 157.551303][ T9526] __x64_sys_sendmsg+0xd4/0x160 [ 157.551333][ T9526] x64_sys_call+0x2999/0x2fb0 [ 157.551426][ T9526] do_syscall_64+0xd0/0x1a0 [ 157.551454][ T9526] ? clear_bhb_loop+0x40/0x90 [ 157.551558][ T9526] ? clear_bhb_loop+0x40/0x90 [ 157.551652][ T9526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.551680][ T9526] RIP: 0033:0x7fea41dae969 [ 157.551699][ T9526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.551723][ T9526] RSP: 002b:00007fea40417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.551753][ T9526] RAX: ffffffffffffffda RBX: 00007fea41fd5fa0 RCX: 00007fea41dae969 [ 157.551766][ T9526] RDX: 0000000000008080 RSI: 0000200000000000 RDI: 0000000000000004 [ 157.551847][ T9526] RBP: 00007fea40417090 R08: 0000000000000000 R09: 0000000000000000 [ 157.551864][ T9526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.551876][ T9526] R13: 0000000000000000 R14: 00007fea41fd5fa0 R15: 00007ffd6c4da488 [ 157.551895][ T9526] [ 157.888704][ T9540] tmpfs: Bad value for 'defcontext' [ 157.901530][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2169'. [ 157.967072][ T9538] lo speed is unknown, defaulting to 1000 [ 158.109775][ T9552] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2173'. [ 158.209555][ T9562] FAULT_INJECTION: forcing a failure. [ 158.209555][ T9562] name failslab, interval 1, probability 0, space 0, times 0 [ 158.209590][ T9562] CPU: 0 UID: 0 PID: 9562 Comm: syz.0.2177 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 158.209635][ T9562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.209703][ T9562] Call Trace: [ 158.209712][ T9562] [ 158.209721][ T9562] __dump_stack+0x1d/0x30 [ 158.209749][ T9562] dump_stack_lvl+0xe8/0x140 [ 158.209772][ T9562] dump_stack+0x15/0x1b [ 158.209835][ T9562] should_fail_ex+0x265/0x280 [ 158.209893][ T9562] should_failslab+0x8c/0xb0 [ 158.209989][ T9562] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 158.210018][ T9562] ? __d_alloc+0x3d/0x350 [ 158.210070][ T9562] __d_alloc+0x3d/0x350 [ 158.210092][ T9562] ? __rcu_read_unlock+0x34/0x70 [ 158.210123][ T9562] d_alloc_parallel+0x53/0xc40 [ 158.210152][ T9562] ? selinux_inode_permission+0x32a/0x400 [ 158.210193][ T9562] ? lockref_get_not_dead+0x120/0x1c0 [ 158.210225][ T9562] ? __rcu_read_unlock+0x4f/0x70 [ 158.210256][ T9562] __lookup_slow+0x8c/0x250 [ 158.210286][ T9562] lookup_slow+0x3c/0x60 [ 158.210386][ T9562] walk_component+0x1ec/0x220 [ 158.210429][ T9562] path_lookupat+0xfe/0x2a0 [ 158.210494][ T9562] filename_lookup+0x147/0x340 [ 158.210533][ T9562] vfs_statx+0x9d/0x380 [ 158.210573][ T9562] __se_sys_newstat+0x69/0x270 [ 158.210650][ T9562] ? fput+0x8f/0xc0 [ 158.210675][ T9562] ? ksys_write+0x16e/0x1a0 [ 158.210710][ T9562] __x64_sys_newstat+0x31/0x40 [ 158.210757][ T9562] x64_sys_call+0x781/0x2fb0 [ 158.210858][ T9562] do_syscall_64+0xd0/0x1a0 [ 158.210891][ T9562] ? clear_bhb_loop+0x40/0x90 [ 158.210920][ T9562] ? clear_bhb_loop+0x40/0x90 [ 158.210950][ T9562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.210994][ T9562] RIP: 0033:0x7fea41dae969 [ 158.211014][ T9562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.211039][ T9562] RSP: 002b:00007fea40417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 158.211063][ T9562] RAX: ffffffffffffffda RBX: 00007fea41fd5fa0 RCX: 00007fea41dae969 [ 158.211075][ T9562] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000200000000800 [ 158.211092][ T9562] RBP: 00007fea40417090 R08: 0000000000000000 R09: 0000000000000000 [ 158.211108][ T9562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.211124][ T9562] R13: 0000000000000001 R14: 00007fea41fd5fa0 R15: 00007ffd6c4da488 [ 158.211154][ T9562] [ 158.309460][ T9567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.309549][ T9567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.316419][ T9567] loop0: detected capacity change from 0 to 1024 [ 158.333440][ T9567] EXT4-fs error (device loop0): __ext4_fill_super:5502: inode #2: comm syz.0.2179: casefold flag without casefold feature [ 158.333665][ T9567] EXT4-fs (loop0): get root inode failed [ 158.333681][ T9567] EXT4-fs (loop0): mount failed [ 158.751018][ T9588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2184'. [ 158.773910][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2185'. [ 158.920752][ T9598] loop2: detected capacity change from 0 to 128 [ 158.927988][ T9598] vfat: Unknown parameter 'ÿÿ' [ 158.935010][ T9596] netlink: 'syz.4.2188': attribute type 6 has an invalid length. [ 158.943478][ T9596] loop4: detected capacity change from 0 to 1024 [ 158.969744][ T9600] loop0: detected capacity change from 0 to 512 [ 158.978224][ T9600] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.978241][ T9600] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 158.985708][ T9600] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 159.019593][ T9600] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 159.027818][ T9606] loop4: detected capacity change from 0 to 512 [ 159.028013][ T9600] System zones: 0-2, 18-18, 34-34 [ 159.041510][ T9600] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 159.060288][ T9600] EXT4-fs (loop0): 1 truncate cleaned up [ 159.062173][ T9606] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.067256][ T9600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.118745][ T9606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.134558][ T9606] ext4 filesystem being mounted at /517/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.189448][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.218587][ T9604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.219445][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2196'. [ 159.227141][ T9604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.236118][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2196'. [ 159.253588][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2196'. [ 159.290402][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2196'. [ 159.299534][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2196'. [ 159.309338][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2196'. [ 159.513382][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 159.521016][ T9629] loop1: detected capacity change from 0 to 1024 [ 159.522095][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 159.528139][ T9629] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.528368][ T9629] EXT4-fs: Mount option(s) incompatible with ext2 [ 159.610651][ T9629] x_tables: duplicate underflow at hook 1 [ 159.620942][ T9629] lo: entered promiscuous mode [ 159.625928][ T9629] lo: entered allmulticast mode [ 159.673718][ T9604] xt_hashlimit: size too large, truncated to 1048576 [ 159.726513][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.805583][ T9637] loop0: detected capacity change from 0 to 128 [ 159.812473][ T9637] vfat: Unknown parameter 'ÿÿ' [ 160.118985][ T9646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.128414][ T9646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.580576][ T9681] loop4: detected capacity change from 0 to 512 [ 160.605772][ T9681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 160.619142][ T9681] ext4 filesystem being mounted at /524/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.651315][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 160.730077][ T9695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.739181][ T9695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.751387][ T9695] loop4: detected capacity change from 0 to 1024 [ 160.773639][ T9695] EXT4-fs error (device loop4): __ext4_fill_super:5502: inode #2: comm syz.4.2226: casefold flag without casefold feature [ 160.786616][ T9695] EXT4-fs (loop4): get root inode failed [ 160.792294][ T9695] EXT4-fs (loop4): mount failed [ 160.872284][ T9689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.882267][ T9689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.903479][ T9701] tmpfs: Bad value for 'defcontext' [ 161.015218][ T9707] loop1: detected capacity change from 0 to 512 [ 161.021996][ T9707] EXT4-fs: Ignoring removed nobh option [ 161.030277][ T9707] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.2231: invalid indirect mapped block 256 (level 2) [ 161.044253][ T9707] EXT4-fs (loop1): 2 truncates cleaned up [ 161.050327][ T9707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.067334][ T9707] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2231: bg 0: block 5: invalid block bitmap [ 161.104700][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.169454][ T9714] lo speed is unknown, defaulting to 1000 [ 161.293330][ T9689] xt_hashlimit: size too large, truncated to 1048576 [ 161.351082][ T9723] loop0: detected capacity change from 0 to 128 [ 161.358063][ T9723] vfat: Unknown parameter 'ÿÿ' [ 161.535798][ T9736] loop4: detected capacity change from 0 to 8192 [ 161.571134][ T29] kauditd_printk_skb: 783 callbacks suppressed [ 161.571154][ T29] audit: type=1400 audit(1747857878.138:13651): avc: denied { read write } for pid=9737 comm="syz.4.2242" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 161.602015][ T29] audit: type=1400 audit(1747857878.138:13652): avc: denied { open } for pid=9737 comm="syz.4.2242" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 161.626398][ T29] audit: type=1400 audit(1747857878.138:13653): avc: denied { ioctl } for pid=9737 comm="syz.4.2242" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 161.651544][ T29] audit: type=1400 audit(1747857878.158:13654): avc: denied { name_bind } for pid=9737 comm="syz.4.2242" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 161.676923][ T9740] loop4: detected capacity change from 0 to 512 [ 161.683934][ T9740] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 161.706246][ T9740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.718873][ T29] audit: type=1400 audit(1747857878.298:13655): avc: denied { mount } for pid=9739 comm="syz.4.2243" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 161.718970][ T9740] ext4 filesystem being mounted at /533/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.764672][ T29] audit: type=1400 audit(1747857878.338:13656): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 161.785214][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.803486][ T29] audit: type=1400 audit(1747857878.378:13657): avc: denied { mount } for pid=9744 comm="syz.4.2244" name="/" dev="hugetlbfs" ino=24546 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 161.826847][ T29] audit: type=1400 audit(1747857878.378:13658): avc: denied { create } for pid=9744 comm="syz.4.2244" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=chr_file permissive=1 [ 161.847672][ T29] audit: type=1400 audit(1747857878.378:13659): avc: denied { mount } for pid=9744 comm="syz.4.2244" name="/" dev="ramfs" ino=24548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 161.870713][ T29] audit: type=1326 audit(1747857878.378:13660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.4.2244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd0e94e969 code=0x7ffc0000 [ 162.137064][ T9754] loop2: detected capacity change from 0 to 128 [ 162.171400][ T9754] vfat: Unknown parameter 'ÿÿ' [ 162.184890][ T9756] loop1: detected capacity change from 0 to 512 [ 162.221771][ T9756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.248347][ T9759] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 162.248667][ T9756] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.427622][ T9774] bond1 (unregistering): Released all slaves [ 162.542375][ T9780] tmpfs: Bad value for 'defcontext' [ 162.680811][ T9789] lo speed is unknown, defaulting to 1000 [ 163.004252][ T9799] __nla_validate_parse: 17 callbacks suppressed [ 163.004273][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2263'. [ 163.033178][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.069646][ T9809] loop4: detected capacity change from 0 to 512 [ 163.080992][ T9809] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.090843][ T9809] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 163.100991][ T9809] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 163.110593][ T9809] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 163.121274][ T9809] System zones: 0-2, 18-18, 34-34 [ 163.126927][ T9809] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 163.147054][ T9817] loop2: detected capacity change from 0 to 512 [ 163.154243][ T9817] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.163346][ T9817] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 163.172762][ T9809] EXT4-fs (loop4): 1 truncate cleaned up [ 163.174090][ T9817] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 163.179028][ T9809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.187834][ T9817] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 163.208158][ T9817] System zones: 0-2, 18-18, 34-34 [ 163.213737][ T9817] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 163.229337][ T9817] EXT4-fs (loop2): 1 truncate cleaned up [ 163.236465][ T9817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.581289][ T9841] FAULT_INJECTION: forcing a failure. [ 163.581289][ T9841] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 163.594728][ T9841] CPU: 0 UID: 0 PID: 9841 Comm: syz.3.2278 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 163.594759][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 163.594772][ T9841] Call Trace: [ 163.594779][ T9841] [ 163.594786][ T9841] __dump_stack+0x1d/0x30 [ 163.594810][ T9841] dump_stack_lvl+0xe8/0x140 [ 163.594901][ T9841] dump_stack+0x15/0x1b [ 163.594924][ T9841] should_fail_ex+0x265/0x280 [ 163.594970][ T9841] should_fail_alloc_page+0xf2/0x100 [ 163.595085][ T9841] __alloc_frozen_pages_noprof+0xff/0x360 [ 163.595124][ T9841] alloc_pages_mpol+0xb3/0x250 [ 163.595157][ T9841] alloc_migration_target_by_mpol+0x11b/0x240 [ 163.595196][ T9841] migrate_pages_batch+0x2e4/0x17d0 [ 163.595323][ T9841] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 163.595364][ T9841] ? __walk_page_range+0x324/0x340 [ 163.595395][ T9841] ? find_vma+0x6c/0xa0 [ 163.595427][ T9841] migrate_pages+0xf99/0x17f0 [ 163.595480][ T9841] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 163.595529][ T9841] __se_sys_mbind+0x975/0xac0 [ 163.595565][ T9841] __x64_sys_mbind+0x78/0x90 [ 163.595590][ T9841] x64_sys_call+0x14af/0x2fb0 [ 163.595672][ T9841] do_syscall_64+0xd0/0x1a0 [ 163.595704][ T9841] ? clear_bhb_loop+0x40/0x90 [ 163.595732][ T9841] ? clear_bhb_loop+0x40/0x90 [ 163.595761][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.595850][ T9841] RIP: 0033:0x7f1a0410e969 [ 163.595870][ T9841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.595894][ T9841] RSP: 002b:00007f1a02777038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 163.595920][ T9841] RAX: ffffffffffffffda RBX: 00007f1a04335fa0 RCX: 00007f1a0410e969 [ 163.595936][ T9841] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 163.595953][ T9841] RBP: 00007f1a02777090 R08: 0000000000000000 R09: 0000000000000002 [ 163.595968][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.595983][ T9841] R13: 0000000000000000 R14: 00007f1a04335fa0 R15: 00007ffde3c11e88 [ 163.596016][ T9841] [ 163.852994][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.871727][ T9849] loop4: detected capacity change from 0 to 512 [ 163.879441][ T9849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 163.904825][ T9849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.917499][ T9849] ext4 filesystem being mounted at /541/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.942035][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.951831][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.007350][ T9858] loop2: detected capacity change from 0 to 128 [ 164.015746][ T9858] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.028093][ T9858] ext4 filesystem being mounted at /441/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.064543][ T9847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.073802][ T9847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.085740][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.138604][ T9870] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2287'. [ 164.161588][ T9874] loop2: detected capacity change from 0 to 1024 [ 164.168878][ T9874] EXT4-fs: Ignoring removed orlov option [ 164.172798][ T9876] loop1: detected capacity change from 0 to 512 [ 164.174636][ T9874] EXT4-fs: Ignoring removed nomblk_io_submit option [ 164.194791][ T9874] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.205348][ T9876] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 164.219584][ T9876] ext4 filesystem being mounted at /487/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.248961][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 164.268550][ T9883] loop1: detected capacity change from 0 to 512 [ 164.285336][ T9883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 164.297933][ T9883] ext4 filesystem being mounted at /488/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.328498][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 164.697223][ T9890] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2293'. [ 164.720668][ T9892] FAULT_INJECTION: forcing a failure. [ 164.720668][ T9892] name failslab, interval 1, probability 0, space 0, times 0 [ 164.734167][ T9892] CPU: 0 UID: 0 PID: 9892 Comm: syz.3.2294 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 164.734205][ T9892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.734218][ T9892] Call Trace: [ 164.734224][ T9892] [ 164.734231][ T9892] __dump_stack+0x1d/0x30 [ 164.734253][ T9892] dump_stack_lvl+0xe8/0x140 [ 164.734313][ T9892] dump_stack+0x15/0x1b [ 164.734329][ T9892] should_fail_ex+0x265/0x280 [ 164.734371][ T9892] should_failslab+0x8c/0xb0 [ 164.734413][ T9892] kmem_cache_alloc_noprof+0x50/0x310 [ 164.734502][ T9892] ? getname_flags+0x80/0x3b0 [ 164.734537][ T9892] getname_flags+0x80/0x3b0 [ 164.734569][ T9892] user_path_at+0x28/0x130 [ 164.734589][ T9892] __se_sys_name_to_handle_at+0xfd/0x590 [ 164.734614][ T9892] ? fput+0x8f/0xc0 [ 164.734767][ T9892] ? ksys_write+0x16e/0x1a0 [ 164.734797][ T9892] __x64_sys_name_to_handle_at+0x67/0x80 [ 164.734824][ T9892] x64_sys_call+0x279f/0x2fb0 [ 164.734870][ T9892] do_syscall_64+0xd0/0x1a0 [ 164.734942][ T9892] ? clear_bhb_loop+0x40/0x90 [ 164.734962][ T9892] ? clear_bhb_loop+0x40/0x90 [ 164.734982][ T9892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.735072][ T9892] RIP: 0033:0x7f1a0410e969 [ 164.735086][ T9892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.735102][ T9892] RSP: 002b:00007f1a02777038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 164.735197][ T9892] RAX: ffffffffffffffda RBX: 00007f1a04335fa0 RCX: 00007f1a0410e969 [ 164.735208][ T9892] RDX: 0000200000004780 RSI: 0000200000004740 RDI: ffffffffffffffff [ 164.735220][ T9892] RBP: 00007f1a02777090 R08: 0000000000001200 R09: 0000000000000000 [ 164.735266][ T9892] R10: 00002000000047c0 R11: 0000000000000246 R12: 0000000000000001 [ 164.735278][ T9892] R13: 0000000000000001 R14: 00007f1a04335fa0 R15: 00007ffde3c11e88 [ 164.735296][ T9892] [ 164.992064][ T9874] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.035260][ T9907] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 165.108417][ T9912] tmpfs: Bad value for 'defcontext' [ 165.120067][ T9912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2303'. [ 165.154637][ T9914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.163421][ T9914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.177471][ T9914] loop0: detected capacity change from 0 to 1024 [ 165.239376][ T9914] EXT4-fs error (device loop0): __ext4_fill_super:5502: inode #2: comm syz.0.2304: casefold flag without casefold feature [ 165.253434][ T9914] EXT4-fs (loop0): get root inode failed [ 165.259120][ T9914] EXT4-fs (loop0): mount failed [ 165.465134][ T9933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2310'. [ 165.489703][ T9937] loop2: detected capacity change from 0 to 128 [ 165.497161][ T9937] vfat: Unknown parameter 'ÿÿ' [ 165.540750][ T9939] 9pnet_fd: Insufficient options for proto=fd [ 165.674235][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2315'. [ 165.756899][ T3389] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 165.764622][ T9955] loop2: detected capacity change from 0 to 1024 [ 165.764768][ T3389] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 165.846398][ T9955] x_tables: duplicate underflow at hook 1 [ 165.859300][ T9955] lo: entered promiscuous mode [ 165.864259][ T9955] lo: entered allmulticast mode [ 165.871459][ T9964] FAULT_INJECTION: forcing a failure. [ 165.871459][ T9964] name failslab, interval 1, probability 0, space 0, times 0 [ 165.884185][ T9964] CPU: 1 UID: 0 PID: 9964 Comm: syz.4.2322 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 165.884215][ T9964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 165.884254][ T9964] Call Trace: [ 165.884262][ T9964] [ 165.884318][ T9964] __dump_stack+0x1d/0x30 [ 165.884344][ T9964] dump_stack_lvl+0xe8/0x140 [ 165.884370][ T9964] dump_stack+0x15/0x1b [ 165.884390][ T9964] should_fail_ex+0x265/0x280 [ 165.884431][ T9964] should_failslab+0x8c/0xb0 [ 165.884592][ T9964] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 165.884620][ T9964] ? shmem_alloc_inode+0x34/0x50 [ 165.884662][ T9964] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 165.884765][ T9964] shmem_alloc_inode+0x34/0x50 [ 165.884805][ T9964] alloc_inode+0x3d/0x170 [ 165.884850][ T9964] new_inode+0x1d/0xe0 [ 165.884890][ T9964] shmem_get_inode+0x244/0x750 [ 165.884986][ T9964] __shmem_file_setup+0x122/0x1f0 [ 165.885023][ T9964] shmem_file_setup+0x3b/0x50 [ 165.885133][ T9964] __se_sys_memfd_create+0x2c3/0x590 [ 165.885168][ T9964] __x64_sys_memfd_create+0x31/0x40 [ 165.885201][ T9964] x64_sys_call+0x122f/0x2fb0 [ 165.885223][ T9964] do_syscall_64+0xd0/0x1a0 [ 165.885302][ T9964] ? clear_bhb_loop+0x40/0x90 [ 165.885384][ T9964] ? clear_bhb_loop+0x40/0x90 [ 165.885413][ T9964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.885445][ T9964] RIP: 0033:0x7efd0e94e969 [ 165.885538][ T9964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.885616][ T9964] RSP: 002b:00007efd0cfb6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 165.885641][ T9964] RAX: ffffffffffffffda RBX: 000000000000044a RCX: 00007efd0e94e969 [ 165.885658][ T9964] RDX: 00007efd0cfb6ef0 RSI: 0000000000000000 RDI: 00007efd0e9d1444 [ 165.885675][ T9964] RBP: 0000200000000400 R08: 00007efd0cfb6bb7 R09: 00007efd0cfb6e40 [ 165.885719][ T9964] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 165.885734][ T9964] R13: 00007efd0cfb6ef0 R14: 00007efd0cfb6eb0 R15: 0000200000000040 [ 165.885756][ T9964] [ 166.106228][ T9955] tmpfs: Bad value for 'mpol' [ 166.118761][ T9968] loop4: detected capacity change from 0 to 128 [ 166.125491][ T9968] vfat: Unknown parameter 'ÿÿ' [ 166.296655][ T9977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2327'. [ 166.350887][ T9986] loop4: detected capacity change from 0 to 512 [ 166.364772][ T9986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 166.377601][ T9986] ext4 filesystem being mounted at /553/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.408737][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 166.435825][ T9992] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2332'. [ 166.462971][ T9996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.471763][ T9996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.485422][ T9996] loop1: detected capacity change from 0 to 1024 [ 166.503433][ T9996] EXT4-fs error (device loop1): __ext4_fill_super:5502: inode #2: comm syz.1.2333: casefold flag without casefold feature [ 166.516504][ T9996] EXT4-fs (loop1): get root inode failed [ 166.522191][ T9996] EXT4-fs (loop1): mount failed [ 166.646987][ T9994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.655731][ T9994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.688005][ T29] kauditd_printk_skb: 800 callbacks suppressed [ 166.688066][ T29] audit: type=1326 audit(1747857883.258:14461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 166.693098][T10000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2334'. [ 166.695998][ T29] audit: type=1326 audit(1747857883.258:14462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 166.751095][ T29] audit: type=1326 audit(1747857883.258:14463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 166.755186][T10002] loop3: detected capacity change from 0 to 128 [ 166.775328][ T29] audit: type=1326 audit(1747857883.258:14464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 166.783969][T10002] vfat: Unknown parameter 'ÿÿ' [ 166.805195][ T29] audit: type=1326 audit(1747857883.258:14465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 166.817759][T10000] netlink: 'syz.0.2334': attribute type 4 has an invalid length. [ 166.833407][ T29] audit: type=1326 audit(1747857883.258:14466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 166.864839][ T29] audit: type=1326 audit(1747857883.258:14467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 166.888372][ T29] audit: type=1326 audit(1747857883.258:14468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 166.912631][ T29] audit: type=1326 audit(1747857883.258:14469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 166.936150][ T29] audit: type=1326 audit(1747857883.258:14470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9999 comm="syz.0.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 167.125307][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2339'. [ 167.159218][ T9994] xt_hashlimit: size too large, truncated to 1048576 [ 167.184831][T10022] loop2: detected capacity change from 0 to 512 [ 167.216408][T10022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 167.235732][T10022] ext4 filesystem being mounted at /459/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.272595][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 167.453922][T10040] xt_hashlimit: max too large, truncated to 1048576 [ 167.594966][T10046] tmpfs: Bad value for 'defcontext' [ 167.665068][T10048] loop3: detected capacity change from 0 to 8192 [ 167.912258][T10048] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 167.920705][T10048] FAT-fs (loop3): Filesystem has been set read-only [ 167.934488][T10049] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 168.222886][T10082] FAULT_INJECTION: forcing a failure. [ 168.222886][T10082] name failslab, interval 1, probability 0, space 0, times 0 [ 168.235623][T10082] CPU: 0 UID: 0 PID: 10082 Comm: syz.2.2364 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 168.235662][T10082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.235741][T10082] Call Trace: [ 168.235749][T10082] [ 168.235759][T10082] __dump_stack+0x1d/0x30 [ 168.235790][T10082] dump_stack_lvl+0xe8/0x140 [ 168.235816][T10082] dump_stack+0x15/0x1b [ 168.235847][T10082] should_fail_ex+0x265/0x280 [ 168.235893][T10082] should_failslab+0x8c/0xb0 [ 168.235934][T10082] __kmalloc_noprof+0xa5/0x3e0 [ 168.236004][T10082] ? kernfs_fop_write_iter+0xe1/0x2d0 [ 168.236039][T10082] kernfs_fop_write_iter+0xe1/0x2d0 [ 168.236077][T10082] ? __import_iovec+0x428/0x540 [ 168.236109][T10082] do_iter_readv_writev+0x421/0x4c0 [ 168.236206][T10082] vfs_writev+0x2c9/0x870 [ 168.236238][T10082] ? mutex_lock+0xd/0x30 [ 168.236258][T10082] do_writev+0xe7/0x210 [ 168.236281][T10082] __x64_sys_writev+0x45/0x50 [ 168.236380][T10082] x64_sys_call+0x2006/0x2fb0 [ 168.236409][T10082] do_syscall_64+0xd0/0x1a0 [ 168.236436][T10082] ? clear_bhb_loop+0x40/0x90 [ 168.236458][T10082] ? clear_bhb_loop+0x40/0x90 [ 168.236574][T10082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.236611][T10082] RIP: 0033:0x7f4bae95e969 [ 168.236644][T10082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.236669][T10082] RSP: 002b:00007f4bacfc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 168.236745][T10082] RAX: ffffffffffffffda RBX: 00007f4baeb85fa0 RCX: 00007f4bae95e969 [ 168.236759][T10082] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000003 [ 168.236777][T10082] RBP: 00007f4bacfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.236790][T10082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.236803][T10082] R13: 0000000000000000 R14: 00007f4baeb85fa0 R15: 00007ffd6d7c50c8 [ 168.236885][T10082] [ 168.466702][T10090] wireguard0: entered promiscuous mode [ 168.472234][T10090] wireguard0: entered allmulticast mode [ 168.484069][T10093] __nla_validate_parse: 2 callbacks suppressed [ 168.484087][T10093] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2368'. [ 168.505726][T10089] wireguard0: entered promiscuous mode [ 168.511231][T10089] wireguard0: entered allmulticast mode [ 168.788752][T10105] tmpfs: Bad value for 'defcontext' [ 168.798535][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2372'. [ 168.963438][T10115] loop1: detected capacity change from 0 to 128 [ 168.980519][T10118] loop4: detected capacity change from 0 to 512 [ 168.993654][T10115] bio_check_eod: 104 callbacks suppressed [ 168.993675][T10115] syz.1.2377: attempt to access beyond end of device [ 168.993675][T10115] loop1: rw=0, sector=121, nr_sectors = 120 limit=128 [ 168.996339][T10118] EXT4-fs (loop4): 1 orphan inode deleted [ 169.019245][T10118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.020042][ T31] kworker/u8:1: attempt to access beyond end of device [ 169.020042][ T31] loop1: rw=1, sector=241, nr_sectors = 800 limit=128 [ 169.036465][ T3334] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 1 [ 169.047368][T10118] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.073738][T10118] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.2378: corrupted inode contents [ 169.081883][T10124] loop1: detected capacity change from 0 to 512 [ 169.087232][T10118] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #16: comm syz.4.2378: mark_inode_dirty error [ 169.103623][T10118] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.2378: corrupted inode contents [ 169.114896][T10124] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.115721][T10118] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2991: inode #16: comm syz.4.2378: mark_inode_dirty error [ 169.128838][T10124] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.141621][T10118] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2994: inode #16: comm syz.4.2378: mark inode dirty (error -117) [ 169.164490][T10118] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117) [ 169.223296][T10118] binfmt_misc: register: failed to install interpreter file ./file0 [ 169.559868][T10137] loop2: detected capacity change from 0 to 128 [ 169.566466][T10137] vfat: Unknown parameter 'ÿÿ' [ 169.818256][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.908870][T10152] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2389'. [ 169.919088][T10150] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2389'. [ 169.936651][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.227835][T10163] lo speed is unknown, defaulting to 1000 [ 170.747634][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.757552][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.784965][T10176] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 170.795461][T10174] loop3: detected capacity change from 0 to 1024 [ 170.813721][T10174] EXT4-fs error (device loop3): __ext4_fill_super:5502: inode #2: comm syz.3.2398: casefold flag without casefold feature [ 170.879132][T10174] EXT4-fs (loop3): get root inode failed [ 170.884985][T10174] EXT4-fs (loop3): mount failed [ 170.939591][T10186] tmpfs: Bad value for 'defcontext' [ 170.949523][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2402'. [ 171.047734][T10196] loop1: detected capacity change from 0 to 1024 [ 171.055295][T10196] EXT4-fs: Ignoring removed i_version option [ 171.061805][T10196] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.086207][T10196] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.2407: Invalid block bitmap block 0 in block_group 0 [ 171.104449][T10196] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2407: Failed to acquire dquot type 0 [ 171.117801][T10196] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.2407: Freeing blocks not in datazone - block = 0, count = 4096 [ 171.132226][T10196] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2407: Invalid inode bitmap blk 0 in block_group 0 [ 171.146146][T10196] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 171.150544][T10188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.156400][ T3334] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:6: Failed to release dquot type 0 [ 171.174771][T10188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.184085][T10196] EXT4-fs (loop1): 1 orphan inode deleted [ 171.190265][T10196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.220235][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.343978][T10206] lo speed is unknown, defaulting to 1000 [ 171.580177][T10217] syzkaller1: entered promiscuous mode [ 171.585812][T10217] syzkaller1: entered allmulticast mode [ 171.744507][ T29] kauditd_printk_skb: 808 callbacks suppressed [ 171.744524][ T29] audit: type=1400 audit(1747857888.318:15275): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 171.777487][ T29] audit: type=1326 audit(1747857888.348:15276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10219 comm="syz.0.2415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 171.806548][T10220] tmpfs: Bad value for 'defcontext' [ 171.816738][T10220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2415'. [ 171.817862][T10224] loop3: detected capacity change from 0 to 1024 [ 171.832972][T10224] EXT4-fs: Ignoring removed i_version option [ 171.839347][ T29] audit: type=1326 audit(1747857888.348:15277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0410e969 code=0x7ffc0000 [ 171.851729][T10224] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.863930][ T29] audit: type=1326 audit(1747857888.348:15278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a0410e969 code=0x7ffc0000 [ 171.889145][T10224] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.2417: Invalid block bitmap block 0 in block_group 0 [ 171.897804][ T29] audit: type=1326 audit(1747857888.348:15279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0410e969 code=0x7ffc0000 [ 171.911961][T10224] Quota error (device loop3): write_blk: dquota write failed [ 171.934882][ T29] audit: type=1326 audit(1747857888.348:15280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0410e969 code=0x7ffc0000 [ 171.941410][T10224] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 171.965799][ T29] audit: type=1326 audit(1747857888.348:15281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a0410e969 code=0x7ffc0000 [ 171.977405][T10224] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2417: Failed to acquire dquot type 0 [ 171.999296][ T29] audit: type=1326 audit(1747857888.348:15282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10221 comm="syz.3.2416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a0410e969 code=0x7ffc0000 [ 172.011139][T10224] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.2417: Freeing blocks not in datazone - block = 0, count = 4096 [ 172.047262][T10224] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.2417: Invalid inode bitmap blk 0 in block_group 0 [ 172.061145][T10224] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 172.083792][T10224] EXT4-fs (loop3): 1 orphan inode deleted [ 172.089928][T10224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.102699][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:1: Failed to release dquot type 0 [ 172.133579][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.173778][T10227] loop0: detected capacity change from 0 to 8192 [ 172.295740][T10246] netlink: 'syz.3.2427': attribute type 1 has an invalid length. [ 172.328400][T10246] loop3: detected capacity change from 0 to 1024 [ 172.384643][T10246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.399821][T10248] tmpfs: Bad value for 'defcontext' [ 172.428789][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2428'. [ 172.447141][T10246] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.521751][T10246] EXT4-fs error (device loop3): ext4_lookup:1789: inode #12: comm syz.3.2427: iget: bad extended attribute block 1543503872 [ 172.755655][T10276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.765024][T10276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.776924][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.786103][T10276] loop4: detected capacity change from 0 to 1024 [ 172.793588][T10276] EXT4-fs: Ignoring removed oldalloc option [ 172.799593][T10276] EXT4-fs: Ignoring removed orlov option [ 172.805406][T10276] EXT4-fs: Ignoring removed mblk_io_submit option [ 172.812345][T10276] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 172.954747][T10270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.963451][T10270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.372871][T10270] xt_hashlimit: size too large, truncated to 1048576 [ 173.519893][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2440'. [ 173.545217][T10297] lo speed is unknown, defaulting to 1000 [ 173.586187][T10300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2443'. [ 173.721447][T10304] loop7: detected capacity change from 0 to 7 [ 174.279826][T10337] loop7: detected capacity change from 0 to 7 [ 174.316741][T10323] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2451'. [ 174.325907][T10323] net_ratelimit: 588 callbacks suppressed [ 174.325923][T10323] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 174.405289][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.414513][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.448483][T10345] lo speed is unknown, defaulting to 1000 [ 174.454705][T10341] loop3: detected capacity change from 0 to 1024 [ 174.486515][T10341] EXT4-fs error (device loop3): __ext4_fill_super:5502: inode #2: comm syz.3.2459: casefold flag without casefold feature [ 174.515398][T10341] EXT4-fs (loop3): get root inode failed [ 174.521303][T10341] EXT4-fs (loop3): mount failed [ 174.598275][T10357] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2464'. [ 174.608390][T10354] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2464'. [ 174.792871][T10366] tmpfs: Bad value for 'defcontext' [ 174.804381][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2468'. [ 174.875560][T10370] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 174.920707][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2469'. [ 175.183327][T10399] loop0: detected capacity change from 0 to 8192 [ 175.387723][T10405] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2484'. [ 175.414673][T10399] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 175.422403][T10399] FAT-fs (loop0): Filesystem has been set read-only [ 175.498129][T10411] loop0: detected capacity change from 0 to 128 [ 175.506443][T10411] vfat: Unknown parameter 'ÿÿ' [ 175.510827][T10409] loop1: detected capacity change from 0 to 8192 [ 175.756934][T10420] lo speed is unknown, defaulting to 1000 [ 175.782683][T10401] veth0_vlan: entered allmulticast mode [ 175.812248][T10401] usb usb2: usbfs: process 10401 (syz.3.2483) did not claim interface 0 before use [ 175.828122][T10401] vhci_hcd: invalid port number 129 [ 175.833505][T10401] vhci_hcd: default hub control req: 0212 v0f01 i0081 l0 [ 175.906723][T10425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.918369][T10425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.932452][T10425] loop4: detected capacity change from 0 to 1024 [ 175.971346][T10425] EXT4-fs error (device loop4): __ext4_fill_super:5502: inode #2: comm syz.4.2493: casefold flag without casefold feature [ 176.024876][T10435] loop3: detected capacity change from 0 to 8192 [ 176.030965][T10425] EXT4-fs (loop4): get root inode failed [ 176.037202][T10425] EXT4-fs (loop4): mount failed [ 176.072995][T10437] loop0: detected capacity change from 0 to 8192 [ 176.344796][T10437] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 176.352458][T10437] FAT-fs (loop0): Filesystem has been set read-only [ 176.465940][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2498'. [ 176.498021][T10455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.506679][T10455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.706162][T10466] tmpfs: Bad value for 'defcontext' [ 176.716355][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2508'. [ 176.754298][T10468] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 176.803568][ T29] kauditd_printk_skb: 923 callbacks suppressed [ 176.803586][ T29] audit: type=1326 audit(1747857893.378:16205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bae95e969 code=0x7ffc0000 [ 176.834054][ T29] audit: type=1400 audit(1747857893.378:16206): avc: denied { create } for pid=10469 comm="syz.4.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.854058][ T29] audit: type=1400 audit(1747857893.378:16207): avc: denied { write } for pid=10469 comm="syz.4.2510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 176.874074][ T29] audit: type=1326 audit(1747857893.378:16208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bae95e969 code=0x7ffc0000 [ 176.897781][ T29] audit: type=1326 audit(1747857893.378:16209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bae95e969 code=0x7ffc0000 [ 176.921604][ T29] audit: type=1326 audit(1747857893.378:16210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bae95e969 code=0x7ffc0000 [ 176.945227][ T29] audit: type=1326 audit(1747857893.378:16211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bae95e969 code=0x7ffc0000 [ 176.968931][ T29] audit: type=1326 audit(1747857893.378:16212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bae95e969 code=0x7ffc0000 [ 176.992545][ T29] audit: type=1326 audit(1747857893.378:16213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4bae95e969 code=0x7ffc0000 [ 177.016262][ T29] audit: type=1326 audit(1747857893.378:16214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10473 comm="syz.2.2512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4bae95e969 code=0x7ffc0000 [ 177.134906][T10480] loop3: detected capacity change from 0 to 8192 [ 177.426610][T10499] loop0: detected capacity change from 0 to 512 [ 177.439355][T10480] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 177.447794][T10480] FAT-fs (loop3): Filesystem has been set read-only [ 177.459732][T10499] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 177.474633][T10499] ext4 filesystem being mounted at /432/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.512639][T10510] tmpfs: Bad value for 'defcontext' [ 177.580542][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 177.632180][T10522] loop3: detected capacity change from 0 to 512 [ 177.636143][T10523] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 177.645878][T10522] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 177.654996][T10522] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 177.683313][T10522] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 177.695146][T10523] loop4: detected capacity change from 0 to 8192 [ 177.702641][T10527] tmpfs: Bad value for 'defcontext' [ 177.703858][T10523] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.720628][T10522] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 177.728782][T10522] System zones: 0-2, 18-18, 34-34 [ 177.735749][T10522] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 177.763610][T10522] EXT4-fs (loop3): 1 truncate cleaned up [ 177.769683][T10522] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.817001][T10531] loop1: detected capacity change from 0 to 1024 [ 177.836500][T10531] EXT4-fs: Ignoring removed orlov option [ 177.842282][T10531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 177.860806][T10539] loop4: detected capacity change from 0 to 128 [ 177.868356][T10539] vfat: Unknown parameter 'ÿÿ' [ 177.875069][T10531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.915845][T10546] loop4: detected capacity change from 0 to 512 [ 177.934739][T10543] loop2: detected capacity change from 0 to 8192 [ 177.955675][T10546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 177.968339][T10546] ext4 filesystem being mounted at /596/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.995390][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 178.308670][T10557] lo speed is unknown, defaulting to 1000 [ 178.406653][T10557] chnl_net:caif_netlink_parms(): no params data found [ 178.425878][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.471415][T10557] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.478601][T10557] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.485939][T10557] bridge_slave_0: entered allmulticast mode [ 178.493458][T10557] bridge_slave_0: entered promiscuous mode [ 178.500702][T10557] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.507896][T10557] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.515153][T10557] bridge_slave_1: entered allmulticast mode [ 178.522216][T10557] bridge_slave_1: entered promiscuous mode [ 178.543302][T10557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.554801][T10557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.576801][T10557] team0: Port device team_slave_0 added [ 178.584567][T10557] team0: Port device team_slave_1 added [ 178.603278][T10557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.610283][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.637130][T10557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.648569][T10557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.649952][T10531] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.655559][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.655620][T10557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.723551][T10557] hsr_slave_0: entered promiscuous mode [ 178.729661][T10557] hsr_slave_1: entered promiscuous mode [ 178.840472][T10557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.880248][T10557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.915713][T10587] __nla_validate_parse: 4 callbacks suppressed [ 178.915740][T10587] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2552'. [ 178.931812][T10587] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2552'. [ 178.953542][T10557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.010012][T10557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.028458][T10596] loop1: detected capacity change from 0 to 8192 [ 179.107826][T10557] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.117427][T10557] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.127796][T10557] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.137699][T10557] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.158993][T10557] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.166174][T10557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.173763][T10557] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.180817][T10557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.218128][T10557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.231456][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.239636][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.254864][T10557] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.267171][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.274406][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.286458][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.293600][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.303661][T10596] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 179.311287][T10596] FAT-fs (loop1): Filesystem has been set read-only [ 179.380934][T10603] loop3: detected capacity change from 0 to 1024 [ 179.388205][T10603] EXT4-fs: Ignoring removed orlov option [ 179.393962][T10603] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.422039][T10557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.433477][T10603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.493156][T10619] loop1: detected capacity change from 0 to 1024 [ 179.500198][T10619] EXT4-fs: Ignoring removed orlov option [ 179.506013][T10619] EXT4-fs: Ignoring removed nomblk_io_submit option [ 179.535969][T10619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.575207][T10557] veth0_vlan: entered promiscuous mode [ 179.583437][T10557] veth1_vlan: entered promiscuous mode [ 179.599719][T10557] veth0_macvtap: entered promiscuous mode [ 179.608366][T10557] veth1_macvtap: entered promiscuous mode [ 179.619496][T10557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.628435][T10557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.637777][T10557] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.646632][T10557] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.655523][T10557] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.665202][T10557] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.731317][T10633] loop0: detected capacity change from 0 to 8192 [ 179.846623][T10648] loop4: detected capacity change from 0 to 8192 [ 179.944666][T10633] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 179.952298][T10633] FAT-fs (loop0): Filesystem has been set read-only [ 180.058064][T10648] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 180.065721][T10648] FAT-fs (loop4): Filesystem has been set read-only [ 180.202779][T10658] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 180.224225][T10603] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.300414][T10662] lo speed is unknown, defaulting to 1000 [ 180.327148][T10619] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.415224][T10671] loop1: detected capacity change from 0 to 512 [ 180.430354][T10671] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 180.439635][T10671] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 180.449549][T10674] veth0_vlan: entered allmulticast mode [ 180.467604][T10671] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 180.477984][T10671] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 180.486127][T10671] System zones: 0-2, 18-18, 34-34 [ 180.493548][T10671] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 180.525708][T10671] EXT4-fs (loop1): 1 truncate cleaned up [ 180.549581][T10671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.632005][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.632228][T10665] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2573'. [ 180.669545][T10688] loop1: detected capacity change from 0 to 1024 [ 180.685757][T10688] EXT4-fs: Ignoring removed orlov option [ 180.691482][T10688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 180.711916][T10688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.763431][T10692] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2584'. [ 181.045040][T10714] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2592'. [ 181.054591][T10714] tipc: Started in network mode [ 181.059572][T10714] tipc: Node identity 7, cluster identity 4711 [ 181.065895][T10714] tipc: Node number set to 7 [ 181.116638][T10723] loop4: detected capacity change from 0 to 128 [ 181.123397][T10723] vfat: Unknown parameter 'ÿÿ' [ 181.265348][T10733] tmpfs: Bad value for 'defcontext' [ 181.286767][T10733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2601'. [ 181.357412][T10731] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 181.444348][ T2612] bond0 (unregistering): Released all slaves [ 181.484029][ T2612] tipc: Left network mode [ 181.505807][T10688] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.531536][T10742] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2605'. [ 181.549680][ T2612] veth1_macvtap: left promiscuous mode [ 181.556544][ T2612] veth0_macvtap: left promiscuous mode [ 181.562156][ T2612] veth1_vlan: left promiscuous mode [ 181.567673][ T2612] veth0_vlan: left promiscuous mode [ 181.787320][T10767] loop1: detected capacity change from 0 to 512 [ 181.795262][T10767] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.796937][T10744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.804422][T10767] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 181.812854][ T29] kauditd_printk_skb: 784 callbacks suppressed [ 181.812868][ T29] audit: type=1400 audit(1747857898.368:16999): avc: denied { write } for pid=10743 comm="syz.4.2604" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.851176][ T29] audit: type=1400 audit(1747857898.368:17000): avc: denied { ioctl } for pid=10743 comm="syz.4.2604" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 181.853627][T10744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.885381][T10767] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 181.901750][T10767] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 181.904594][T10771] loop0: detected capacity change from 0 to 1024 [ 181.910191][T10767] System zones: [ 181.916706][T10771] EXT4-fs: Ignoring removed orlov option [ 181.916742][T10771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 181.933076][T10767] 0-2, 18-18, 34-34 [ 181.934723][T10771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.950392][T10767] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 181.966334][T10767] EXT4-fs (loop1): 1 truncate cleaned up [ 181.972543][T10767] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.007908][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.098167][ T29] audit: type=1400 audit(1747857898.668:17001): avc: denied { write } for pid=10779 comm="syz.2.2619" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 182.124480][T10780] FAULT_INJECTION: forcing a failure. [ 182.124480][T10780] name failslab, interval 1, probability 0, space 0, times 0 [ 182.124898][ T29] audit: type=1400 audit(1747857898.668:17002): avc: denied { open } for pid=10779 comm="syz.2.2619" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 182.137187][T10780] CPU: 1 UID: 0 PID: 10780 Comm: +}[@ Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 182.137219][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.137313][T10780] Call Trace: [ 182.137322][T10780] [ 182.137334][T10780] __dump_stack+0x1d/0x30 [ 182.137366][T10780] dump_stack_lvl+0xe8/0x140 [ 182.137395][T10780] dump_stack+0x15/0x1b [ 182.137542][T10780] should_fail_ex+0x265/0x280 [ 182.137597][T10780] should_failslab+0x8c/0xb0 [ 182.137683][T10780] __kmalloc_noprof+0xa5/0x3e0 [ 182.137711][T10780] ? blk_rq_map_user_iov+0x442/0x14a0 [ 182.137744][T10780] blk_rq_map_user_iov+0x442/0x14a0 [ 182.137776][T10780] ? blk_mq_get_tag+0x4f9/0x570 [ 182.137827][T10780] ? __blk_mq_alloc_requests+0xd86/0xe30 [ 182.138013][T10780] blk_rq_map_user_io+0x18f/0x260 [ 182.138044][T10780] ? __rcu_read_unlock+0x4f/0x70 [ 182.138082][T10780] ? sg_link_reserve+0x117/0x140 [ 182.138128][T10780] sg_common_write+0xb06/0xc30 [ 182.138181][T10780] sg_write+0x6b5/0x750 [ 182.138241][T10780] vfs_writev+0x3eb/0x870 [ 182.138346][T10780] ? __pfx_sg_write+0x10/0x10 [ 182.138397][T10780] do_writev+0xe7/0x210 [ 182.138424][T10780] __x64_sys_writev+0x45/0x50 [ 182.138496][T10780] x64_sys_call+0x2006/0x2fb0 [ 182.138526][T10780] do_syscall_64+0xd0/0x1a0 [ 182.138573][T10780] ? clear_bhb_loop+0x40/0x90 [ 182.138603][T10780] ? clear_bhb_loop+0x40/0x90 [ 182.138634][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.138663][T10780] RIP: 0033:0x7f4bae95e969 [ 182.138684][T10780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.138709][T10780] RSP: 002b:00007f4bacfc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 182.138798][T10780] RAX: ffffffffffffffda RBX: 00007f4baeb85fa0 RCX: 00007f4bae95e969 [ 182.138854][T10780] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 182.138871][T10780] RBP: 00007f4bacfc7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.138888][T10780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.138905][T10780] R13: 0000000000000000 R14: 00007f4baeb85fa0 R15: 00007ffd6d7c50c8 [ 182.138968][T10780] [ 182.386509][ T29] audit: type=1400 audit(1747857898.698:17003): avc: denied { ioctl } for pid=10779 comm="+}[@" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 182.463196][ T29] audit: type=1400 audit(1747857899.038:17004): avc: denied { execmem } for pid=10793 comm="syz.3.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 182.513654][ T29] audit: type=1326 audit(1747857899.088:17005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10795 comm="syz.1.2625" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04d677e969 code=0x0 [ 182.610470][ T29] audit: type=1400 audit(1747857899.178:17006): avc: denied { write } for pid=10793 comm="syz.3.2624" name="rt_acct" dev="proc" ino=4026532534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 182.633633][ T29] audit: type=1400 audit(1747857899.178:17007): avc: denied { create } for pid=10793 comm="syz.3.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.653456][ T29] audit: type=1400 audit(1747857899.178:17008): avc: denied { write } for pid=10793 comm="syz.3.2624" path="socket:[28623]" dev="sockfs" ino=28623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 182.741505][T10771] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.897397][T10805] loop0: detected capacity change from 0 to 512 [ 182.904434][T10805] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 182.913668][T10805] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 182.923590][T10805] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 182.933292][T10805] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 182.941365][T10805] System zones: 0-2, 18-18, 34-34 [ 182.946894][T10805] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 182.961803][T10805] EXT4-fs (loop0): 1 truncate cleaned up [ 182.968025][T10805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.993982][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.010661][T10808] loop0: detected capacity change from 0 to 128 [ 183.017258][T10808] vfat: Unknown parameter 'ÿÿ' [ 183.139486][T10823] loop0: detected capacity change from 0 to 1024 [ 183.148103][T10823] EXT4-fs: Ignoring removed orlov option [ 183.153930][T10823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.165998][T10823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.218496][T10834] loop2: detected capacity change from 0 to 128 [ 183.225198][T10834] vfat: Unknown parameter 'ÿÿ' [ 183.275964][T10838] loop4: detected capacity change from 0 to 8192 [ 183.493610][T10858] loop1: detected capacity change from 0 to 8192 [ 183.520375][T10838] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 183.528090][T10838] FAT-fs (loop4): Filesystem has been set read-only [ 183.669811][T10866] loop4: detected capacity change from 0 to 128 [ 183.676675][T10866] vfat: Unknown parameter 'ÿÿ' [ 183.715234][T10858] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 183.723013][T10858] FAT-fs (loop1): Filesystem has been set read-only [ 183.733152][T10864] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 183.979494][T10823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.117159][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2662'. [ 184.185679][T10894] loop4: detected capacity change from 0 to 8192 [ 184.261506][T10899] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 184.314343][T10903] loop7: detected capacity change from 0 to 7 [ 184.915733][T10918] lo speed is unknown, defaulting to 1000 [ 185.040860][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2676'. [ 185.070490][T10925] loop7: detected capacity change from 0 to 7 [ 185.125257][T10929] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 185.251307][T10940] loop4: detected capacity change from 0 to 8192 [ 185.306140][T10950] lo speed is unknown, defaulting to 1000 [ 185.440284][T10942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.449922][T10942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.472968][T10957] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 185.625207][T10940] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 185.633935][T10940] FAT-fs (loop4): Filesystem has been set read-only [ 185.644230][T10953] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 185.670399][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2695'. [ 185.764442][T10977] tmpfs: Bad value for 'defcontext' [ 185.777965][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2702'. [ 185.799527][T10980] loop1: detected capacity change from 0 to 8192 [ 185.874160][T10987] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 185.925122][T10992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.947046][T10992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.130897][T11007] loop4: detected capacity change from 0 to 8192 [ 186.160328][T10980] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 186.167979][T10980] FAT-fs (loop1): Filesystem has been set read-only [ 186.246589][T11013] loop7: detected capacity change from 0 to 7 [ 186.283373][T11016] loop2: detected capacity change from 0 to 128 [ 186.290311][T11016] vfat: Unknown parameter 'ÿÿ' [ 186.354049][T11019] loop1: detected capacity change from 0 to 8192 [ 186.366110][T11007] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 186.373814][T11007] FAT-fs (loop4): Filesystem has been set read-only [ 186.614415][T11041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.641816][T11034] loop0: detected capacity change from 0 to 8192 [ 186.655657][T11041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.744586][T11024] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 186.752342][T11024] FAT-fs (loop1): Filesystem has been set read-only [ 186.777395][T11051] loop2: detected capacity change from 0 to 8192 [ 186.973235][T11051] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 186.980866][T11051] FAT-fs (loop2): Filesystem has been set read-only [ 187.055500][ T29] kauditd_printk_skb: 578 callbacks suppressed [ 187.055523][ T29] audit: type=1400 audit(1747857903.628:17587): avc: denied { read write } for pid=3321 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.089218][ T29] audit: type=1400 audit(1747857903.658:17588): avc: denied { open } for pid=3321 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.114559][ T29] audit: type=1400 audit(1747857903.658:17589): avc: denied { ioctl } for pid=3321 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.140588][ T29] audit: type=1400 audit(1747857903.658:17590): avc: denied { map_create } for pid=11054 comm="syz.2.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 187.160826][ T29] audit: type=1400 audit(1747857903.658:17591): avc: denied { map_read map_write } for pid=11054 comm="syz.2.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 187.180914][ T29] audit: type=1400 audit(1747857903.658:17592): avc: denied { prog_load } for pid=11054 comm="syz.2.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 187.201032][ T29] audit: type=1400 audit(1747857903.658:17593): avc: denied { bpf } for pid=11054 comm="syz.2.2734" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 187.221822][ T29] audit: type=1400 audit(1747857903.658:17594): avc: denied { perfmon } for pid=11054 comm="syz.2.2734" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 187.252565][ T29] audit: type=1400 audit(1747857903.738:17595): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 187.273431][ T29] audit: type=1400 audit(1747857903.738:17596): avc: denied { prog_run } for pid=11054 comm="syz.2.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 187.460756][T11070] loop7: detected capacity change from 0 to 7 [ 187.561161][T11084] loop0: detected capacity change from 0 to 8192 [ 187.670757][T11091] loop2: detected capacity change from 0 to 512 [ 187.685529][T11091] EXT4-fs: journaled quota format not specified [ 187.867387][T11084] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 187.875874][T11084] FAT-fs (loop0): Filesystem has been set read-only [ 187.886138][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2752'. [ 187.916652][T11094] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 188.041513][T11105] loop2: detected capacity change from 0 to 8192 [ 188.065051][T11093] veth0_vlan: entered allmulticast mode [ 188.135670][T11077] usb usb2: usbfs: process 11077 (syz.1.2745) did not claim interface 0 before use [ 188.145967][T11077] vhci_hcd: invalid port number 129 [ 188.151266][T11077] vhci_hcd: default hub control req: 0212 v0f01 i0081 l0 [ 188.495022][T11133] loop7: detected capacity change from 0 to 7 [ 188.822983][T11165] loop7: detected capacity change from 0 to 7 [ 188.905221][T11172] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2785'. [ 189.177459][T11187] netlink: zone id is out of range [ 189.184089][T11187] netlink: zone id is out of range [ 189.189239][T11187] netlink: zone id is out of range [ 189.195817][T11187] netlink: zone id is out of range [ 189.201126][T11187] netlink: zone id is out of range [ 189.206468][T11187] netlink: zone id is out of range [ 189.211634][T11187] netlink: zone id is out of range [ 189.213043][T11193] FAULT_INJECTION: forcing a failure. [ 189.213043][T11193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.230008][T11193] CPU: 1 UID: 0 PID: 11193 Comm: syz.1.2793 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 189.230045][T11193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.230063][T11193] Call Trace: [ 189.230072][T11193] [ 189.230083][T11193] __dump_stack+0x1d/0x30 [ 189.230112][T11193] dump_stack_lvl+0xe8/0x140 [ 189.230168][T11193] dump_stack+0x15/0x1b [ 189.230190][T11193] should_fail_ex+0x265/0x280 [ 189.230240][T11193] should_fail+0xb/0x20 [ 189.230331][T11193] should_fail_usercopy+0x1a/0x20 [ 189.230358][T11193] _copy_from_user+0x1c/0xb0 [ 189.230387][T11193] proc_control_compat+0x44/0xe0 [ 189.230430][T11193] usbdev_ioctl+0xee1/0x1710 [ 189.230606][T11193] ? __pfx_usbdev_ioctl+0x10/0x10 [ 189.230642][T11193] __se_sys_ioctl+0xcb/0x140 [ 189.230674][T11193] __x64_sys_ioctl+0x43/0x50 [ 189.230704][T11193] x64_sys_call+0x19a8/0x2fb0 [ 189.230787][T11193] do_syscall_64+0xd0/0x1a0 [ 189.230820][T11193] ? clear_bhb_loop+0x40/0x90 [ 189.230910][T11193] ? clear_bhb_loop+0x40/0x90 [ 189.230941][T11193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.231004][T11193] RIP: 0033:0x7f04d677e969 [ 189.231024][T11193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.231049][T11193] RSP: 002b:00007f04d4de7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.231081][T11193] RAX: ffffffffffffffda RBX: 00007f04d69a5fa0 RCX: 00007f04d677e969 [ 189.231098][T11193] RDX: 00002000000001c0 RSI: 00000000c0105500 RDI: 0000000000000003 [ 189.231116][T11193] RBP: 00007f04d4de7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.231216][T11193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.231232][T11193] R13: 0000000000000000 R14: 00007f04d69a5fa0 R15: 00007ffcb5cbdf78 [ 189.231258][T11193] [ 189.442504][T11187] netlink: zone id is out of range [ 189.448970][T11187] netlink: zone id is out of range [ 189.464218][T11187] netlink: zone id is out of range [ 189.490431][T11196] loop1: detected capacity change from 0 to 512 [ 189.497821][T11196] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.506935][T11196] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 189.521835][T11199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.540444][T11199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.548710][T11196] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 189.558831][T11196] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 189.561880][T11202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2796'. [ 189.572456][T11196] System zones: 0-2, 18-18, 34-34 [ 189.581084][T11199] loop0: detected capacity change from 0 to 1024 [ 189.587201][T11202] netlink: 'syz.3.2796': attribute type 5 has an invalid length. [ 189.605695][T11196] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 189.627102][T11199] EXT4-fs error (device loop0): __ext4_fill_super:5502: inode #2: comm syz.0.2795: casefold flag without casefold feature [ 189.647797][T11199] EXT4-fs (loop0): get root inode failed [ 189.653613][T11199] EXT4-fs (loop0): mount failed [ 189.663499][T11196] EXT4-fs (loop1): 1 truncate cleaned up [ 189.695030][T11196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.747494][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.845766][T11229] loop7: detected capacity change from 0 to 7 [ 189.967206][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2807'. [ 189.976222][T11228] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2807'. [ 190.026552][T11247] dummy0 speed is unknown, defaulting to 1000 [ 190.032845][T11247] dummy0 speed is unknown, defaulting to 1000 [ 190.039184][T11247] dummy0 speed is unknown, defaulting to 1000 [ 190.046047][T11247] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 190.057705][T11247] dummy0 speed is unknown, defaulting to 1000 [ 190.064482][T11247] dummy0 speed is unknown, defaulting to 1000 [ 190.070817][T11247] dummy0 speed is unknown, defaulting to 1000 [ 190.077291][T11247] dummy0 speed is unknown, defaulting to 1000 [ 190.083875][T11247] dummy0 speed is unknown, defaulting to 1000 [ 190.093559][T11253] loop3: detected capacity change from 0 to 512 [ 190.100744][T11253] EXT4-fs: journaled quota format not specified [ 190.185524][T11261] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 190.671182][T11287] lo speed is unknown, defaulting to 1000 [ 190.705775][T11287] dummy0 speed is unknown, defaulting to 1000 [ 190.853801][T11297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.863946][T11297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.983306][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2836'. [ 190.993204][T11307] hsr_slave_0: left promiscuous mode [ 190.998967][T11307] hsr_slave_1: left promiscuous mode [ 191.111487][T11315] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 191.180982][T11306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.190109][T11306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.250565][T11323] lo speed is unknown, defaulting to 1000 [ 191.283394][T11323] dummy0 speed is unknown, defaulting to 1000 [ 191.401599][T11331] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 191.445333][T11329] loop3: detected capacity change from 0 to 8192 [ 191.546057][T11338] loop2: detected capacity change from 0 to 8192 [ 191.674450][T11343] tmpfs: Bad value for 'defcontext' [ 191.686625][T11343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2852'. [ 191.791746][T11350] loop3: detected capacity change from 0 to 8192 [ 191.815088][T11338] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 191.822760][T11338] FAT-fs (loop2): Filesystem has been set read-only [ 191.831657][T11346] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 191.916868][T11352] lo speed is unknown, defaulting to 1000 [ 192.004990][T11352] dummy0 speed is unknown, defaulting to 1000 [ 192.103265][ T29] kauditd_printk_skb: 858 callbacks suppressed [ 192.103281][ T29] audit: type=1400 audit(1747857908.668:18455): avc: denied { getopt } for pid=11362 comm="syz.2.2861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 192.148778][ T29] audit: type=1326 audit(1747857908.708:18456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9d4de969 code=0x7ffc0000 [ 192.173228][ T29] audit: type=1326 audit(1747857908.708:18457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf9d4de969 code=0x7ffc0000 [ 192.196978][ T29] audit: type=1326 audit(1747857908.708:18458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9d4de969 code=0x7ffc0000 [ 192.221326][ T29] audit: type=1326 audit(1747857908.708:18459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf9d4de969 code=0x7ffc0000 [ 192.245706][ T29] audit: type=1326 audit(1747857908.708:18460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9d4de969 code=0x7ffc0000 [ 192.269479][ T29] audit: type=1326 audit(1747857908.708:18461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf9d4de969 code=0x7ffc0000 [ 192.293176][ T29] audit: type=1326 audit(1747857908.708:18462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9d4de969 code=0x7ffc0000 [ 192.307686][T11373] loop0: detected capacity change from 0 to 128 [ 192.317754][ T29] audit: type=1326 audit(1747857908.708:18463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf9d4de969 code=0x7ffc0000 [ 192.346796][ T29] audit: type=1326 audit(1747857908.708:18464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11370 comm="syz.4.2864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9d4de969 code=0x7ffc0000 [ 192.369143][T11373] vfat: Unknown parameter 'ÿÿ' [ 192.437740][T11380] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2870'. [ 192.573563][T11392] loop2: detected capacity change from 0 to 8192 [ 192.690693][T11403] loop4: detected capacity change from 0 to 8192 [ 192.778387][T11410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.787752][T11410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.856727][T11403] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 192.864340][T11403] FAT-fs (loop4): Filesystem has been set read-only [ 192.872127][T11405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.873243][T11411] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 192.881560][T11405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.968721][T11417] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2885'. [ 193.264842][T11427] tmpfs: Bad value for 'defcontext' [ 193.275214][T11427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2889'. [ 193.413142][T11435] lo speed is unknown, defaulting to 1000 [ 193.464819][T11435] dummy0 speed is unknown, defaulting to 1000 [ 194.131743][T11437] usb usb2: usbfs: process 11437 (syz.0.2894) did not claim interface 0 before use [ 194.143735][T11437] vhci_hcd: invalid port number 129 [ 194.148995][T11437] vhci_hcd: default hub control req: 0212 v0f01 i0081 l0 [ 194.550673][T11497] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2916'. [ 194.619433][T11502] loop0: detected capacity change from 0 to 8192 [ 194.767604][T11510] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 194.815340][T11512] lo speed is unknown, defaulting to 1000 [ 194.872004][T11518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.894406][T11512] dummy0 speed is unknown, defaulting to 1000 [ 194.912396][T11518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.077049][T11519] lo speed is unknown, defaulting to 1000 [ 195.128882][T11534] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2930'. [ 195.157116][T11519] dummy0 speed is unknown, defaulting to 1000 [ 195.231975][ T51] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.251819][T11519] chnl_net:caif_netlink_parms(): no params data found [ 195.712867][ T51] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.818236][T11519] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.826173][T11519] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.900865][T11519] bridge_slave_0: entered allmulticast mode [ 195.940649][T11519] bridge_slave_0: entered promiscuous mode [ 195.962260][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2937'. [ 195.975890][ T51] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.990049][T11519] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.997188][T11519] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.012636][T11519] bridge_slave_1: entered allmulticast mode [ 196.041402][T11519] bridge_slave_1: entered promiscuous mode [ 196.056279][ T51] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.169058][T11519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.169973][T11566] loop7: detected capacity change from 0 to 7 [ 196.180490][T11519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.197203][T11568] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 196.250978][ T51] team0: left allmulticast mode [ 196.256039][ T51] team_slave_0: left allmulticast mode [ 196.261545][ T51] team_slave_1: left allmulticast mode [ 196.267268][ T51] bridge0: port 3(team0) entered disabled state [ 196.275125][ T51] bridge_slave_1: left allmulticast mode [ 196.280828][ T51] bridge_slave_1: left promiscuous mode [ 196.286615][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.294384][ T51] bridge_slave_0: left allmulticast mode [ 196.294401][ T51] bridge_slave_0: left promiscuous mode [ 196.294549][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.446323][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.456293][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.466007][ T51] bond0 (unregistering): Released all slaves [ 196.474884][T11519] team0: Port device team_slave_0 added [ 196.481581][T11519] team0: Port device team_slave_1 added [ 196.497314][ T51] tipc: Left network mode [ 196.511406][T11519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.518497][T11519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.544608][T11519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.570849][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.578373][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.587465][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.594987][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.605890][ T51] veth1_macvtap: left promiscuous mode [ 196.611463][ T51] veth0_macvtap: left promiscuous mode [ 196.622539][ T51] veth1_vlan: left promiscuous mode [ 196.706158][ T51] team_slave_1 (unregistering): left promiscuous mode [ 196.714654][ T51] team0 (unregistering): Port device team_slave_1 removed [ 196.725838][ T51] team_slave_0 (unregistering): left promiscuous mode [ 196.734510][ T51] team0 (unregistering): Port device team_slave_0 removed [ 196.771666][T11519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.778735][T11519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.804770][T11519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.818642][T11583] veth0_vlan: entered allmulticast mode [ 196.834909][T11583] usb usb2: usbfs: process 11583 (syz.4.2945) did not claim interface 0 before use [ 196.844389][T11583] vhci_hcd: invalid port number 129 [ 196.849611][T11583] vhci_hcd: default hub control req: 0212 v0f01 i0081 l0 [ 196.866400][T11519] hsr_slave_0: entered promiscuous mode [ 196.872681][T11519] hsr_slave_1: entered promiscuous mode [ 196.933805][T11591] loop4: detected capacity change from 0 to 8192 [ 197.111719][T11591] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 197.116703][T11595] loop0: detected capacity change from 0 to 8192 [ 197.119473][T11591] FAT-fs (loop4): Filesystem has been set read-only [ 197.155197][T11519] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.165632][T11519] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.177973][T11519] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.193945][T11519] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.238952][ T29] kauditd_printk_skb: 744 callbacks suppressed [ 197.239059][ T29] audit: type=1400 audit(1747857913.808:19209): avc: denied { setopt } for pid=11594 comm="syz.0.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.267233][T11519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.281138][T11519] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.289268][ T29] audit: type=1400 audit(1747857913.808:19210): avc: denied { bind } for pid=11594 comm="syz.0.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.308962][ T29] audit: type=1400 audit(1747857913.808:19211): avc: denied { name_bind } for pid=11594 comm="syz.0.2949" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 197.331004][ T29] audit: type=1400 audit(1747857913.808:19212): avc: denied { node_bind } for pid=11594 comm="syz.0.2949" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 197.352966][ T29] audit: type=1400 audit(1747857913.808:19213): avc: denied { write } for pid=11594 comm="syz.0.2949" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.374648][ T29] audit: type=1400 audit(1747857913.808:19214): avc: denied { connect } for pid=11594 comm="syz.0.2949" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 197.396421][ T29] audit: type=1400 audit(1747857913.808:19215): avc: denied { name_connect } for pid=11594 comm="syz.0.2949" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 197.396536][ T29] audit: type=1326 audit(1747857913.808:19216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11597 comm="syz.4.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9d4de969 code=0x7ffc0000 [ 197.396593][ T29] audit: type=1326 audit(1747857913.808:19217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11597 comm="syz.4.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf9d4de969 code=0x7ffc0000 [ 197.396626][ T29] audit: type=1326 audit(1747857913.808:19218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11597 comm="syz.4.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf9d4de969 code=0x7ffc0000 [ 197.454543][ T3334] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.454627][ T3334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.456132][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.523597][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.723186][T11519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.822192][T11519] veth0_vlan: entered promiscuous mode [ 197.854755][T11519] veth1_vlan: entered promiscuous mode [ 197.922954][T11519] veth0_macvtap: entered promiscuous mode [ 197.952289][T11519] veth1_macvtap: entered promiscuous mode [ 198.054697][T11519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.109338][T11519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.186751][T11519] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.195825][T11519] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.204633][T11519] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.213507][T11519] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.315627][T11640] loop1: detected capacity change from 0 to 512 [ 198.323693][T11640] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 198.333014][T11640] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 198.355696][T11640] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 198.365081][T11640] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 198.373319][T11640] System zones: 0-2, 18-18, 34-34 [ 198.379027][T11640] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 198.394825][T11640] EXT4-fs (loop1): 1 truncate cleaned up [ 198.400758][T11640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.441145][T11519] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.879743][T11651] tmpfs: Bad value for 'defcontext' [ 198.889901][T11651] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2960'. [ 198.907143][T11653] loop2: detected capacity change from 0 to 8192 [ 199.000203][T11659] dummy0: entered allmulticast mode [ 199.006817][T11659] dummy0: left allmulticast mode [ 199.020901][T11657] loop0: detected capacity change from 0 to 8192 [ 199.112057][T11661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2966'. [ 199.247427][T11675] loop7: detected capacity change from 0 to 7 [ 199.267093][T11677] tmpfs: Bad value for 'defcontext' [ 199.274922][T11680] loop1: detected capacity change from 0 to 128 [ 199.280978][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2974'. [ 199.290467][T11680] vfat: Unknown parameter 'ÿÿ' [ 199.403008][T11694] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 199.441740][T11696] loop3: detected capacity change from 0 to 8192 [ 199.524769][T11700] loop0: detected capacity change from 0 to 8192 [ 199.682328][T11713] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 199.690055][T11713] FAT-fs (loop3): Filesystem has been set read-only [ 199.752817][T11731] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 199.844313][T11744] loop1: detected capacity change from 0 to 128 [ 199.988330][T11751] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3003'. [ 199.998507][T11751] tipc: Started in network mode [ 200.003470][T11751] tipc: Node identity 7, cluster identity 4711 [ 200.009688][T11751] tipc: Node number set to 7 [ 200.082139][T11753] lo speed is unknown, defaulting to 1000 [ 200.192941][T11753] dummy0 speed is unknown, defaulting to 1000 [ 200.390939][T11768] loop2: detected capacity change from 0 to 8192 [ 200.409745][T11769] loop7: detected capacity change from 0 to 7 [ 200.462007][T11775] loop1: detected capacity change from 0 to 128 [ 200.481317][T11778] tmpfs: Bad value for 'defcontext' [ 200.492292][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3015'. [ 200.506705][T11775] vfat: Unknown parameter 'ÿÿ' [ 200.609967][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 200.619158][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 200.631807][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 200.651553][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 200.660639][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 200.670959][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 200.703201][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 200.703290][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 200.703332][T11793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3020'. [ 200.710352][T11793] loop4: detected capacity change from 0 to 1024 [ 200.732702][T11793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 200.795482][T11807] loop2: detected capacity change from 0 to 8192 [ 200.864235][T10557] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.892342][T11812] loop4: detected capacity change from 0 to 128 [ 200.950151][T11807] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 200.957883][T11807] FAT-fs (loop2): Filesystem has been set read-only [ 200.968089][T11813] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 201.018223][T11821] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 201.062393][T11825] lo speed is unknown, defaulting to 1000 [ 201.099504][T11825] dummy0 speed is unknown, defaulting to 1000 [ 201.329427][T11833] lo speed is unknown, defaulting to 1000 [ 201.361927][T11833] dummy0 speed is unknown, defaulting to 1000 [ 201.416217][T11846] loop7: detected capacity change from 0 to 7 [ 201.436801][T11833] chnl_net:caif_netlink_parms(): no params data found [ 201.510985][T11833] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.518189][T11833] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.536801][T11833] bridge_slave_0: entered allmulticast mode [ 201.548146][T11833] bridge_slave_0: entered promiscuous mode [ 201.555203][T11833] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.562310][T11833] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.569633][T11833] bridge_slave_1: entered allmulticast mode [ 201.576253][T11833] bridge_slave_1: entered promiscuous mode [ 201.624678][T11833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.644154][T11833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.696707][T11863] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 201.697032][T11833] team0: Port device team_slave_0 added [ 201.735899][T11833] team0: Port device team_slave_1 added [ 201.763864][T11833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.770869][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.796874][T11833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.817805][T11833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.824843][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.850980][T11833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.877429][T11867] tmpfs: Bad value for 'defcontext' [ 201.878328][T11865] loop3: detected capacity change from 0 to 8192 [ 201.922770][T11833] hsr_slave_0: entered promiscuous mode [ 201.929713][T11833] hsr_slave_1: entered promiscuous mode [ 201.935764][T11833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.943685][T11833] Cannot create hsr debugfs directory [ 201.978924][T11849] veth0_vlan: entered allmulticast mode [ 202.014055][T11849] usb usb2: usbfs: process 11849 (syz.1.3035) did not claim interface 0 before use [ 202.042582][T11849] vhci_hcd: invalid port number 129 [ 202.047926][T11849] vhci_hcd: default hub control req: 0212 v0f01 i0081 l0 [ 202.110584][T11865] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 202.118352][T11865] FAT-fs (loop3): Filesystem has been set read-only [ 202.141458][T11879] loop7: detected capacity change from 0 to 7 [ 202.268239][T11887] loop4: detected capacity change from 0 to 8192 [ 202.321509][T11833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.341154][T11833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.351008][T11833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.359028][ T29] kauditd_printk_skb: 663 callbacks suppressed [ 202.359048][ T29] audit: type=1400 audit(1747857918.928:19882): avc: denied { create } for pid=11884 comm="syz.3.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.376514][T11881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.386545][ T29] audit: type=1400 audit(1747857918.948:19883): avc: denied { read write } for pid=11880 comm="syz.1.3045" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.402788][T11881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.417126][ T29] audit: type=1400 audit(1747857918.948:19884): avc: denied { open } for pid=11880 comm="syz.1.3045" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.448550][ T29] audit: type=1400 audit(1747857918.948:19885): avc: denied { ioctl } for pid=11880 comm="syz.1.3045" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.473758][ T29] audit: type=1400 audit(1747857918.958:19886): avc: denied { shutdown } for pid=11884 comm="syz.3.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 202.496149][T11833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.554203][ T2612] bridge_slave_1: left allmulticast mode [ 202.559923][ T2612] bridge_slave_1: left promiscuous mode [ 202.563534][T11895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.565734][ T2612] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.575132][T11895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.589772][ T2612] bridge_slave_0: left allmulticast mode [ 202.595636][ T2612] bridge_slave_0: left promiscuous mode [ 202.601327][ T2612] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.705056][ T2612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.714964][ T2612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.724964][ T2612] bond0 (unregistering): Released all slaves [ 202.744149][T11833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.756403][T11833] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.766181][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.773322][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.783735][ T2612] tipc: Left network mode [ 202.797450][T11833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.807948][T11833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.820371][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.827523][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.846218][ T2612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.853817][ T2612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.861945][ T2612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.869475][ T2612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.880121][ T2612] veth1_macvtap: left promiscuous mode [ 202.885711][ T2612] veth0_macvtap: left promiscuous mode [ 202.891359][ T2612] veth1_vlan: left promiscuous mode [ 202.896765][ T2612] veth0_vlan: left promiscuous mode [ 202.927148][ T29] audit: type=1326 audit(1747857919.498:19887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.0.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 202.950869][ T29] audit: type=1326 audit(1747857919.498:19888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.0.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 203.013866][ T29] audit: type=1326 audit(1747857919.498:19889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.0.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 203.037717][ T29] audit: type=1326 audit(1747857919.498:19890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.0.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 203.061392][ T29] audit: type=1326 audit(1747857919.498:19891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11896 comm="syz.0.3051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea41dae969 code=0x7ffc0000 [ 203.135380][T11903] loop3: detected capacity change from 0 to 512 [ 203.152169][T11905] loop7: detected capacity change from 0 to 7 [ 203.153922][ T2612] team0 (unregistering): Port device team_slave_1 removed [ 203.166502][T11903] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 203.175594][T11903] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 203.187529][ T2612] team0 (unregistering): Port device team_slave_0 removed [ 203.197481][T11903] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 203.211388][T11903] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 203.221090][T11903] System zones: 0-2, 18-18, 34-34 [ 203.227458][T11903] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 203.242512][T11903] EXT4-fs (loop3): 1 truncate cleaned up [ 203.257369][T11903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.262426][T11907] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 203.277693][T11907] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 203.338187][T11833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.356686][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.367957][T11924] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 203.408787][T11918] loop0: detected capacity change from 0 to 8192 [ 203.485071][T11833] veth0_vlan: entered promiscuous mode [ 203.504278][T11833] veth1_vlan: entered promiscuous mode [ 203.514332][T11938] ================================================================== [ 203.522472][T11938] BUG: KCSAN: data-race in fat12_ent_put / fat_mirror_bhs [ 203.528921][T11833] veth0_macvtap: entered promiscuous mode [ 203.529627][T11938] [ 203.529637][T11938] write to 0xffff8881502505ed of 1 bytes by task 11918 on cpu 1: [ 203.537316][T11833] veth1_macvtap: entered promiscuous mode [ 203.537680][T11938] fat12_ent_put+0x74/0x170 [ 203.551585][T11833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.555615][T11938] fat_alloc_clusters+0x4ce/0xa80 [ 203.567903][T11938] fat_get_block+0x258/0x5e0 [ 203.572537][T11938] __block_write_begin_int+0x41c/0xf70 [ 203.578029][T11938] cont_write_begin+0x5a3/0x8e0 [ 203.582906][T11938] fat_write_begin+0x4f/0xe0 [ 203.587525][T11938] cont_write_begin+0x19b/0x8e0 [ 203.592390][T11938] fat_write_begin+0x4f/0xe0 [ 203.596990][T11938] generic_cont_expand_simple+0xb0/0x150 [ 203.602640][T11938] fat_cont_expand+0x3e/0x170 [ 203.607342][T11938] fat_fallocate+0x177/0x1c0 [ 203.611955][T11938] vfs_fallocate+0x410/0x450 [ 203.616566][T11938] __x64_sys_fallocate+0x7a/0xd0 [ 203.621523][T11938] x64_sys_call+0x2b88/0x2fb0 [ 203.626221][T11938] do_syscall_64+0xd0/0x1a0 [ 203.630736][T11938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.636638][T11938] [ 203.638962][T11938] read to 0xffff888150250400 of 512 bytes by task 11938 on cpu 0: [ 203.646767][T11938] fat_mirror_bhs+0x1df/0x320 [ 203.651457][T11938] fat_alloc_clusters+0x98b/0xa80 [ 203.656498][T11938] fat_alloc_new_dir+0xbb/0x530 [ 203.661364][T11938] vfat_mkdir+0x9b/0x1f0 [ 203.665614][T11938] vfs_mkdir+0x213/0x340 [ 203.669866][T11938] do_mkdirat+0x132/0x3f0 [ 203.674208][T11938] __x64_sys_mkdir+0x42/0x50 [ 203.678822][T11938] x64_sys_call+0x2289/0x2fb0 [ 203.683515][T11938] do_syscall_64+0xd0/0x1a0 [ 203.688034][T11938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.693938][T11938] [ 203.696264][T11938] Reported by Kernel Concurrency Sanitizer on: [ 203.702508][T11938] CPU: 0 UID: 0 PID: 11938 Comm: syz.0.3058 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(voluntary) [ 203.715026][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.725097][T11938] ================================================================== [ 203.740259][T11833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.750036][T11833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.758814][T11833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.767677][T11833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.776442][T11833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.781048][T11934] loop3: detected capacity change from 0 to 8192 [ 204.055384][T11934] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 204.063049][T11934] FAT-fs (loop3): Filesystem has been set read-only [ 204.071846][T11943] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 204.088036][T11918] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 204.095722][T11918] FAT-fs (loop0): Filesystem has been set read-only [ 204.105464][T11938] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0)