last executing test programs: 58.341294251s ago: executing program 4 (id=133): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 58.227799334s ago: executing program 4 (id=137): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000140), 0x21c804, &(0x7f00000003c0)=ANY=[]) r1 = socket$pppl2tp(0x18, 0x1, 0x1) recvfrom(r1, &(0x7f0000000e80)=""/4096, 0x1000, 0x40002001, &(0x7f0000000000)=@rc={0x1f, @any, 0x1}, 0x80) 58.124755056s ago: executing program 4 (id=138): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) semop(0x0, &(0x7f0000000100)=[{0x2, 0x400, 0x800}, {0x4, 0x7ff, 0x800}, {0x1, 0xd8, 0x2800}, {0x4, 0x7701, 0x1800}, {0x4}, {0x1, 0x9, 0x1000}, {0x0, 0xe000}, {0x3, 0x4}, {0x4, 0x5cc1, 0x800}], 0x9) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x37}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRES8=r4], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0xc, 0x0, 0x0) r6 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000280)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) io_uring_enter(r6, 0x47ba, 0x3e00, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) 57.674554365s ago: executing program 4 (id=142): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) write$binfmt_elf32(r2, 0x0, 0x69) 57.594092526s ago: executing program 4 (id=143): mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x6, 0x7f, 0x10}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x19, &(0x7f0000000a40)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xac5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0xe}, 0x18) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 57.504751318s ago: executing program 4 (id=144): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @empty, 'wg1\x00'}}, 0x1e) close(0xffffffffffffffff) 57.475273459s ago: executing program 32 (id=144): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @empty, 'wg1\x00'}}, 0x1e) close(0xffffffffffffffff) 2.05516901s ago: executing program 3 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.992842821s ago: executing program 3 (id=903): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.936695152s ago: executing program 3 (id=906): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r4, &(0x7f0000000480)=[{&(0x7f0000002640)="91eb51a7914356", 0x7}], 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0x20, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000078fd0087", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000007d13c0ff1000000018270000", @ANYRES32=r0, @ANYBLOB="0000000000080000d5a406001000000095000000000000009500000000000000186a000005000000000000000e000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x56, &(0x7f0000000400)=""/86, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x33, r4, 0x8, &(0x7f0000000480)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x40d, 0xfffffff8, 0x7}, 0x10, 0x0, r1, 0xa, &(0x7f00000005c0)=[r0, r0, r0, r0, r0, r5, r0], &(0x7f0000000700)=[{0x1, 0x3, 0x9, 0xb}, {0x3, 0x2, 0x1, 0xc}, {0x3, 0x5, 0x6, 0x1}, {0x1, 0x5, 0x4, 0x5}, {0x0, 0x5, 0x10}, {0x0, 0x4, 0xa, 0xa}, {0x5, 0x3, 0x4, 0x4}, {0x5, 0x5, 0xb, 0x1}, {0x3, 0x2, 0x2, 0xc}, {0x2, 0x3, 0x2, 0xb}], 0x10, 0x10001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 1.711803197s ago: executing program 0 (id=912): mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x6, 0x7f, 0x10}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000400), &(0x7f00000001c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0xe}, 0x18) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.55376252s ago: executing program 2 (id=913): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xa, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 1.500648721s ago: executing program 2 (id=915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.457249471s ago: executing program 2 (id=917): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 1.453378761s ago: executing program 5 (id=918): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x40) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) 1.409488473s ago: executing program 0 (id=919): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 1.379849353s ago: executing program 2 (id=920): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.375195893s ago: executing program 0 (id=921): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r3 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r3}) io_uring_enter(r3, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 1.322620084s ago: executing program 2 (id=922): syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno', @ANYRESHEX=r0]) 1.322320175s ago: executing program 5 (id=923): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0xfd, 0x3, 0x40, @empty, @local, 0x700, 0x8, 0x2, 0x6}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0xfffffffe, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x91, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4507}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 1.317898384s ago: executing program 0 (id=924): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r0 = syz_io_uring_setup(0x230d, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 1.272185075s ago: executing program 2 (id=925): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xd, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x3}, 0x0) io_setup(0x403, &(0x7f0000000500)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000003580)=ANY=[@ANYRES32=r0, @ANYBLOB="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", @ANYRESOCT=r0, @ANYBLOB="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", @ANYBLOB="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", @ANYRESHEX=r0], 0xfb, 0x1226, &(0x7f0000002340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x32600) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201010200000040050b541840000102030109022d000409210800030122b20409058103000204060209050203080080000600"/63], &(0x7f0000000740)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0x9, 0xe7, 0x5, 0x10, 0x6}, 0x37, &(0x7f0000000380)={0x5, 0xf, 0x37, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "c8429f0dd47d60449205878aa3c5b7fa"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x7, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x7, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xb3, 0x40, 0x5}]}, 0x4, [{0x50, &(0x7f0000000480)=@string={0x50, 0x3, "3a8075f5ae3383dc72ff27f52d3a16feed05955a4e9735c20c4054e35604bf959ce600b4cc0b2556496e44333edffff5336c2365bffdb5d22413d3991aab3a198c11197f5070d6c3c07d6fcdd3da"}}, {0xb, &(0x7f0000000540)=@string={0xb, 0x3, "718270b96ded0d0171"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc01}}, {0xae, &(0x7f0000000680)=@string={0xae, 0x3, "51dd97f574a1acdb3e63e4cd13ad1c02b16588b46cf7ff8dc68f5de8e2999beaf05f21d82d93dcfea7c8c1b0812d93fe4b01d6714f003ac377c3cb40daf6eb63b6a274e7915f48e07003405dbbfce4813d01b25e923c2ce91388919437af150ba22326a5e50807dbd6f1e6c159e1c608c1acee0fef797b7ded67a85d1788b669414e72f80ac31237dfaeb0aba16b8d915b6d61b2a9831d7cbf36cbfd433f61f9f6f8a4222965e4e00061feb2"}}]}) syz_usb_ep_write(r3, 0xf7, 0x37, &(0x7f00000005c0)="4c2c5d8e06d5b1fd9f234c378a8d3ec66b06993aab502900f95011f317c0d2b0dddd101b1a4093da685c7f179fa5d5a57e0d93d31d89bd") bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x5, 0x2}, 0x50) 1.143386357s ago: executing program 0 (id=926): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000eb00000000185b6baa00000000004000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100000000372500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="1000ffffffffa0dbad415f4f6119", 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0xf9, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.117573619s ago: executing program 0 (id=927): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xd, 0x0, 0xfffffffffffffffe, 0xfffffffc, 0x3}, 0x0) io_setup(0x403, &(0x7f0000000500)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000003580)=ANY=[@ANYRES32=r0, @ANYBLOB="162170589338444d9efcbb60b5d24664d0d92965515b9216dd705b0e664caa29ecd55c11a8de3955b25a9f0b40efa8b81d32680d9e7282e513d4fc000f326efa4844874cfa9ea73c5d95712c73451e2f2300dfe9cbdeb0d8ff358f39bfe4b82aa71d41b9905d5d532df56c880d66baecdf3972a1ef2de5bb793d99565ce87620add39d534b1c4e593e9219b9b90d3b7c3e60c77e9b09e48fc73016592b4303e0159430399ed7ad66179092519d5dc3264f2df3af5e33e258b37a272695715c17a8fa05eb412eb36d589fb700d38d7f77008624d019e4d8526cf45b8cfecbf24096a1d024fe5c61af591cdd8d103e1637e5543d64cbe799336cdd0d6cd754acedaa6075bcabf4fa4ee0716b23fd8ba7c6be48d8c3fef746faf58ae3dfce53d393bfae12aa6af884317c944178005c4ce071cf14d5acbcf3264f2910fac95e357f1ff8787144bf25f187e75bdc8220822f05bd7ab0631a8c200fd2a5199268b710dffac6a654d484225bf5a4327feee615e1c08b737d088a923f8b4b54d6db7ff53edb9a2b91cdacd2ede939bd39ddf232b40a443c55fa55994cb036b1606bc4af8374428cd5580c8762f76b30e5d732a8fcb3f09b3eeadd980d4946ea48cf8d261c275c730defc9449a9b3c47ff0c2754e23b4d96147ba1b81f5092ea9f6939978aeaa7b65a49882ce834a8ae7a31ae3299bf52cebf5754af8ff6f3b2bcf4d5c1d597cada9bda1dbbb3f23b6c441fcc910b648b2c978283ec4e33650baef38c95333b16fb11892a54c893e50298b6828b67152278155309f1b74049380bbfb56c6564fd4053672815994ec2dc6a5334ea5461b2e5bed02b30859a69fe24c70d985075150de9a7682a1dcb325bebd8cd87ea09601801e7ea6193b7030b7f2918d2eb3dd13352b65d3dedde978c447e949d27a7e9399d13b2c0a6eaea48f0a7d83a773c573fdbfd36b22ebddca9f77f9ae8b0625d0e6a85300cbcf1302b159e02d9c53d6d80f99b3e0b8d7ad1535003bb6d5f8fc84ba1f2ab428233f29930752dd427808f98b362d4df4b39094cf8dae578f7516843bf3ed8505dfe8ed4f17d11c4c7caf9f0a56dbd6b3f2147900f801a24efc947280e7d33d136da19d0dea136758c1150cd5a4aefdc8b063439992d6b8d1c580c30dfeadb9649231fe3cd8af6182c383a20d47602630e95ce5a7722f79ac1a3c8c827ed9a95f3a7bb9a311740df4bca1e5ed9b91e0ca1f0be6689cb8dcbe1293914042fa25db500ab01aebe6c8c36fcb3cb10851866f6d52f0467cb0a89a200137ef045ddad66fdd861eb7afeb396a0182ef9c20539a701c76c6873d7ddf8f1ecba5a671e4685d4d66f12ae8f7ae37608b2e2eea88b016123af1afbb3e39950b0ea89842e7d97d9cea82fd0f8fa49faba5a184dc4992cbbf12b7622a8e1df6cbce49208fb218f82eb6ab7bd8a69ec3add3e9cccc63a47c92f74ac24260d77b86638db8306cab5860c90609da6374c4b3d5418d7c1ce6c722118dc05f519b0d9a76448fb030e2c1ef1d3a2d2c5f577c30e66796716c3cbf2d29a157cbd90d87e07fa772926925901488a4e4ce3cd318b7e64a344a84d882e1300bafea84c43d6f6b5e05da56d3f06fc6c5a1661c007f8244b9e2e846af19a0344b73149d4a15874c91e1a77d0a63f0e3ac41c376feea04066e5195a76fc29da42b41f6553154985d7fe24f28ad41100eb33760c27530dfed662c2923b12b830c247df367a84448e0a99cd4f3b43056ca2d933ce9e216a8402a1e6c11b5b2f661226c36e20a13333586eca0e6b831704e2d34f5d1f1d37ab97e2c9bb2adf6c2be2e952a53acc4a4848c3ccd8822b78f54412aefdeb4ae4385fd4198f934587d95c941b0a06c61496de47c31a44025e0b528d0ada1d993f715bc61dda4f47366aeaae884bbd47e007cea551b874c25ac6c4172640855ad16eac67359466b3a192570a6971d39678b48ce1d715df27a1fef1a1f073345d94a45100cf39317473409599c5a37d18132803357ac5cd8e117dd1ceae4a760cdc784940217d85657499855dbbb7f913b66967537fae4e1eb7c30c59f5feb01e34a75f901d31947b92788ab7c142ee508d2203060420473cbeb9df81b46b6c77380f9f90b1344511720ad36ee4bc719e35e975487f9428193390528d257604c0b9612d1a7304b66c4b846d55aa2c55110af105ff011040feb6db3d9179cd88b1d5fc2b366c58dae34f281040c692973cfbcfc2e40397266d132f082d8c155300816eae2c0c5c47fff38a827535ecb98a56240463c23e6ad132a021a739f138f7251ea39a6b8bff3df1ce72e83e34b83dc00a49306d0049ecbf32f2f4b0a0bd1ed4cdcd63a3a5825149b9dbf7970a240d05f8ec4c04de65506547e2685fbb1b412779a16b4c3d90bf60ab934d8c3e22f414d6f07266b3d787adffe8d14088e885911b0cacfccd367c31b77d0a0241428714e988bc368b709b77ffd2a0198149e675d9c1328a6f11e13f027010cb880dc4eb022eb90781db851fadcef0a654ab11df9bce8ea3f59051f4764571f2788c4e46905f520dfdd9c76d36b8e362d2806310e054c8913d23f82f78231dc8f351cc40df95f986a89ce050f101430f65b302c1fe71a9a51ff255d42656cc9badb78634d9dc793a77e05e03d65ed1d25509f135ee07ce1eec1dd6fd158a734d73bd82406de27073edb7783236e121e5297e9d7620de63bf0145d0c61cc60effb767d2b5b215917ee7a7e15d9c46e6d1b5a4647f60be092754269cba4ff66ab31c02fb49f51ef223c000eb8624c3b98e1199f462c03e2607cc66781a050a5143141f61391efce3c2dcf5d87b23596e7e369fd62b66ea58f567ffe3db0d999844969a5d0f780e3bf758fd225f10d01f5a4195e93d35424f378de6501fa40a89a79f67627a46ef4d3df114481500cf3a6fa296c0f6a5217d83a2796c3ff7ee792550230d8613e659e8d979e1b20ef9d788346a8adcdf6f472dccb90eea2360e5008004e9eb3646f03dcd3826e626b37b43a06d71e861f34f7ef0e42be2712c08fe286614e23bee08df5fead3b23ba70340d625927f6ba34fc94dd106a04277a7b37c667a6c3804e1fae56f5800ce4a532453b7e84063de22edc5e79b6bdf117cd28b3ffb8984c380489126583ddcf72f5ceb13281aec908a7e23fef1b9f90c01ed474e59feacf1ac2651b926ab0df9baf20132f32f07829f88442d3e91571af179a344a4ce17b2ef365bb7652bbd75f85360d8c1d7b0e35b7988185ecef25e5c5d7d35a9c02ea8a8020e15944f07764b129024f87d87f3ec1a746e45ff930ad17cb129abaa7e625708f33df06b119807fa6f3698e6474571c8fabbb9e3231fc45f96f9568c0a9977c80851d8bbb8140639ab91e384b9c4e9e6cd1f2c9c2b98a5f4cfeeb40248b3014d57b751629a548edb7e8c76f53703804502581a4cd5586ff792a3657215642af7652d21f8a185860c677f2778dee1a900ed3b447f569be500dcdaecc21ddd199ace24eb71cab1e3d2dc7c75e99152e26d6668246ec75044a31a6e5396fd5d0377359b30289a1af22a6ce4c47adc10b0ae6b227f43711cf9725ad3e7a64498008730258adad83deca61d08c3048d21da445cf872b421282814565c21b7f6a3071c79739e8291aced6df671986aff54b075698730995959b95f31f25e16796ab5c80f4cea69590289081b87541195d658be07d718fd04a9dc9e94cc4510f5823ccac61c1acab4427a05f47f378cce5ad104af58717dc542bca5a10d0c29740702dafa15342d6c6507488a90e45a23c536a3c7c4f64950147adffe8c138adc90ec59bfe40a2845ace1a3621d7f45e25c92f6b17317455887850710506a5dbfce1e773813216b33d1de856e4dc24eb56d5b097efa065c9ed3af0c38f05fb1d899314158391a5f15cb901ac8adedbf3a4c2651483b3c739f42cd6f91e751fc7ebe0a961ec4224e8dc4404c2a43134b856686c56ecb916aec551077e6199147c80e6a6b6ab5354fac518414287e760e4780222a1a6b2c978f929a34bb506f455bac7a012e8f323d93144cbb922521659819f3f9f64edd41844a7b2c4cbf566cc4840db4766d03d673fdfd3d7756a3f6f450fcc5e224ea0d2811a0f73b9e406634775cdf1a43a879f311544dc9998a931c612176494015c8373ee1b871363a63bc7ace2ae0b72f08e1580ee91597725bcf4e59e61478c72d470a0c779db8a98adf59259b48892fd0595ec13199f3d52322a8b5ec9665af4c03d9c5ad74224f0b02b7bbb3c1d05ca1b02cae2e99afe697b558df34997286f0b884c223bd2e1f032464438b7e6a33ddf8264e35eeb9602fde28bef8d1634378e973c41d27160531299e0055ea5a3c5b1bcf27ecf45b03229aaa7bd0d48e24fd9ff0f49e827c15736b4bf757c64a93c7b282bd061880ca4c550b5ae524add3a3598d86a68e7acb65fe99a1231f8129b57f70f1993410c4e48e9ec869ace92124fe9b125399990d9a9afc6d753881a77cb9167f9669d30840bae4ecc6674add02d2ad70863f28b004fed22a31c233a96ecac046fd40c648cf391539d602f9b534b2bef6a3b65ba768de0c181f032f427c6fc11001f7d44578e4b05ed4f4b907f5121603623ea51d492a2483af01cb921cb20b21503d597d73d1395b8277b819adb52b0badbbac39c227a1b29f18a39acb9c992825403d740260b75af4ff96af8b657e2d5f8559161ffefca0f70bf3ce774ac7f8336ae964bb9e85a87f4ff0b6da2ecbdc5fdc540cdbbcccebd40aefee39c82f0bbd4c703c4fbf929c409302bd330980f14eee6a7c490a60a279a946fc60689ad9b0eaa2c550cc845f0fefb0ec150a8fe8d7b2c6588cf2f80a331fe238ce7583b03ad20fa8541abc2787e06519370e544a3be7d91864ec35e61b56998771161f6802ab618d491df2cb2180a0752db946ed92bc97330c5446c9b04305cf2931affb6ef95a529cb9dad2fb43ed3d6b8d0fb94b9f383a7aef419078189c32fb066764cdfcc9383aab4c9bccf01793ca5a94c4938678bc3aee9f633b39a7c0fb06c41421442d0809108087c617e0d1e2d5a911c6ddeac7535b8552a37e2e6609ea26afc6535a7d39c8b3e9375dbb3fd25010756d55baf5677259396950ac926707ddfa760ec2ebc1339c00854690dfa6be8b53c9eb6b7360b3031e1aaac6e0b65a58b5e0074e995a72c95874dcedbfe5d32db700c7efd3efefcdd9496a2b0c08e5327bdc32b5e8f2366ec8dec243dfd7bf6a2132b7e783139f1213edd2742dcbb9cb5b63bbb2256e70471b0ac9293de1fe9dc6f77c77c78be3be15eaa2a955f59daadf21a3807bc1ab1cb0759a6529cdc54403940707f4ec98264f0a7ceb6af7810ca6221fa878f55fdc07f8c2f69e05a976eda4f5adcd360cd57e5d0099865e8ba091055ace47f54f28756535efdc73b9fd68cb7dec96e61629a08af65a5c40a4e6aa089b2362ac04ba59465c8523791fee88ee6c71a4a85e4b63ea02efd7f2de7260b2c6d32dc6a0cedbb0216a5a4892138ab52248851263e53b1929e15b7c40e7b09307606dd4170ef81db05952463587b83a391e6d985712c06467ab640aaccc6022ea2caa7274974d293a21063ad3c29158313f90a5be2242d3ceb17da807ca276da2f33643a63b52a7f090a7374cab1949ce37fc30ce12c0c551c589a67cd84eb09942c8931042ce059b8fbf6085868192e7fb0d6db9b550cf58d2339f51757ed6a4af5b0ea9bfad30709622784bcc488efb380c642a45f75d924a67b5241179990583", @ANYRESOCT=r0, @ANYBLOB="fd75c73fa478334d9c8ddb9b3c18d8b86a04180d23b46b6225d0884fc0e824e37834c6ea505d314a41d59d52ed953372e28e812ae084bb85b7a4ab4ff4f918540196ba3186a206e72b820d1c6504091558e265600da735cee32b519693eaac53f9fac3312552ad8e7dceb4c9596ab1764c17623c6ce54e0b95b658354c404a1d1fa77eb51a2139b6dce0931dccad019dd5cd890e17ce38a01b1c01c441bfa88863ad573c345a9413d91654ea46c456fd6dd146028f018b219768926ef927869cb210aa5dd334d9159f6c31b861ea8c3930a797a4920163b447d0ed44dc8294121338aaf20973a736bd27c3fb20bcad7fa49d62db43a630034021a67cab4650", @ANYBLOB="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", @ANYRESHEX=r0], 0xfb, 0x1226, &(0x7f0000002340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x32600) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="1201010200000040050b541840000102030109022d000409210800030122b20409058103000204060209050203080080000600"/63], &(0x7f0000000740)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0x9, 0xe7, 0x5, 0x10, 0x6}, 0x37, &(0x7f0000000380)={0x5, 0xf, 0x37, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "c8429f0dd47d60449205878aa3c5b7fa"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x7, 0x80}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x7, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xb3, 0x40, 0x5}]}, 0x4, [{0x50, &(0x7f0000000480)=@string={0x50, 0x3, "3a8075f5ae3383dc72ff27f52d3a16feed05955a4e9735c20c4054e35604bf959ce600b4cc0b2556496e44333edffff5336c2365bffdb5d22413d3991aab3a198c11197f5070d6c3c07d6fcdd3da"}}, {0xb, &(0x7f0000000540)=@string={0xb, 0x3, "718270b96ded0d0171"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc01}}, {0xae, &(0x7f0000000680)=@string={0xae, 0x3, "51dd97f574a1acdb3e63e4cd13ad1c02b16588b46cf7ff8dc68f5de8e2999beaf05f21d82d93dcfea7c8c1b0812d93fe4b01d6714f003ac377c3cb40daf6eb63b6a274e7915f48e07003405dbbfce4813d01b25e923c2ce91388919437af150ba22326a5e50807dbd6f1e6c159e1c608c1acee0fef797b7ded67a85d1788b669414e72f80ac31237dfaeb0aba16b8d915b6d61b2a9831d7cbf36cbfd433f61f9f6f8a4222965e4e00061feb2"}}]}) syz_usb_ep_write(r3, 0xf7, 0x37, &(0x7f00000005c0)="4c2c5d8e06d5b1fd9f234c378a8d3ec66b06993aab502900f95011f317c0d2b0dddd101b1a4093da685c7f179fa5d5a57e0d93d31d89bd") bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file2\x00', r2}, 0x18) io_pgetevents(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000100)=0x1000000, 0x4) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00'}, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) 1.103730428s ago: executing program 3 (id=928): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 985.146161ms ago: executing program 3 (id=930): mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x6, 0x7f, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000a40)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='tlb_flush\x00', r1, 0x0, 0xe}, 0x18) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 961.614822ms ago: executing program 5 (id=931): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000feffffff0000000000000000850000002a00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 856.742194ms ago: executing program 5 (id=934): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00'}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) 769.724595ms ago: executing program 5 (id=936): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) semop(0x0, &(0x7f0000000100)=[{0x2, 0x400, 0x800}, {0x4, 0x7ff, 0x800}, {0x1, 0xd8, 0x2800}, {0x4, 0x7701, 0x1800}, {0x4}, {0x1, 0x9, 0x1000}, {0x0, 0xe000}, {0x3, 0x4}, {0x4, 0x5cc1, 0x800}], 0x9) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x37}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRES8=r3], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0xc, 0x0, 0x0) r5 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r5, 0x47ba, 0x3e00, 0x0, 0x0, 0x0) 634.648478ms ago: executing program 3 (id=938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) writev(r4, &(0x7f0000000480)=[{&(0x7f0000002640)="91eb51a7914356", 0x7}], 0x1) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYBLOB="0100008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000300"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0x20, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000078fd0087", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000007d13c0ff1000000018270000", @ANYRES32=r0, @ANYBLOB="0000000000080000d5a406001000000095000000000000009500000000000000186a000005000000000000000e000000bf91000000000000b7020000030000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x56, &(0x7f0000000400)=""/86, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x33, r4, 0x8, &(0x7f0000000480)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x40d, 0xfffffff8, 0x7}, 0x10, 0x0, r1, 0xa, &(0x7f00000005c0)=[r0, r0, r0, r0, r0, r5, r0], &(0x7f0000000700)=[{0x1, 0x3, 0x9, 0xb}, {0x3, 0x2, 0x1, 0xc}, {0x3, 0x5, 0x6, 0x1}, {0x1, 0x5, 0x4, 0x5}, {0x0, 0x5, 0x10}, {0x0, 0x4, 0xa, 0xa}, {0x5, 0x3, 0x4, 0x4}, {0x5, 0x5, 0xb, 0x1}, {0x3, 0x2, 0x2, 0xc}, {0x2, 0x3, 0x2, 0xb}], 0x10, 0x10001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r6) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) 602.008328ms ago: executing program 1 (id=939): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) personality(0x40000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0xfd, 0x3, 0x40, @empty, @local, 0x700, 0x8, 0x2, 0x6}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0xfffffffe, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x91, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4507}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 529.5276ms ago: executing program 5 (id=940): r0 = syz_open_dev$evdev(0x0, 0x3, 0x40) syz_usb_disconnect(r0) 445.609352ms ago: executing program 1 (id=941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 301.591525ms ago: executing program 1 (id=942): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x4, 0xfd, 0x3, 0x40, @empty, @local, 0x700, 0x8, 0x2, 0x6}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[], 0x20) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0xfffffffe, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x91, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4507}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) 54.21812ms ago: executing program 1 (id=943): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x7, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x20000000000000ba, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 289.52µs ago: executing program 1 (id=944): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x11f8, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r2}) io_uring_enter(r2, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 0s ago: executing program 1 (id=945): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x599, &(0x7f0000001280)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000004c0)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x40) write$cgroup_subtree(r1, 0x0, 0x32600) kernel console output (not intermixed with test programs): 8/0x140 [ 53.224862][ T4448] dump_stack+0x15/0x1b [ 53.224945][ T4448] should_fail_ex+0x265/0x280 [ 53.224973][ T4448] should_fail+0xb/0x20 [ 53.224995][ T4448] should_fail_usercopy+0x1a/0x20 [ 53.225062][ T4448] _copy_to_user+0x20/0xa0 [ 53.225096][ T4448] lsm_fill_user_ctx+0x13a/0x1e0 [ 53.225132][ T4448] selinux_getselfattr+0x87/0xd0 [ 53.225218][ T4448] security_getselfattr+0x24d/0x500 [ 53.225252][ T4448] __x64_sys_lsm_get_self_attr+0x51/0x60 [ 53.225349][ T4448] x64_sys_call+0xeb8/0x2ff0 [ 53.225418][ T4448] do_syscall_64+0xd2/0x200 [ 53.225454][ T4448] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 53.225548][ T4448] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.225574][ T4448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.225596][ T4448] RIP: 0033:0x7f6f232bec29 [ 53.225614][ T4448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.225688][ T4448] RSP: 002b:00007f6f21d27038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 53.225711][ T4448] RAX: ffffffffffffffda RBX: 00007f6f23505fa0 RCX: 00007f6f232bec29 [ 53.225725][ T4448] RDX: 0000200000000040 RSI: ffffffffffffffff RDI: 0000000000000064 [ 53.225739][ T4448] RBP: 00007f6f21d27090 R08: 0000000000000000 R09: 0000000000000000 [ 53.225752][ T4448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.225764][ T4448] R13: 00007f6f23506038 R14: 00007f6f23505fa0 R15: 00007ffcba7eb548 [ 53.225781][ T4448] [ 53.306765][ T4445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.443927][ T4445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.706428][ T4453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.719567][ T4453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.842263][ T4418] syz.5.275: attempt to access beyond end of device [ 53.842263][ T4418] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 53.863022][ T4418] FAT-fs (loop5): Filesystem has been set read-only [ 53.874935][ T4418] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 53.985123][ T4470] loop2: detected capacity change from 0 to 1024 [ 54.010884][ T4470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.040303][ T4470] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 54.063129][ T4470] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 54.075782][ T4470] EXT4-fs (loop2): This should not happen!! Data will be lost [ 54.075782][ T4470] [ 54.085551][ T4470] EXT4-fs (loop2): Total free blocks count 0 [ 54.091614][ T4470] EXT4-fs (loop2): Free/Dirty block details [ 54.097650][ T4470] EXT4-fs (loop2): free_blocks=4293918720 [ 54.103387][ T4470] EXT4-fs (loop2): dirty_blocks=192 [ 54.108636][ T4470] EXT4-fs (loop2): Block reservation details [ 54.114672][ T4470] EXT4-fs (loop2): i_reserved_data_blocks=12 [ 54.137779][ T4478] netlink: 12 bytes leftover after parsing attributes in process `syz.5.294'. [ 54.160401][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 54.201258][ T3382] kernel write not supported for file /input/event2 (pid: 3382 comm: kworker/0:3) [ 54.226807][ T4489] netlink: 36 bytes leftover after parsing attributes in process `+}[@'. [ 54.294452][ T4495] loop2: detected capacity change from 0 to 1024 [ 54.302475][ T4495] EXT4-fs: dax option not supported [ 54.482175][ T4505] FAULT_INJECTION: forcing a failure. [ 54.482175][ T4505] name failslab, interval 1, probability 0, space 0, times 0 [ 54.483029][ T4499] loop0: detected capacity change from 0 to 128 [ 54.494921][ T4505] CPU: 1 UID: 0 PID: 4505 Comm: syz.3.306 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.494952][ T4505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 54.494967][ T4505] Call Trace: [ 54.494973][ T4505] [ 54.494980][ T4505] __dump_stack+0x1d/0x30 [ 54.495053][ T4505] dump_stack_lvl+0xe8/0x140 [ 54.495074][ T4505] dump_stack+0x15/0x1b [ 54.495090][ T4505] should_fail_ex+0x265/0x280 [ 54.495118][ T4505] should_failslab+0x8c/0xb0 [ 54.495182][ T4505] kmem_cache_alloc_noprof+0x50/0x310 [ 54.495287][ T4505] ? getname_flags+0x80/0x3b0 [ 54.495315][ T4505] getname_flags+0x80/0x3b0 [ 54.495426][ T4505] __x64_sys_rename+0x33/0x70 [ 54.495454][ T4505] x64_sys_call+0x1f9/0x2ff0 [ 54.495477][ T4505] do_syscall_64+0xd2/0x200 [ 54.495508][ T4505] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 54.495541][ T4505] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.495584][ T4505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.495641][ T4505] RIP: 0033:0x7f0784e0ec29 [ 54.495659][ T4505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.495678][ T4505] RSP: 002b:00007f0783877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 54.495700][ T4505] RAX: ffffffffffffffda RBX: 00007f0785055fa0 RCX: 00007f0784e0ec29 [ 54.495713][ T4505] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 00002000000003c0 [ 54.495727][ T4505] RBP: 00007f0783877090 R08: 0000000000000000 R09: 0000000000000000 [ 54.495741][ T4505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.495811][ T4505] R13: 00007f0785056038 R14: 00007f0785055fa0 R15: 00007ffd54896de8 [ 54.495831][ T4505] [ 54.747392][ T4510] loop5: detected capacity change from 0 to 1024 [ 54.761122][ T4499] FAT-fs (loop0): Directory bread(block 32) failed [ 54.785049][ T4499] FAT-fs (loop0): Directory bread(block 33) failed [ 54.798703][ T4499] FAT-fs (loop0): Directory bread(block 34) failed [ 54.804053][ T4510] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 54.856604][ T4499] FAT-fs (loop0): Directory bread(block 35) failed [ 54.880012][ T4499] FAT-fs (loop0): Directory bread(block 36) failed [ 54.926356][ T4499] FAT-fs (loop0): Directory bread(block 37) failed [ 54.937545][ T4510] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 54.957395][ T4499] FAT-fs (loop0): Directory bread(block 38) failed [ 54.965001][ T4499] FAT-fs (loop0): Directory bread(block 39) failed [ 54.984042][ T4510] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 54.997852][ T4510] EXT4-fs (loop5): This should not happen!! Data will be lost [ 54.997852][ T4510] [ 55.005752][ T4507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.007568][ T4510] EXT4-fs (loop5): Total free blocks count 0 [ 55.021904][ T4510] EXT4-fs (loop5): Free/Dirty block details [ 55.025434][ T4507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.027889][ T4510] EXT4-fs (loop5): free_blocks=4293918720 [ 55.041321][ T4510] EXT4-fs (loop5): dirty_blocks=192 [ 55.045762][ T4499] FAT-fs (loop0): Directory bread(block 40) failed [ 55.046581][ T4510] EXT4-fs (loop5): Block reservation details [ 55.046596][ T4510] EXT4-fs (loop5): i_reserved_data_blocks=12 [ 55.115280][ T4499] FAT-fs (loop0): Directory bread(block 41) failed [ 55.137486][ T4519] 9pnet_fd: Insufficient options for proto=fd [ 55.207012][ T3990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 55.246291][ T4515] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4515 comm=syz.1.310 [ 55.259818][ T4526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.313'. [ 55.343691][ T4532] loop2: detected capacity change from 0 to 1024 [ 55.374644][ T4532] EXT4-fs: dax option not supported [ 55.787351][ T4499] syz.0.303: attempt to access beyond end of device [ 55.787351][ T4499] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 55.816780][ T4549] 9pnet_fd: Insufficient options for proto=fd [ 55.839006][ T4499] FAT-fs (loop0): Filesystem has been set read-only [ 55.869882][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 55.869900][ T29] audit: type=1400 audit(55.858:1971): avc: denied { create } for pid=4550 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 55.869972][ T4499] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 55.964640][ T29] audit: type=1326 audit(55.898:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4498 comm="syz.0.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 56.041013][ T4556] loop0: detected capacity change from 0 to 512 [ 56.087942][ T4556] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.103634][ T4556] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.325: corrupted inode contents [ 56.117077][ T4556] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.325: mark_inode_dirty error [ 56.130843][ T29] audit: type=1400 audit(56.118:1973): avc: denied { getopt } for pid=4550 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.138273][ T4556] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.325: corrupted inode contents [ 56.171623][ T4556] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.325: corrupted inode contents [ 56.184268][ T4556] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.325: mark_inode_dirty error [ 56.197054][ T4556] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.325: corrupted inode contents [ 56.210141][ T4556] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.325: mark_inode_dirty error [ 56.230786][ T4556] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.325: corrupted inode contents [ 56.244629][ T4556] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.325: mark_inode_dirty error [ 56.368709][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.401501][ T29] audit: type=1400 audit(56.388:1974): avc: denied { write } for pid=4577 comm="gtp" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.424164][ T4578] program gtp is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.434372][ T4578] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 56.434721][ T4576] netlink: 24 bytes leftover after parsing attributes in process `syz.5.331'. [ 56.494598][ T4576] loop5: detected capacity change from 0 to 128 [ 56.512653][ T29] audit: type=1400 audit(56.498:1975): avc: denied { setopt } for pid=4575 comm="syz.5.331" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.532250][ T29] audit: type=1400 audit(56.498:1976): avc: denied { write } for pid=4575 comm="syz.5.331" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.551846][ T29] audit: type=1400 audit(56.498:1977): avc: denied { setopt } for pid=4575 comm="syz.5.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.558940][ T4578] netlink: 14 bytes leftover after parsing attributes in process `gtp'. [ 56.572260][ T4571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.572405][ T4571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.599262][ T4582] loop0: detected capacity change from 0 to 8192 [ 56.611977][ T4578] hsr_slave_0: left promiscuous mode [ 56.619337][ T4578] hsr_slave_1: left promiscuous mode [ 56.662841][ T4590] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 56.763979][ T4597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.773147][ T4597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.095351][ T4598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.155691][ T4598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.264352][ T4609] loop3: detected capacity change from 0 to 1024 [ 57.285448][ T4609] EXT4-fs: dax option not supported [ 57.354427][ T4604] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4604 comm=syz.5.339 [ 57.434779][ T4607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.476365][ T4607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.984271][ T4638] loop0: detected capacity change from 0 to 1024 [ 58.008000][ T4638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 58.023930][ T4638] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 58.052113][ T4631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.081894][ T4631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.104121][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.186709][ T4648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 58.303348][ T4643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.313593][ T4643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.340717][ T4656] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=4656 comm=syz.2.354 [ 58.950001][ T4674] loop5: detected capacity change from 0 to 1024 [ 58.960810][ T4676] loop3: detected capacity change from 0 to 128 [ 58.968010][ T4674] EXT4-fs: dax option not supported [ 59.032850][ T4676] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.040754][ T4676] FAT-fs (loop3): Filesystem has been set read-only [ 59.050599][ T4680] loop5: detected capacity change from 0 to 128 [ 59.079569][ T4676] syz.3.361: attempt to access beyond end of device [ 59.079569][ T4676] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 59.083680][ T29] audit: type=1400 audit(59.068:1978): avc: denied { connect } for pid=4683 comm="syz.1.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 59.093367][ T4676] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.120542][ T4676] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 59.129612][ T4687] syz.3.361: attempt to access beyond end of device [ 59.129612][ T4687] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.130174][ T4688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 59.156053][ T4689] netlink: 16 bytes leftover after parsing attributes in process `syz.1.366'. [ 59.163696][ T4687] syz.3.361: attempt to access beyond end of device [ 59.163696][ T4687] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.195351][ T4680] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 59.203242][ T4680] FAT-fs (loop5): Filesystem has been set read-only [ 59.222694][ T29] audit: type=1400 audit(59.108:1979): avc: denied { firmware_load } for pid=4683 comm="syz.1.366" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 59.233023][ T4684] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4684 comm=syz.1.366 [ 59.246854][ T29] audit: type=1400 audit(59.148:1980): avc: denied { write } for pid=4683 comm="syz.1.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.255357][ T4680] syz.5.363: attempt to access beyond end of device [ 59.255357][ T4680] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 59.286730][ T4676] syz.3.361: attempt to access beyond end of device [ 59.286730][ T4676] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.293509][ T4680] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 59.313671][ T4680] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 59.321596][ T4687] syz.3.361: attempt to access beyond end of device [ 59.321596][ T4687] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.337653][ T4680] syz.5.363: attempt to access beyond end of device [ 59.337653][ T4680] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.343554][ T4687] syz.3.361: attempt to access beyond end of device [ 59.343554][ T4687] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.369877][ T4676] syz.3.361: attempt to access beyond end of device [ 59.369877][ T4676] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.382285][ T4696] syz.5.363: attempt to access beyond end of device [ 59.382285][ T4696] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 59.504393][ T3409] kernel write not supported for file /input/event2 (pid: 3409 comm: kworker/1:4) [ 59.633217][ T4717] loop1: detected capacity change from 0 to 1024 [ 59.641789][ T4717] EXT4-fs: dax option not supported [ 59.828973][ T4724] loop0: detected capacity change from 0 to 512 [ 59.941338][ T4733] pim6reg: entered allmulticast mode [ 59.947395][ T4733] pim6reg: left allmulticast mode [ 60.050473][ T4731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.379'. [ 60.093605][ T4757] loop1: detected capacity change from 0 to 1024 [ 60.115980][ T4757] EXT4-fs: dax option not supported [ 60.360261][ T4779] loop2: detected capacity change from 0 to 128 [ 60.436494][ T4779] FAT-fs (loop2): Directory bread(block 32) failed [ 60.444213][ T4779] FAT-fs (loop2): Directory bread(block 33) failed [ 60.453641][ T4779] FAT-fs (loop2): Directory bread(block 34) failed [ 60.462505][ T4779] FAT-fs (loop2): Directory bread(block 35) failed [ 60.471563][ T4779] FAT-fs (loop2): Directory bread(block 36) failed [ 60.518457][ T4779] FAT-fs (loop2): Directory bread(block 37) failed [ 60.567143][ T4779] FAT-fs (loop2): Directory bread(block 38) failed [ 60.606161][ T4779] FAT-fs (loop2): Directory bread(block 39) failed [ 60.629401][ T4801] loop5: detected capacity change from 0 to 1024 [ 60.630856][ T4779] FAT-fs (loop2): Directory bread(block 40) failed [ 60.644623][ T4797] loop3: detected capacity change from 0 to 1024 [ 60.666191][ T4801] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 60.689138][ T4797] EXT4-fs: dax option not supported [ 60.703700][ T4779] FAT-fs (loop2): Directory bread(block 41) failed [ 60.741627][ T4801] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 60.782378][ T4801] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 60.794922][ T4801] EXT4-fs (loop5): This should not happen!! Data will be lost [ 60.794922][ T4801] [ 60.806460][ T4801] EXT4-fs (loop5): Total free blocks count 0 [ 60.812457][ T4801] EXT4-fs (loop5): Free/Dirty block details [ 60.818434][ T4801] EXT4-fs (loop5): free_blocks=4293918720 [ 60.824224][ T4801] EXT4-fs (loop5): dirty_blocks=192 [ 60.829629][ T4801] EXT4-fs (loop5): Block reservation details [ 60.835729][ T4801] EXT4-fs (loop5): i_reserved_data_blocks=12 [ 60.846105][ T4810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.401'. [ 60.882136][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 60.882233][ T29] audit: type=1326 audit(60.848:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 60.989406][ T3990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 60.998707][ T29] audit: type=1326 audit(60.848:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 61.021471][ T29] audit: type=1326 audit(60.868:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0784e0d590 code=0x7ffc0000 [ 61.044168][ T29] audit: type=1326 audit(60.868:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 61.060073][ T4809] loop3: detected capacity change from 0 to 128 [ 61.067016][ T29] audit: type=1326 audit(60.878:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 61.067048][ T29] audit: type=1326 audit(60.878:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 61.067073][ T29] audit: type=1326 audit(60.878:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 61.067210][ T29] audit: type=1326 audit(60.898:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 61.067235][ T29] audit: type=1326 audit(60.898:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 61.067261][ T29] audit: type=1326 audit(60.908:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4808 comm="syz.3.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 61.377872][ T4819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.404'. [ 61.661886][ T4809] FAT-fs (loop3): Directory bread(block 32) failed [ 61.669263][ T4828] loop5: detected capacity change from 0 to 8192 [ 61.810278][ T4809] FAT-fs (loop3): Directory bread(block 33) failed [ 61.823360][ T4835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.826620][ T4779] FAT-fs (loop2): Filesystem has been set read-only [ 61.834108][ T4835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.863899][ T4809] FAT-fs (loop3): Directory bread(block 34) failed [ 61.872410][ T4779] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 61.889650][ T4834] loop0: detected capacity change from 0 to 8192 [ 61.897350][ T4809] FAT-fs (loop3): Directory bread(block 35) failed [ 61.914424][ T4809] FAT-fs (loop3): Directory bread(block 36) failed [ 61.936565][ T4809] FAT-fs (loop3): Directory bread(block 37) failed [ 61.946846][ T4809] FAT-fs (loop3): Directory bread(block 38) failed [ 61.954753][ T4809] FAT-fs (loop3): Directory bread(block 39) failed [ 61.962910][ T4809] FAT-fs (loop3): Directory bread(block 40) failed [ 61.982148][ T4809] FAT-fs (loop3): Directory bread(block 41) failed [ 62.173350][ T4842] pimreg: entered allmulticast mode [ 62.279181][ T4842] loop2: detected capacity change from 0 to 512 [ 62.287719][ T4845] loop1: detected capacity change from 0 to 1024 [ 62.294599][ T4845] EXT4-fs: dax option not supported [ 62.332031][ T4842] EXT4-fs warning (device loop2): ext4_xattr_inode_get:542: inode #11: comm ,&#^%: ea_inode file size=4 entry size=6 [ 62.515859][ T4842] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 62.530001][ T4842] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm ,&#^%: corrupted inode contents [ 62.559972][ T4842] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #15: comm ,&#^%: mark_inode_dirty error [ 62.582622][ T4809] FAT-fs (loop3): Filesystem has been set read-only [ 62.592376][ T4809] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 62.601619][ T4842] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #15: comm ,&#^%: corrupted inode contents [ 62.606003][ T4842] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #15: comm ,&#^%: mark_inode_dirty error [ 62.645249][ T4842] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #15: comm ,&#^%: mark inode dirty (error -117) [ 62.660474][ T4842] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 62.670196][ T4842] EXT4-fs (loop2): 1 orphan inode deleted [ 62.679388][ T4842] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.693748][ T4842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.694800][ T4850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.713272][ T4850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.773725][ T4839] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.410'. [ 62.784158][ T4839] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 62.855814][ T4856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.415'. [ 62.898283][ T4862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 63.052582][ T4875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.420'. [ 63.063997][ T4875] netlink: 'syz.3.420': attribute type 10 has an invalid length. [ 63.106371][ T4881] loop3: detected capacity change from 0 to 1024 [ 63.114030][ T4881] EXT4-fs: dax option not supported [ 63.289319][ T4888] loop0: detected capacity change from 0 to 8192 [ 63.320698][ T4892] __nla_validate_parse: 1 callbacks suppressed [ 63.320716][ T4892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 63.410788][ T4890] loop3: detected capacity change from 0 to 128 [ 63.538024][ T4907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.434'. [ 63.644329][ T4921] loop5: detected capacity change from 0 to 128 [ 63.652099][ T4921] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 63.736450][ T4924] loop5: detected capacity change from 0 to 1024 [ 63.743243][ T4924] EXT4-fs: dax option not supported [ 63.844984][ T4890] FAT-fs (loop3): Directory bread(block 32) failed [ 63.860477][ T4932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 63.873498][ T4890] FAT-fs (loop3): Directory bread(block 33) failed [ 63.876325][ T4932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.441'. [ 63.942522][ T4936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.442'. [ 63.983206][ T4890] FAT-fs (loop3): Directory bread(block 34) failed [ 64.032292][ T4890] FAT-fs (loop3): Directory bread(block 35) failed [ 64.067159][ T4941] loop1: detected capacity change from 0 to 8192 [ 64.076340][ T4890] FAT-fs (loop3): Directory bread(block 36) failed [ 64.111236][ T4890] FAT-fs (loop3): Directory bread(block 37) failed [ 64.120231][ T4890] FAT-fs (loop3): Directory bread(block 38) failed [ 64.132803][ T4890] FAT-fs (loop3): Directory bread(block 39) failed [ 64.144419][ T4890] FAT-fs (loop3): Directory bread(block 40) failed [ 64.200832][ T4890] FAT-fs (loop3): Directory bread(block 41) failed [ 64.218672][ T4953] loop2: detected capacity change from 0 to 1024 [ 64.231526][ T4953] EXT4-fs: dax option not supported [ 64.260040][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.269279][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.448236][ T4963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.452'. [ 64.660104][ T4977] netlink: 'syz.5.455': attribute type 16 has an invalid length. [ 64.667925][ T4977] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.455'. [ 64.733616][ T4977] usb usb8: usbfs: process 4977 (syz.5.455) did not claim interface 0 before use [ 64.746230][ T4977] loop5: detected capacity change from 0 to 512 [ 64.753845][ T4977] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 64.788227][ T4977] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 64.890310][ T4977] EXT4-fs (loop5): 1 truncate cleaned up [ 64.941647][ T4977] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.092548][ T4993] loop0: detected capacity change from 0 to 8192 [ 65.341818][ T3990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.372737][ T4890] bio_check_eod: 10421 callbacks suppressed [ 65.372829][ T4890] syz.3.427: attempt to access beyond end of device [ 65.372829][ T4890] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 65.402399][ T4890] FAT-fs (loop3): Filesystem has been set read-only [ 65.442232][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.5.464'. [ 65.462275][ T4890] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 65.518355][ T5014] loop2: detected capacity change from 0 to 1024 [ 65.561486][ T5014] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.592482][ T5014] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 65.670811][ T5014] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 65.683649][ T5014] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.683649][ T5014] [ 65.693946][ T5014] EXT4-fs (loop2): Total free blocks count 0 [ 65.699966][ T5014] EXT4-fs (loop2): Free/Dirty block details [ 65.705962][ T5014] EXT4-fs (loop2): free_blocks=4293918720 [ 65.711725][ T5014] EXT4-fs (loop2): dirty_blocks=192 [ 65.717642][ T5014] EXT4-fs (loop2): Block reservation details [ 65.723720][ T5014] EXT4-fs (loop2): i_reserved_data_blocks=12 [ 65.787456][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.111455][ T5027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.147766][ T5027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.252253][ T5054] loop3: detected capacity change from 0 to 1024 [ 66.290821][ T5054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 66.332163][ T5054] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 66.347482][ T5054] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 66.360050][ T5054] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.360050][ T5054] [ 66.369815][ T5054] EXT4-fs (loop3): Total free blocks count 0 [ 66.375860][ T5054] EXT4-fs (loop3): Free/Dirty block details [ 66.381777][ T5054] EXT4-fs (loop3): free_blocks=4293918720 [ 66.387605][ T5054] EXT4-fs (loop3): dirty_blocks=192 [ 66.392825][ T5054] EXT4-fs (loop3): Block reservation details [ 66.398924][ T5054] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 66.479591][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.610046][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 66.610080][ T29] audit: type=1326 audit(66.598:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 66.645672][ T5077] FAULT_INJECTION: forcing a failure. [ 66.645672][ T5077] name failslab, interval 1, probability 0, space 0, times 0 [ 66.650296][ T29] audit: type=1326 audit(66.628:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 66.658365][ T5077] CPU: 0 UID: 0 PID: 5077 Comm: syz.0.488 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.658394][ T5077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 66.658415][ T5077] Call Trace: [ 66.658422][ T5077] [ 66.658430][ T5077] __dump_stack+0x1d/0x30 [ 66.658468][ T5077] dump_stack_lvl+0xe8/0x140 [ 66.658488][ T5077] dump_stack+0x15/0x1b [ 66.658505][ T5077] should_fail_ex+0x265/0x280 [ 66.658529][ T5077] should_failslab+0x8c/0xb0 [ 66.658553][ T5077] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 66.658653][ T5077] ? sidtab_sid2str_get+0xa0/0x130 [ 66.658676][ T5077] kmemdup_noprof+0x2b/0x70 [ 66.658702][ T5077] sidtab_sid2str_get+0xa0/0x130 [ 66.658724][ T5077] security_sid_to_context_core+0x1eb/0x2e0 [ 66.658791][ T5077] security_sid_to_context+0x27/0x40 [ 66.658811][ T5077] selinux_lsmprop_to_secctx+0x67/0xf0 [ 66.658833][ T5077] security_lsmprop_to_secctx+0x43/0x80 [ 66.658879][ T5077] audit_log_task_context+0x77/0x190 [ 66.658911][ T5077] audit_log_task+0xf4/0x250 [ 66.658939][ T5077] audit_seccomp+0x61/0x100 [ 66.659018][ T5077] ? __seccomp_filter+0x68c/0x10d0 [ 66.659039][ T5077] __seccomp_filter+0x69d/0x10d0 [ 66.659093][ T5077] ? alloc_pages_mpol+0x201/0x250 [ 66.659198][ T5077] ? __rcu_read_unlock+0x4f/0x70 [ 66.659218][ T5077] ? __mod_node_page_state+0x1c/0x80 [ 66.659253][ T5077] __secure_computing+0x82/0x150 [ 66.659331][ T5077] syscall_trace_enter+0xcf/0x1e0 [ 66.659355][ T5077] do_syscall_64+0xac/0x200 [ 66.659386][ T5077] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.659424][ T5077] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 66.659452][ T5077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.659527][ T5077] RIP: 0033:0x7ffb562ed63c [ 66.659542][ T5077] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.659560][ T5077] RSP: 002b:00007ffb54d4f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.659640][ T5077] RAX: ffffffffffffffda RBX: 00007ffb56535fa0 RCX: 00007ffb562ed63c [ 66.659653][ T5077] RDX: 000000000000000f RSI: 00007ffb54d4f0a0 RDI: 0000000000000005 [ 66.659665][ T5077] RBP: 00007ffb54d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.659678][ T5077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 66.659690][ T5077] R13: 00007ffb56536038 R14: 00007ffb56535fa0 R15: 00007ffd6d1678b8 [ 66.659708][ T5077] [ 66.659716][ T5077] audit: error in audit_log_task_context [ 66.681535][ T29] audit: type=1326 audit(66.628:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 66.921790][ T5085] loop1: detected capacity change from 0 to 512 [ 66.922247][ T29] audit: type=1326 audit(66.628:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 66.928274][ T5085] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.930986][ T29] audit: type=1326 audit(66.628:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 66.931023][ T29] audit: type=1326 audit(66.628:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 66.961743][ T5085] EXT4-fs (loop1): 1 truncate cleaned up [ 66.983234][ T29] audit: type=1326 audit(66.628:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb562ed590 code=0x7ffc0000 [ 66.983270][ T29] audit: type=1326 audit(66.638:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffb562ed6df code=0x7ffc0000 [ 66.983298][ T29] audit: type=1326 audit(66.638:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5076 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 66.996575][ T5085] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.623003][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.730830][ T5101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.744489][ T5101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.984772][ T5124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.504'. [ 69.168770][ T5119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.178287][ T5137] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -7136, delta: 1 [ 69.178305][ T5119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.187047][ T5137] ref_ctr increment failed for inode: 0x248 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810a2fdc00 [ 69.353179][ T5139] netlink: 16 bytes leftover after parsing attributes in process `syz.1.507'. [ 69.379961][ T5139] netlink: 'syz.1.507': attribute type 30 has an invalid length. [ 69.456527][ T5146] loop3: detected capacity change from 0 to 1024 [ 69.463313][ T5146] EXT4-fs: dax option not supported [ 69.509217][ T5148] loop3: detected capacity change from 0 to 1024 [ 69.544058][ T5148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 69.547268][ T5156] netlink: 684 bytes leftover after parsing attributes in process `syz.1.513'. [ 69.572595][ T5148] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 69.595541][ T5148] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 69.608127][ T5148] EXT4-fs (loop3): This should not happen!! Data will be lost [ 69.608127][ T5148] [ 69.617809][ T5148] EXT4-fs (loop3): Total free blocks count 0 [ 69.623800][ T5148] EXT4-fs (loop3): Free/Dirty block details [ 69.629889][ T5148] EXT4-fs (loop3): free_blocks=4293918720 [ 69.635646][ T5148] EXT4-fs (loop3): dirty_blocks=192 [ 69.640884][ T5148] EXT4-fs (loop3): Block reservation details [ 69.646940][ T5148] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 69.714377][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 69.824644][ T5175] pim6reg: entered allmulticast mode [ 69.843343][ T5170] netlink: 12 bytes leftover after parsing attributes in process `syz.3.518'. [ 69.860147][ T5175] pim6reg: left allmulticast mode [ 70.090716][ T5197] FAULT_INJECTION: forcing a failure. [ 70.090716][ T5197] name failslab, interval 1, probability 0, space 0, times 0 [ 70.103390][ T5197] CPU: 1 UID: 0 PID: 5197 Comm: syz.0.530 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.103452][ T5197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 70.103465][ T5197] Call Trace: [ 70.103472][ T5197] [ 70.103480][ T5197] __dump_stack+0x1d/0x30 [ 70.103525][ T5197] dump_stack_lvl+0xe8/0x140 [ 70.103546][ T5197] dump_stack+0x15/0x1b [ 70.103563][ T5197] should_fail_ex+0x265/0x280 [ 70.103590][ T5197] should_failslab+0x8c/0xb0 [ 70.103652][ T5197] kmem_cache_alloc_node_noprof+0x57/0x320 [ 70.103682][ T5197] ? __alloc_skb+0x101/0x320 [ 70.103705][ T5197] __alloc_skb+0x101/0x320 [ 70.103729][ T5197] netlink_dump+0x10d/0x8a0 [ 70.103752][ T5197] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 70.103856][ T5197] ? __skb_datagram_iter+0x46e/0x690 [ 70.103889][ T5197] netlink_recvmsg+0x420/0x550 [ 70.103917][ T5197] ? __pfx_sock_def_readable+0x10/0x10 [ 70.104026][ T5197] ? __pfx_netlink_recvmsg+0x10/0x10 [ 70.104053][ T5197] sock_recvmsg_nosec+0x104/0x130 [ 70.104087][ T5197] ____sys_recvmsg+0x26f/0x280 [ 70.104165][ T5197] ___sys_recvmsg+0x11f/0x370 [ 70.104199][ T5197] ? set_normalized_timespec64+0xe0/0x110 [ 70.104235][ T5197] do_recvmmsg+0x1ef/0x540 [ 70.104311][ T5197] __x64_sys_recvmmsg+0xfb/0x170 [ 70.104341][ T5197] x64_sys_call+0x27a6/0x2ff0 [ 70.104363][ T5197] do_syscall_64+0xd2/0x200 [ 70.104437][ T5197] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.104462][ T5197] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.104492][ T5197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.104522][ T5197] RIP: 0033:0x7ffb562eec29 [ 70.104540][ T5197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.104559][ T5197] RSP: 002b:00007ffb54d4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 70.104583][ T5197] RAX: ffffffffffffffda RBX: 00007ffb56535fa0 RCX: 00007ffb562eec29 [ 70.104598][ T5197] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 70.104612][ T5197] RBP: 00007ffb54d4f090 R08: 00002000000001c0 R09: 0000000000000000 [ 70.104626][ T5197] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 70.104644][ T5197] R13: 00007ffb56536038 R14: 00007ffb56535fa0 R15: 00007ffd6d1678b8 [ 70.104664][ T5197] [ 70.105055][ T5199] 9pnet_fd: Insufficient options for proto=fd [ 70.274568][ T5191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.443141][ T5191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.500189][ T5212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.536'. [ 70.678026][ T5231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'. [ 70.706436][ T5208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.749854][ T5208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.800554][ T5236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 70.831615][ T5242] 9pnet_fd: Insufficient options for proto=fd [ 70.854160][ T5233] loop5: detected capacity change from 0 to 128 [ 70.948094][ T5233] FAT-fs (loop5): Directory bread(block 32) failed [ 70.957398][ T5233] FAT-fs (loop5): Directory bread(block 33) failed [ 70.976231][ T5233] FAT-fs (loop5): Directory bread(block 34) failed [ 70.984521][ T5233] FAT-fs (loop5): Directory bread(block 35) failed [ 71.002808][ T5233] FAT-fs (loop5): Directory bread(block 36) failed [ 71.028683][ T5233] FAT-fs (loop5): Directory bread(block 37) failed [ 71.051066][ T5233] FAT-fs (loop5): Directory bread(block 38) failed [ 71.051086][ T5245] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5245 comm=syz.2.545 [ 71.117019][ T5233] FAT-fs (loop5): Directory bread(block 39) failed [ 71.127293][ T5233] FAT-fs (loop5): Directory bread(block 40) failed [ 71.131099][ T5250] loop1: detected capacity change from 0 to 1024 [ 71.134966][ T5233] FAT-fs (loop5): Directory bread(block 41) failed [ 71.168250][ T5250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 71.241552][ T5250] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 71.257875][ T5250] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 71.270617][ T5250] EXT4-fs (loop1): This should not happen!! Data will be lost [ 71.270617][ T5250] [ 71.280379][ T5250] EXT4-fs (loop1): Total free blocks count 0 [ 71.286462][ T5250] EXT4-fs (loop1): Free/Dirty block details [ 71.292367][ T5250] EXT4-fs (loop1): free_blocks=4293918720 [ 71.298236][ T5250] EXT4-fs (loop1): dirty_blocks=192 [ 71.303451][ T5250] EXT4-fs (loop1): Block reservation details [ 71.309516][ T5250] EXT4-fs (loop1): i_reserved_data_blocks=12 [ 71.498441][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.551168][ T5267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.551'. [ 71.590762][ T5273] syz_tun: refused to change device tx_queue_len [ 71.627192][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 71.627207][ T29] audit: type=1400 audit(71.618:2308): avc: denied { read } for pid=5274 comm="syz.2.555" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.655928][ T29] audit: type=1400 audit(71.618:2309): avc: denied { open } for pid=5274 comm="syz.2.555" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 71.682472][ T5275] loop2: detected capacity change from 0 to 128 [ 71.716921][ T5258] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5258 comm=syz.3.548 [ 71.723292][ T5275] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.785961][ T29] audit: type=1326 audit(71.668:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.2.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88492ec29 code=0x7ffc0000 [ 71.808789][ T29] audit: type=1326 audit(71.668:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.2.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa88492ec29 code=0x7ffc0000 [ 71.917202][ T5278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.948184][ T5278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.978985][ T29] audit: type=1400 audit(71.818:2312): avc: denied { write open } for pid=5274 comm="syz.2.555" path="/128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.044608][ T29] audit: type=1400 audit(71.828:2313): avc: denied { link } for pid=5274 comm="syz.2.555" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.086875][ T29] audit: type=1400 audit(71.828:2314): avc: denied { read } for pid=5274 comm="syz.2.555" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.129534][ T29] audit: type=1400 audit(71.828:2315): avc: denied { ioctl } for pid=5274 comm="syz.2.555" path="/128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 72.194333][ T29] audit: type=1326 audit(71.898:2316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5274 comm="syz.2.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa88492ec29 code=0x7ffc0000 [ 72.217263][ T29] audit: type=1400 audit(71.898:2317): avc: denied { create } for pid=5274 comm="syz.2.555" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 72.231002][ T5298] loop3: detected capacity change from 0 to 1024 [ 72.256219][ T5298] EXT4-fs: dax option not supported [ 72.282696][ T5285] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5285 comm=syz.0.557 [ 72.481534][ T5233] syz.5.542: attempt to access beyond end of device [ 72.481534][ T5233] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 72.497150][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.497339][ T5233] FAT-fs (loop5): Filesystem has been set read-only [ 72.524220][ T5233] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 72.608661][ T5302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.612282][ T5312] loop2: detected capacity change from 0 to 1024 [ 72.624373][ T5302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.652433][ T5312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.721049][ T5312] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 72.737221][ T5312] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 72.750359][ T5312] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.750359][ T5312] [ 72.760064][ T5312] EXT4-fs (loop2): Total free blocks count 0 [ 72.766070][ T5312] EXT4-fs (loop2): Free/Dirty block details [ 72.772004][ T5312] EXT4-fs (loop2): free_blocks=4293918720 [ 72.778486][ T5312] EXT4-fs (loop2): dirty_blocks=192 [ 72.783821][ T5312] EXT4-fs (loop2): Block reservation details [ 72.789894][ T5312] EXT4-fs (loop2): i_reserved_data_blocks=12 [ 72.863521][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.870389][ T5318] loop5: detected capacity change from 0 to 128 [ 72.933948][ T5327] netlink: 20 bytes leftover after parsing attributes in process `syz.2.570'. [ 72.947434][ T5329] loop0: detected capacity change from 0 to 1024 [ 72.954068][ T5329] EXT4-fs: dax option not supported [ 73.079326][ T5335] SELinux: security_context_str_to_sid () failed with errno=-22 [ 73.092481][ T5318] FAT-fs (loop5): Directory bread(block 32) failed [ 73.115596][ T5318] FAT-fs (loop5): Directory bread(block 33) failed [ 73.136558][ T5335] bridge0: entered promiscuous mode [ 73.141808][ T5335] macsec1: entered promiscuous mode [ 73.147468][ T5318] FAT-fs (loop5): Directory bread(block 34) failed [ 73.150039][ T5335] bridge0: port 3(macsec1) entered blocking state [ 73.159554][ T5318] FAT-fs (loop5): Directory bread(block 35) failed [ 73.161417][ T5335] bridge0: port 3(macsec1) entered disabled state [ 73.173967][ T5333] loop2: detected capacity change from 0 to 8192 [ 73.203455][ T5318] FAT-fs (loop5): Directory bread(block 36) failed [ 73.232946][ T5335] macsec1: entered allmulticast mode [ 73.232967][ T5335] bridge0: entered allmulticast mode [ 73.273033][ T5335] macsec1: left allmulticast mode [ 73.278164][ T5335] bridge0: left allmulticast mode [ 73.293082][ T5318] FAT-fs (loop5): Directory bread(block 37) failed [ 73.300001][ T5342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.320870][ T5335] bridge0: left promiscuous mode [ 73.322375][ T5318] FAT-fs (loop5): Directory bread(block 38) failed [ 73.333453][ T5342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.384297][ T5318] FAT-fs (loop5): Directory bread(block 39) failed [ 73.435549][ T5347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.577'. [ 73.457766][ T5318] FAT-fs (loop5): Directory bread(block 40) failed [ 73.476462][ T5318] FAT-fs (loop5): Directory bread(block 41) failed [ 73.741311][ T5357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.797085][ T5357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.923661][ T5371] loop0: detected capacity change from 0 to 1024 [ 73.986763][ T5371] EXT4-fs: dax option not supported [ 74.346224][ T5376] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5376 comm=syz.0.585 [ 74.403779][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.590'. [ 74.490633][ T5398] FAULT_INJECTION: forcing a failure. [ 74.490633][ T5398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.503826][ T5398] CPU: 0 UID: 0 PID: 5398 Comm: syz.1.592 Not tainted syzkaller #0 PREEMPT(voluntary) [ 74.503860][ T5398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 74.503871][ T5398] Call Trace: [ 74.503876][ T5398] [ 74.503884][ T5398] __dump_stack+0x1d/0x30 [ 74.503921][ T5398] dump_stack_lvl+0xe8/0x140 [ 74.504009][ T5398] dump_stack+0x15/0x1b [ 74.504025][ T5398] should_fail_ex+0x265/0x280 [ 74.504047][ T5398] should_fail+0xb/0x20 [ 74.504108][ T5398] should_fail_usercopy+0x1a/0x20 [ 74.504136][ T5398] _copy_to_user+0x20/0xa0 [ 74.504170][ T5398] simple_read_from_buffer+0xb5/0x130 [ 74.504274][ T5398] proc_fail_nth_read+0x10e/0x150 [ 74.504305][ T5398] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 74.504334][ T5398] vfs_read+0x1a5/0x770 [ 74.504358][ T5398] ? __rcu_read_unlock+0x4f/0x70 [ 74.504402][ T5398] ? __fget_files+0x184/0x1c0 [ 74.504473][ T5398] ksys_read+0xda/0x1a0 [ 74.504536][ T5398] __x64_sys_read+0x40/0x50 [ 74.504561][ T5398] x64_sys_call+0x27bc/0x2ff0 [ 74.504582][ T5398] do_syscall_64+0xd2/0x200 [ 74.504614][ T5398] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 74.504765][ T5398] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 74.504797][ T5398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.504822][ T5398] RIP: 0033:0x7f6f232bd63c [ 74.504847][ T5398] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 74.504938][ T5398] RSP: 002b:00007f6f21d27030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 74.504961][ T5398] RAX: ffffffffffffffda RBX: 00007f6f23505fa0 RCX: 00007f6f232bd63c [ 74.504976][ T5398] RDX: 000000000000000f RSI: 00007f6f21d270a0 RDI: 0000000000000004 [ 74.504989][ T5398] RBP: 00007f6f21d27090 R08: 0000000000000000 R09: 0000000000000000 [ 74.505000][ T5398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.505011][ T5398] R13: 00007f6f23506038 R14: 00007f6f23505fa0 R15: 00007ffcba7eb548 [ 74.505028][ T5398] [ 74.739852][ T5401] bridge0: entered allmulticast mode [ 74.772217][ T5318] syz.5.567: attempt to access beyond end of device [ 74.772217][ T5318] loop5: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 74.824794][ T5403] loop3: detected capacity change from 0 to 1024 [ 74.836601][ T5318] FAT-fs (loop5): Filesystem has been set read-only [ 74.867038][ T5407] loop0: detected capacity change from 0 to 1024 [ 74.872694][ T5318] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 74.879358][ T5407] EXT4-fs: dax option not supported [ 74.940378][ T5403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 74.984130][ T5403] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 75.010019][ T5403] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 75.022527][ T5403] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.022527][ T5403] [ 75.032413][ T5403] EXT4-fs (loop3): Total free blocks count 0 [ 75.038997][ T5403] EXT4-fs (loop3): Free/Dirty block details [ 75.045141][ T5403] EXT4-fs (loop3): free_blocks=4293918720 [ 75.051014][ T5403] EXT4-fs (loop3): dirty_blocks=192 [ 75.056298][ T5403] EXT4-fs (loop3): Block reservation details [ 75.062392][ T5403] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 75.095166][ T5420] loop1: detected capacity change from 0 to 256 [ 75.107217][ T5418] netlink: 16 bytes leftover after parsing attributes in process `syz.5.599'. [ 75.119285][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.356337][ T5431] loop2: detected capacity change from 0 to 1024 [ 75.400025][ T5431] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 75.472984][ T5425] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5425 comm=syz.3.602 [ 75.476169][ T5431] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 75.500518][ T5431] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 75.513001][ T5431] EXT4-fs (loop2): This should not happen!! Data will be lost [ 75.513001][ T5431] [ 75.522704][ T5431] EXT4-fs (loop2): Total free blocks count 0 [ 75.528783][ T5431] EXT4-fs (loop2): Free/Dirty block details [ 75.534787][ T5431] EXT4-fs (loop2): free_blocks=4293918720 [ 75.540584][ T5431] EXT4-fs (loop2): dirty_blocks=192 [ 75.545832][ T5431] EXT4-fs (loop2): Block reservation details [ 75.551842][ T5431] EXT4-fs (loop2): i_reserved_data_blocks=12 [ 75.568271][ T5440] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 75.579134][ T5440] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 75.660453][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 75.728773][ T5448] loop2: detected capacity change from 0 to 1024 [ 75.751596][ T5442] loop5: detected capacity change from 0 to 8192 [ 75.755696][ T5448] EXT4-fs: dax option not supported [ 75.853094][ T5452] netlink: 16 bytes leftover after parsing attributes in process `syz.2.613'. [ 75.884540][ T5456] loop3: detected capacity change from 0 to 164 [ 75.907427][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 75.934958][ T5464] loop2: detected capacity change from 0 to 164 [ 75.944301][ T5456] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 75.946947][ T5465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.973968][ T5464] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 75.986379][ T5456] FAULT_INJECTION: forcing a failure. [ 75.986379][ T5456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.000292][ T5456] CPU: 1 UID: 0 PID: 5456 Comm: syz.3.615 Not tainted syzkaller #0 PREEMPT(voluntary) [ 76.000322][ T5456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 76.000335][ T5456] Call Trace: [ 76.000341][ T5456] [ 76.000349][ T5456] __dump_stack+0x1d/0x30 [ 76.000370][ T5456] dump_stack_lvl+0xe8/0x140 [ 76.000388][ T5456] dump_stack+0x15/0x1b [ 76.000404][ T5456] should_fail_ex+0x265/0x280 [ 76.000467][ T5456] should_fail+0xb/0x20 [ 76.000490][ T5456] should_fail_usercopy+0x1a/0x20 [ 76.000513][ T5456] strncpy_from_user+0x25/0x230 [ 76.000593][ T5456] ? kmem_cache_alloc_noprof+0x186/0x310 [ 76.000620][ T5456] ? getname_flags+0x80/0x3b0 [ 76.000652][ T5456] getname_flags+0xae/0x3b0 [ 76.000684][ T5456] user_path_at+0x28/0x130 [ 76.000749][ T5456] do_fchownat+0xb0/0x210 [ 76.000776][ T5456] __x64_sys_chown+0x47/0x60 [ 76.000883][ T5456] x64_sys_call+0x2840/0x2ff0 [ 76.000987][ T5456] do_syscall_64+0xd2/0x200 [ 76.001017][ T5456] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 76.001126][ T5456] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 76.001210][ T5456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.001234][ T5456] RIP: 0033:0x7f0784e0ec29 [ 76.001252][ T5456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.001270][ T5456] RSP: 002b:00007f0783877038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 76.001372][ T5456] RAX: ffffffffffffffda RBX: 00007f0785055fa0 RCX: 00007f0784e0ec29 [ 76.001386][ T5456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 76.001479][ T5456] RBP: 00007f0783877090 R08: 0000000000000000 R09: 0000000000000000 [ 76.001492][ T5456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.001506][ T5456] R13: 00007f0785056038 R14: 00007f0785055fa0 R15: 00007ffd54896de8 [ 76.001526][ T5456] [ 76.002245][ T5464] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 76.096229][ T5465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.209826][ T5464] Symlink component flag not implemented [ 76.215524][ T5464] Symlink component flag not implemented [ 76.221690][ T5464] Symlink component flag not implemented (7) [ 76.227715][ T5464] Symlink component flag not implemented (116) [ 76.382417][ T5480] loop0: detected capacity change from 0 to 1024 [ 76.395907][ T5480] EXT4-fs: dax option not supported [ 76.637872][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 76.637887][ T29] audit: type=1326 audit(76.628:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 76.695724][ T29] audit: type=1326 audit(76.668:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 76.718416][ T29] audit: type=1326 audit(76.678:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 76.741384][ T29] audit: type=1326 audit(76.678:2452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 76.764026][ T29] audit: type=1326 audit(76.678:2453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 76.786736][ T29] audit: type=1326 audit(76.678:2454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 76.792131][ T5478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=5478 comm=syz.1.622 [ 76.809466][ T29] audit: type=1326 audit(76.678:2455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0784e0ec63 code=0x7ffc0000 [ 76.825522][ T5492] loop3: detected capacity change from 0 to 128 [ 76.857726][ T29] audit: type=1326 audit(76.808:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0784e0d6df code=0x7ffc0000 [ 76.880867][ T29] audit: type=1326 audit(76.808:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0784e0ecb7 code=0x7ffc0000 [ 76.903546][ T29] audit: type=1326 audit(76.808:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5490 comm="syz.3.628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0784e0d590 code=0x7ffc0000 [ 77.058073][ T5492] FAT-fs (loop3): Directory bread(block 32) failed [ 77.082798][ T5492] FAT-fs (loop3): Directory bread(block 33) failed [ 77.097385][ T5492] FAT-fs (loop3): Directory bread(block 34) failed [ 77.114848][ T5492] FAT-fs (loop3): Directory bread(block 35) failed [ 77.126768][ T5492] FAT-fs (loop3): Directory bread(block 36) failed [ 77.134866][ T5492] FAT-fs (loop3): Directory bread(block 37) failed [ 77.142673][ T5492] FAT-fs (loop3): Directory bread(block 38) failed [ 77.161375][ T5492] FAT-fs (loop3): Directory bread(block 39) failed [ 77.176361][ T5492] FAT-fs (loop3): Directory bread(block 40) failed [ 77.218479][ T5492] FAT-fs (loop3): Directory bread(block 41) failed [ 77.292886][ T5510] loop2: detected capacity change from 0 to 8192 [ 77.430320][ T5516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.439227][ T5516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.913308][ T5492] syz.3.628: attempt to access beyond end of device [ 77.913308][ T5492] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 77.927022][ T5492] FAT-fs (loop3): Filesystem has been set read-only [ 77.934163][ T5492] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 78.124718][ T5529] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=5529 comm=syz.3.643 [ 78.210162][ T5541] loop3: detected capacity change from 0 to 1024 [ 78.236134][ T5537] loop1: detected capacity change from 0 to 8192 [ 78.255729][ T5541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 78.292500][ T5541] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 78.326910][ T5541] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 78.339468][ T5541] EXT4-fs (loop3): This should not happen!! Data will be lost [ 78.339468][ T5541] [ 78.349266][ T5541] EXT4-fs (loop3): Total free blocks count 0 [ 78.355322][ T5541] EXT4-fs (loop3): Free/Dirty block details [ 78.361235][ T5541] EXT4-fs (loop3): free_blocks=4293918720 [ 78.367086][ T5541] EXT4-fs (loop3): dirty_blocks=192 [ 78.372339][ T5541] EXT4-fs (loop3): Block reservation details [ 78.378403][ T5541] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 78.391830][ T5551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.401717][ T5551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.460171][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 78.584040][ T5565] loop0: detected capacity change from 0 to 512 [ 78.591863][ T5565] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.608213][ T5565] EXT4-fs (loop0): 1 truncate cleaned up [ 78.614496][ T5565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.695682][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.774753][ T5574] loop2: detected capacity change from 0 to 8192 [ 78.801776][ T5578] mmap: syz.0.658 (5578) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 78.856591][ T5578] loop0: detected capacity change from 0 to 1024 [ 78.907288][ T5585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.925939][ T5585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.973447][ T5587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.661'. [ 78.995625][ T5592] loop3: detected capacity change from 0 to 1024 [ 79.076253][ T5592] EXT4-fs: dax option not supported [ 79.247197][ T5601] FAULT_INJECTION: forcing a failure. [ 79.247197][ T5601] name failslab, interval 1, probability 0, space 0, times 0 [ 79.260001][ T5601] CPU: 1 UID: 0 PID: 5601 Comm: syz.3.666 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.260034][ T5601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.260048][ T5601] Call Trace: [ 79.260056][ T5601] [ 79.260065][ T5601] __dump_stack+0x1d/0x30 [ 79.260128][ T5601] dump_stack_lvl+0xe8/0x140 [ 79.260146][ T5601] dump_stack+0x15/0x1b [ 79.260162][ T5601] should_fail_ex+0x265/0x280 [ 79.260190][ T5601] should_failslab+0x8c/0xb0 [ 79.260285][ T5601] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 79.260318][ T5601] ? sidtab_sid2str_get+0xa0/0x130 [ 79.260356][ T5601] kmemdup_noprof+0x2b/0x70 [ 79.260386][ T5601] sidtab_sid2str_get+0xa0/0x130 [ 79.260443][ T5601] security_sid_to_context_core+0x1eb/0x2e0 [ 79.260465][ T5601] security_sid_to_context+0x27/0x40 [ 79.260509][ T5601] avc_audit_post_callback+0x10f/0x520 [ 79.260583][ T5601] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 79.260607][ T5601] common_lsm_audit+0x1bb/0x230 [ 79.260695][ T5601] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 79.260726][ T5601] slow_avc_audit+0x104/0x140 [ 79.260751][ T5601] audit_inode_permission+0x111/0x150 [ 79.260848][ T5601] selinux_inode_permission+0x69b/0x740 [ 79.260885][ T5601] security_inode_permission+0x6d/0xb0 [ 79.260922][ T5601] inode_permission+0x106/0x310 [ 79.261054][ T5601] ? may_open+0x243/0x350 [ 79.261076][ T5601] may_open+0x255/0x350 [ 79.261176][ T5601] path_openat+0x1b4a/0x2170 [ 79.261254][ T5601] ? mntput+0x4b/0x80 [ 79.261288][ T5601] ? terminate_walk+0x27f/0x2a0 [ 79.261325][ T5601] do_filp_open+0x109/0x230 [ 79.261356][ T5601] do_open_execat+0xd8/0x260 [ 79.261463][ T5601] alloc_bprm+0x25/0x350 [ 79.261483][ T5601] do_execveat_common+0x12e/0x750 [ 79.261504][ T5601] ? getname_flags+0x154/0x3b0 [ 79.261533][ T5601] __x64_sys_execveat+0x73/0x90 [ 79.261556][ T5601] x64_sys_call+0x1fec/0x2ff0 [ 79.261621][ T5601] do_syscall_64+0xd2/0x200 [ 79.261657][ T5601] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.261687][ T5601] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.261766][ T5601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.261788][ T5601] RIP: 0033:0x7f0784e0ec29 [ 79.261807][ T5601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.261828][ T5601] RSP: 002b:00007f0783877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 79.261851][ T5601] RAX: ffffffffffffffda RBX: 00007f0785055fa0 RCX: 00007f0784e0ec29 [ 79.261863][ T5601] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 79.261896][ T5601] RBP: 00007f0783877090 R08: 0000000000000000 R09: 0000000000000000 [ 79.261970][ T5601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 79.261982][ T5601] R13: 00007f0785056038 R14: 00007f0785055fa0 R15: 00007ffd54896de8 [ 79.261999][ T5601] [ 79.559693][ T5601] process 'syz.3.666' launched './file1' with NULL argv: empty string added [ 79.569809][ T5604] FAULT_INJECTION: forcing a failure. [ 79.569809][ T5604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.582956][ T5604] CPU: 0 UID: 0 PID: 5604 Comm: syz.5.668 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.582987][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 79.582999][ T5604] Call Trace: [ 79.583006][ T5604] [ 79.583014][ T5604] __dump_stack+0x1d/0x30 [ 79.583116][ T5604] dump_stack_lvl+0xe8/0x140 [ 79.583156][ T5604] dump_stack+0x15/0x1b [ 79.583176][ T5604] should_fail_ex+0x265/0x280 [ 79.583202][ T5604] should_fail+0xb/0x20 [ 79.583224][ T5604] should_fail_usercopy+0x1a/0x20 [ 79.583257][ T5604] _copy_from_user+0x1c/0xb0 [ 79.583284][ T5604] __se_sys_mount+0x10d/0x2e0 [ 79.583389][ T5604] ? fput+0x8f/0xc0 [ 79.583423][ T5604] ? ksys_write+0x192/0x1a0 [ 79.583448][ T5604] __x64_sys_mount+0x67/0x80 [ 79.583474][ T5604] x64_sys_call+0x2b4d/0x2ff0 [ 79.583497][ T5604] do_syscall_64+0xd2/0x200 [ 79.583543][ T5604] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 79.583620][ T5604] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 79.583755][ T5604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.583779][ T5604] RIP: 0033:0x7f489156ec29 [ 79.583816][ T5604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.583843][ T5604] RSP: 002b:00007f488ffcf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 79.583867][ T5604] RAX: ffffffffffffffda RBX: 00007f48917b5fa0 RCX: 00007f489156ec29 [ 79.583882][ T5604] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 79.583894][ T5604] RBP: 00007f488ffcf090 R08: 0000200000000240 R09: 0000000000000000 [ 79.583906][ T5604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.583917][ T5604] R13: 00007f48917b6038 R14: 00007f48917b5fa0 R15: 00007ffe303108a8 [ 79.584009][ T5604] [ 79.846898][ T5616] netlink: 372 bytes leftover after parsing attributes in process `syz.0.679'. [ 79.856449][ T5616] netlink: 14 bytes leftover after parsing attributes in process `syz.0.679'. [ 79.883818][ T5616] hsr_slave_0: left promiscuous mode [ 79.890906][ T5616] hsr_slave_1: left promiscuous mode [ 80.152082][ T5617] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5617 comm=syz.3.671 [ 80.212297][ T5619] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5619 comm=syz.0.672 [ 80.290759][ T5627] loop0: detected capacity change from 0 to 1024 [ 80.325862][ T5627] EXT4-fs: dax option not supported [ 80.376623][ T5621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.389806][ T5621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.454894][ T5636] loop0: detected capacity change from 0 to 128 [ 80.542518][ T5638] loop3: detected capacity change from 0 to 128 [ 80.567087][ T5636] FAT-fs (loop0): Directory bread(block 32) failed [ 80.575550][ T5636] FAT-fs (loop0): Directory bread(block 33) failed [ 80.584689][ T5636] FAT-fs (loop0): Directory bread(block 34) failed [ 80.592859][ T5636] FAT-fs (loop0): Directory bread(block 35) failed [ 80.604012][ T5636] FAT-fs (loop0): Directory bread(block 36) failed [ 80.613680][ T5636] FAT-fs (loop0): Directory bread(block 37) failed [ 80.622302][ T5643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.683'. [ 80.654300][ T5636] FAT-fs (loop0): Directory bread(block 38) failed [ 80.666520][ T5636] FAT-fs (loop0): Directory bread(block 39) failed [ 80.677721][ T5636] FAT-fs (loop0): Directory bread(block 40) failed [ 80.685267][ T5636] FAT-fs (loop0): Directory bread(block 41) failed [ 80.690019][ T5638] FAT-fs (loop3): Directory bread(block 32) failed [ 80.716082][ T5638] FAT-fs (loop3): Directory bread(block 33) failed [ 80.724436][ T5638] FAT-fs (loop3): Directory bread(block 34) failed [ 80.733622][ T5638] FAT-fs (loop3): Directory bread(block 35) failed [ 80.743105][ T5638] FAT-fs (loop3): Directory bread(block 36) failed [ 80.751818][ T5638] FAT-fs (loop3): Directory bread(block 37) failed [ 80.761375][ T5638] FAT-fs (loop3): Directory bread(block 38) failed [ 80.770449][ T5638] FAT-fs (loop3): Directory bread(block 39) failed [ 80.779345][ T5638] FAT-fs (loop3): Directory bread(block 40) failed [ 80.788513][ T5638] FAT-fs (loop3): Directory bread(block 41) failed [ 81.153641][ T5656] loop5: detected capacity change from 0 to 1024 [ 81.212543][ T5656] EXT4-fs: dax option not supported [ 81.227724][ T5652] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5652 comm=syz.1.686 [ 81.268868][ T5661] loop2: detected capacity change from 0 to 512 [ 81.367130][ T5661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.411757][ T5661] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.690: corrupted inode contents [ 81.439130][ T5661] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.690: mark_inode_dirty error [ 81.494506][ T5661] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.690: corrupted inode contents [ 81.538400][ T5661] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.690: corrupted inode contents [ 81.579406][ T5638] syz.3.681: attempt to access beyond end of device [ 81.579406][ T5638] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 81.596617][ T5661] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.690: mark_inode_dirty error [ 81.618173][ T5638] FAT-fs (loop3): Filesystem has been set read-only [ 81.648767][ T5661] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.690: corrupted inode contents [ 81.659696][ T5638] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 81.670841][ T5661] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.690: mark_inode_dirty error [ 81.671035][ T5661] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.690: corrupted inode contents [ 81.671173][ T5661] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.690: mark_inode_dirty error [ 81.702685][ T5636] syz.0.680: attempt to access beyond end of device [ 81.702685][ T5636] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 81.706727][ T5636] FAT-fs (loop0): Filesystem has been set read-only [ 81.708243][ T5636] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 81.729842][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 81.729857][ T29] audit: type=1400 audit(81.718:2486): avc: denied { setcurrent } for pid=5660 comm="syz.2.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 81.791301][ T29] audit: type=1401 audit(81.778:2487): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 81.834660][ T5677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.695'. [ 81.844776][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.000745][ T5683] loop5: detected capacity change from 0 to 8192 [ 82.149482][ T5704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.161987][ T5704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.198375][ T5693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.212011][ T5703] loop3: detected capacity change from 0 to 8192 [ 82.255659][ T5693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.368168][ T5706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.377250][ T5706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.389400][ T5701] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=5701 comm=syz.1.703 [ 82.558149][ T5711] netlink: 'syz.1.706': attribute type 19 has an invalid length. [ 82.566605][ T5711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.706'. [ 82.598028][ T29] audit: type=1326 audit(82.588:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f232bec29 code=0x7ffc0000 [ 82.624455][ T29] audit: type=1326 audit(82.608:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f232bec29 code=0x7ffc0000 [ 82.647289][ T29] audit: type=1326 audit(82.608:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f232bec29 code=0x7ffc0000 [ 82.670008][ T29] audit: type=1326 audit(82.608:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f232bec29 code=0x7ffc0000 [ 82.692670][ T29] audit: type=1326 audit(82.608:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f232bec29 code=0x7ffc0000 [ 82.715640][ T29] audit: type=1326 audit(82.608:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f6f232bec29 code=0x7ffc0000 [ 82.738278][ T29] audit: type=1326 audit(82.608:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f232bec29 code=0x7ffc0000 [ 82.761020][ T29] audit: type=1326 audit(82.608:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5712 comm="syz.1.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6f232bd590 code=0x7ffc0000 [ 82.882435][ T5715] loop2: detected capacity change from 0 to 128 [ 82.934409][ T5719] loop1: detected capacity change from 0 to 8192 [ 83.146883][ T5715] FAT-fs (loop2): Directory bread(block 32) failed [ 83.160537][ T5715] FAT-fs (loop2): Directory bread(block 33) failed [ 83.169674][ T5715] FAT-fs (loop2): Directory bread(block 34) failed [ 83.183197][ T5715] FAT-fs (loop2): Directory bread(block 35) failed [ 83.198130][ T5715] FAT-fs (loop2): Directory bread(block 36) failed [ 83.205937][ T5715] FAT-fs (loop2): Directory bread(block 37) failed [ 83.213768][ T5715] FAT-fs (loop2): Directory bread(block 38) failed [ 83.270779][ T5715] FAT-fs (loop2): Directory bread(block 39) failed [ 83.286494][ T5715] FAT-fs (loop2): Directory bread(block 40) failed [ 83.293950][ T5715] FAT-fs (loop2): Directory bread(block 41) failed [ 83.641652][ T5737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.718'. [ 83.781960][ T5743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=5743 comm=syz.0.721 [ 83.867564][ T5741] loop1: detected capacity change from 0 to 1024 [ 83.901762][ T5741] EXT4-fs: dax option not supported [ 83.967191][ T5754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.724'. [ 83.978899][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.724'. [ 83.988361][ T5754] netlink: 'syz.0.724': attribute type 30 has an invalid length. [ 84.008523][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.034519][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.062684][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.071918][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.118335][ T5765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'. [ 84.130703][ T5763] loop1: detected capacity change from 0 to 8192 [ 84.278473][ T5715] syz.2.708: attempt to access beyond end of device [ 84.278473][ T5715] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 84.281990][ T5775] program gtp is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.294991][ T5715] FAT-fs (loop2): Filesystem has been set read-only [ 84.306658][ T5775] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 84.332015][ T5715] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 84.425184][ T5778] netlink: 'syz.2.732': attribute type 49 has an invalid length. [ 84.460871][ T5775] netlink: 14 bytes leftover after parsing attributes in process `gtp'. [ 84.469563][ T5775] hsr_slave_0: left promiscuous mode [ 84.475565][ T5775] hsr_slave_1: left promiscuous mode [ 84.533332][ T5786] bridge_slave_0: left allmulticast mode [ 84.539099][ T5786] bridge_slave_0: left promiscuous mode [ 84.544898][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.571175][ T5786] bridge_slave_1: left allmulticast mode [ 84.576941][ T5786] bridge_slave_1: left promiscuous mode [ 84.582699][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.627814][ T5786] bond0: (slave bond_slave_0): Releasing backup interface [ 84.682668][ T5799] loop0: detected capacity change from 0 to 8192 [ 84.692167][ T5786] bond0: (slave bond_slave_1): Releasing backup interface [ 84.718746][ T5786] team0: Port device team_slave_0 removed [ 84.731879][ T5786] team0: Port device team_slave_1 removed [ 84.738938][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.747175][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.756515][ T5786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.763929][ T5786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.824906][ T5810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.837228][ T5810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.855285][ T5811] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 85.009534][ T5817] __nla_validate_parse: 1 callbacks suppressed [ 85.009552][ T5817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.740'. [ 85.024660][ T5823] netlink: 'syz.5.744': attribute type 4 has an invalid length. [ 85.042922][ T5823] netlink: 'syz.5.744': attribute type 4 has an invalid length. [ 85.045873][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 85.059444][ T5817] netlink: 'syz.3.740': attribute type 30 has an invalid length. [ 85.117327][ T5826] FAULT_INJECTION: forcing a failure. [ 85.117327][ T5826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.130519][ T5826] CPU: 0 UID: 0 PID: 5826 Comm: syz.1.745 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.130553][ T5826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.130623][ T5826] Call Trace: [ 85.130631][ T5826] [ 85.130640][ T5826] __dump_stack+0x1d/0x30 [ 85.130663][ T5826] dump_stack_lvl+0xe8/0x140 [ 85.130682][ T5826] dump_stack+0x15/0x1b [ 85.130697][ T5826] should_fail_ex+0x265/0x280 [ 85.130815][ T5826] should_fail+0xb/0x20 [ 85.130836][ T5826] should_fail_usercopy+0x1a/0x20 [ 85.130865][ T5826] _copy_from_user+0x1c/0xb0 [ 85.130916][ T5826] io_submit_one+0x52/0x11d0 [ 85.130948][ T5826] __se_sys_io_submit+0xfb/0x280 [ 85.130980][ T5826] __x64_sys_io_submit+0x43/0x50 [ 85.131008][ T5826] x64_sys_call+0x2d5d/0x2ff0 [ 85.131097][ T5826] do_syscall_64+0xd2/0x200 [ 85.131126][ T5826] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 85.131181][ T5826] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 85.131215][ T5826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.131239][ T5826] RIP: 0033:0x7f6f232bec29 [ 85.131284][ T5826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.131304][ T5826] RSP: 002b:00007f6f21d27038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 85.131325][ T5826] RAX: ffffffffffffffda RBX: 00007f6f23505fa0 RCX: 00007f6f232bec29 [ 85.131339][ T5826] RDX: 0000200000001700 RSI: 0000000000000002 RDI: 00007f6f24040000 [ 85.131363][ T5826] RBP: 00007f6f21d27090 R08: 0000000000000000 R09: 0000000000000000 [ 85.131375][ T5826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.131444][ T5826] R13: 00007f6f23506038 R14: 00007f6f23505fa0 R15: 00007ffcba7eb548 [ 85.131465][ T5826] [ 85.319894][ T31] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.330921][ T31] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.374549][ T38] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.385325][ T38] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.426818][ T5833] loop3: detected capacity change from 0 to 1024 [ 85.470563][ T5833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 85.519225][ T5837] loop1: detected capacity change from 0 to 8192 [ 85.553525][ T5833] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 85.582238][ T5833] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 85.594837][ T5833] EXT4-fs (loop3): This should not happen!! Data will be lost [ 85.594837][ T5833] [ 85.604531][ T5833] EXT4-fs (loop3): Total free blocks count 0 [ 85.610573][ T5833] EXT4-fs (loop3): Free/Dirty block details [ 85.616515][ T5833] EXT4-fs (loop3): free_blocks=4293918720 [ 85.622257][ T5833] EXT4-fs (loop3): dirty_blocks=192 [ 85.627512][ T5833] EXT4-fs (loop3): Block reservation details [ 85.633511][ T5833] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 85.665153][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 85.843169][ T5856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.753'. [ 85.952974][ T5850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.962508][ T5850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.051911][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.755'. [ 86.065328][ T5867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.755'. [ 86.074170][ T51] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.088778][ T51] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.111529][ T51] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.140686][ T51] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.321979][ T5869] loop1: detected capacity change from 0 to 128 [ 86.348239][ T5871] netlink: 16 bytes leftover after parsing attributes in process `syz.3.757'. [ 86.370820][ T5871] netlink: 'syz.3.757': attribute type 30 has an invalid length. [ 86.425040][ T5869] FAT-fs (loop1): Directory bread(block 32) failed [ 86.433209][ T5869] FAT-fs (loop1): Directory bread(block 33) failed [ 86.441750][ T5869] FAT-fs (loop1): Directory bread(block 34) failed [ 86.449405][ T5869] FAT-fs (loop1): Directory bread(block 35) failed [ 86.459191][ T5869] FAT-fs (loop1): Directory bread(block 36) failed [ 86.468403][ T5869] FAT-fs (loop1): Directory bread(block 37) failed [ 86.476854][ T5869] FAT-fs (loop1): Directory bread(block 38) failed [ 86.485046][ T5869] FAT-fs (loop1): Directory bread(block 39) failed [ 86.531739][ T5869] FAT-fs (loop1): Directory bread(block 40) failed [ 86.547828][ T5869] FAT-fs (loop1): Directory bread(block 41) failed [ 86.716105][ T5874] loop3: detected capacity change from 0 to 128 [ 86.939153][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 86.939168][ T29] audit: type=1326 audit(86.918:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 86.995765][ T29] audit: type=1326 audit(86.938:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 87.018591][ T29] audit: type=1326 audit(86.938:2553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 87.041357][ T29] audit: type=1326 audit(86.938:2554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 87.063969][ T29] audit: type=1326 audit(86.938:2555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 87.086611][ T29] audit: type=1326 audit(86.938:2556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 87.109440][ T29] audit: type=1326 audit(86.938:2557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 87.132257][ T29] audit: type=1326 audit(86.958:2558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 87.156890][ T29] audit: type=1326 audit(86.958:2559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb562eec29 code=0x7ffc0000 [ 87.179532][ T29] audit: type=1326 audit(87.008:2560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5879 comm="syz.0.762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb562ed590 code=0x7ffc0000 [ 87.233155][ T5874] FAT-fs (loop3): Directory bread(block 32) failed [ 87.241568][ T5874] FAT-fs (loop3): Directory bread(block 33) failed [ 87.260377][ T5874] FAT-fs (loop3): Directory bread(block 34) failed [ 87.285445][ T5874] FAT-fs (loop3): Directory bread(block 35) failed [ 87.299557][ T5874] FAT-fs (loop3): Directory bread(block 36) failed [ 87.321638][ T5874] FAT-fs (loop3): Directory bread(block 37) failed [ 87.378374][ T5874] FAT-fs (loop3): Directory bread(block 38) failed [ 87.421848][ T5874] FAT-fs (loop3): Directory bread(block 39) failed [ 87.470828][ T5874] FAT-fs (loop3): Directory bread(block 40) failed [ 87.493408][ T5874] FAT-fs (loop3): Directory bread(block 41) failed [ 87.648673][ T5893] 9pnet: Unknown protocol version 9p20F@W°Š [ 87.758179][ T5869] syz.1.756: attempt to access beyond end of device [ 87.758179][ T5869] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 87.796291][ T5869] FAT-fs (loop1): Filesystem has been set read-only [ 87.818163][ T5869] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 87.839206][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.768'. [ 88.009025][ T5905] loop1: detected capacity change from 0 to 8192 [ 88.123679][ T5917] loop5: detected capacity change from 0 to 1024 [ 88.134556][ T5918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.144371][ T5917] EXT4-fs: dax option not supported [ 88.171267][ T5918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.260964][ T5920] loop5: detected capacity change from 0 to 1024 [ 88.299820][ T5920] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 88.351344][ T5920] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 88.367851][ T5920] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 88.380374][ T5920] EXT4-fs (loop5): This should not happen!! Data will be lost [ 88.380374][ T5920] [ 88.390051][ T5920] EXT4-fs (loop5): Total free blocks count 0 [ 88.396686][ T5920] EXT4-fs (loop5): Free/Dirty block details [ 88.402593][ T5920] EXT4-fs (loop5): free_blocks=4293918720 [ 88.408368][ T5920] EXT4-fs (loop5): dirty_blocks=192 [ 88.413613][ T5920] EXT4-fs (loop5): Block reservation details [ 88.419676][ T5920] EXT4-fs (loop5): i_reserved_data_blocks=12 [ 88.463667][ T3990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 88.481805][ T5874] syz.3.759: attempt to access beyond end of device [ 88.481805][ T5874] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 88.507887][ T5874] FAT-fs (loop3): Filesystem has been set read-only [ 88.530650][ T5874] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 88.587470][ T5926] veth0: entered promiscuous mode [ 88.603958][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.775'. [ 88.867650][ T5933] loop2: detected capacity change from 0 to 8192 [ 88.953570][ T5940] loop0: detected capacity change from 0 to 128 [ 88.997041][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.020434][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.156876][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.782'. [ 89.179465][ T5940] FAT-fs (loop0): Directory bread(block 32) failed [ 89.207303][ T5956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.784'. [ 89.209088][ T5940] FAT-fs (loop0): Directory bread(block 33) failed [ 89.218766][ T5956] netlink: 'syz.3.784': attribute type 30 has an invalid length. [ 89.239550][ T5940] FAT-fs (loop0): Directory bread(block 34) failed [ 89.247779][ T5940] FAT-fs (loop0): Directory bread(block 35) failed [ 89.257867][ T5940] FAT-fs (loop0): Directory bread(block 36) failed [ 89.265467][ T5940] FAT-fs (loop0): Directory bread(block 37) failed [ 89.273214][ T5940] FAT-fs (loop0): Directory bread(block 38) failed [ 89.281988][ T5940] FAT-fs (loop0): Directory bread(block 39) failed [ 89.289707][ T5940] FAT-fs (loop0): Directory bread(block 40) failed [ 89.297768][ T5940] FAT-fs (loop0): Directory bread(block 41) failed [ 89.323594][ T5958] loop3: detected capacity change from 0 to 1024 [ 89.341112][ T5958] EXT4-fs: dax option not supported [ 89.410964][ T5960] loop3: detected capacity change from 0 to 1024 [ 89.438979][ T5960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.462966][ T5960] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 89.480222][ T5960] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 89.492941][ T5960] EXT4-fs (loop3): This should not happen!! Data will be lost [ 89.492941][ T5960] [ 89.502834][ T5960] EXT4-fs (loop3): Total free blocks count 0 [ 89.509467][ T5960] EXT4-fs (loop3): Free/Dirty block details [ 89.515428][ T5960] EXT4-fs (loop3): free_blocks=4293918720 [ 89.521180][ T5960] EXT4-fs (loop3): dirty_blocks=192 [ 89.526409][ T5960] EXT4-fs (loop3): Block reservation details [ 89.532531][ T5960] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 89.598577][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 89.617451][ T5965] veth0: entered promiscuous mode [ 89.830666][ T5973] loop1: detected capacity change from 0 to 8192 [ 89.899114][ T5940] syz.0.780: attempt to access beyond end of device [ 89.899114][ T5940] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 89.989089][ T5940] FAT-fs (loop0): Filesystem has been set read-only [ 90.001857][ T5940] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 90.033767][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.044252][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.207059][ T5998] loop3: detected capacity change from 0 to 1024 [ 90.215950][ T5996] __nla_validate_parse: 2 callbacks suppressed [ 90.215968][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.797'. [ 90.241297][ T5994] loop5: detected capacity change from 0 to 8192 [ 90.256189][ T5998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 90.269758][ T5996] netlink: 'syz.0.797': attribute type 30 has an invalid length. [ 90.361664][ T5998] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 90.377015][ T5998] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 90.390084][ T5998] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.390084][ T5998] [ 90.399758][ T5998] EXT4-fs (loop3): Total free blocks count 0 [ 90.405838][ T5998] EXT4-fs (loop3): Free/Dirty block details [ 90.411748][ T5998] EXT4-fs (loop3): free_blocks=4293918720 [ 90.418111][ T5998] EXT4-fs (loop3): dirty_blocks=192 [ 90.423315][ T5998] EXT4-fs (loop3): Block reservation details [ 90.429337][ T5998] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 90.498026][ T6007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.513048][ T6003] loop2: detected capacity change from 0 to 8192 [ 90.528160][ T6007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.554717][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 90.660764][ T6006] loop0: detected capacity change from 0 to 128 [ 90.784778][ T6006] FAT-fs (loop0): Directory bread(block 32) failed [ 90.793894][ T6006] FAT-fs (loop0): Directory bread(block 33) failed [ 90.804030][ T6006] FAT-fs (loop0): Directory bread(block 34) failed [ 90.812130][ T6006] FAT-fs (loop0): Directory bread(block 35) failed [ 90.821164][ T6006] FAT-fs (loop0): Directory bread(block 36) failed [ 90.829555][ T6006] FAT-fs (loop0): Directory bread(block 37) failed [ 90.837820][ T6006] FAT-fs (loop0): Directory bread(block 38) failed [ 90.845867][ T6006] FAT-fs (loop0): Directory bread(block 39) failed [ 90.853409][ T6006] FAT-fs (loop0): Directory bread(block 40) failed [ 90.862157][ T6006] FAT-fs (loop0): Directory bread(block 41) failed [ 91.353989][ T6015] loop3: detected capacity change from 0 to 1024 [ 91.465186][ T6015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 91.509243][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.810'. [ 91.549626][ T6015] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 91.595327][ T6015] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 91.607945][ T6015] EXT4-fs (loop3): This should not happen!! Data will be lost [ 91.607945][ T6015] [ 91.617638][ T6015] EXT4-fs (loop3): Total free blocks count 0 [ 91.620177][ T6020] loop1: detected capacity change from 0 to 128 [ 91.623710][ T6015] EXT4-fs (loop3): Free/Dirty block details [ 91.623731][ T6015] EXT4-fs (loop3): free_blocks=4293918720 [ 91.623748][ T6015] EXT4-fs (loop3): dirty_blocks=192 [ 91.623763][ T6015] EXT4-fs (loop3): Block reservation details [ 91.623799][ T6015] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 91.634718][ T6037] loop2: detected capacity change from 0 to 1024 [ 91.635165][ T6037] EXT4-fs: dax option not supported [ 91.772285][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 91.796523][ T6041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.816'. [ 91.842878][ T6041] netlink: 'syz.0.816': attribute type 10 has an invalid length. [ 91.850729][ T6041] netlink: 40 bytes leftover after parsing attributes in process `syz.0.816'. [ 91.863414][ T6043] loop2: detected capacity change from 0 to 8192 [ 91.864862][ T6041] batman_adv: batadv0: Adding interface: veth1_vlan [ 91.876469][ T6041] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.902570][ T6041] batman_adv: batadv0: Interface activated: veth1_vlan [ 91.977315][ T6020] FAT-fs (loop1): Directory bread(block 32) failed [ 91.991213][ T6020] FAT-fs (loop1): Directory bread(block 33) failed [ 92.068537][ T6020] FAT-fs (loop1): Directory bread(block 34) failed [ 92.077049][ T6020] FAT-fs (loop1): Directory bread(block 35) failed [ 92.102170][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 92.102187][ T29] audit: type=1326 audit(92.088:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6046 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489156ec29 code=0x7ffc0000 [ 92.120771][ T6020] FAT-fs (loop1): Directory bread(block 36) failed [ 92.154547][ T29] audit: type=1326 audit(92.098:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6046 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489156ec29 code=0x7ffc0000 [ 92.178186][ T29] audit: type=1326 audit(92.098:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6046 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489156ec29 code=0x7ffc0000 [ 92.180344][ T6020] FAT-fs (loop1): Directory bread(block 37) failed [ 92.200915][ T29] audit: type=1326 audit(92.098:2692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6046 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f489156ec29 code=0x7ffc0000 [ 92.201013][ T29] audit: type=1326 audit(92.098:2693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6046 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489156ec29 code=0x7ffc0000 [ 92.201068][ T29] audit: type=1326 audit(92.098:2694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6046 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f489156ec29 code=0x7ffc0000 [ 92.201096][ T29] audit: type=1326 audit(92.098:2695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6046 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489156ec29 code=0x7ffc0000 [ 92.201122][ T29] audit: type=1326 audit(92.098:2696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6046 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f489156ec29 code=0x7ffc0000 [ 92.201146][ T29] audit: type=1326 audit(92.108:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6046 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f489156ec29 code=0x7ffc0000 [ 92.201215][ T29] audit: type=1326 audit(92.108:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6046 comm="syz.5.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f489156d590 code=0x7ffc0000 [ 92.383849][ T6020] FAT-fs (loop1): Directory bread(block 38) failed [ 92.392609][ T6020] FAT-fs (loop1): Directory bread(block 39) failed [ 92.406816][ T6049] loop5: detected capacity change from 0 to 128 [ 92.431726][ T6020] FAT-fs (loop1): Directory bread(block 40) failed [ 92.447352][ T6020] FAT-fs (loop1): Directory bread(block 41) failed [ 92.557414][ T6062] netlink: 12 bytes leftover after parsing attributes in process `syz.2.824'. [ 92.673939][ T6049] FAT-fs (loop5): Directory bread(block 32) failed [ 92.761324][ T6078] veth0: entered promiscuous mode [ 92.767968][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.830'. [ 92.768643][ T6049] FAT-fs (loop5): Directory bread(block 33) failed [ 92.806410][ T6073] loop0: detected capacity change from 0 to 8192 [ 92.816071][ T6049] FAT-fs (loop5): Directory bread(block 34) failed [ 92.849918][ T6049] FAT-fs (loop5): Directory bread(block 35) failed [ 92.885585][ T6049] FAT-fs (loop5): Directory bread(block 36) failed [ 92.894628][ T6081] loop2: detected capacity change from 0 to 1024 [ 92.901789][ T6049] FAT-fs (loop5): Directory bread(block 37) failed [ 92.929308][ T6049] FAT-fs (loop5): Directory bread(block 38) failed [ 92.929316][ T6081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 92.989815][ T6081] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 93.015053][ T6085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.035763][ T6085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.039356][ T6049] FAT-fs (loop5): Directory bread(block 39) failed [ 93.051984][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.832'. [ 93.060949][ T6081] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 93.073435][ T6081] EXT4-fs (loop2): This should not happen!! Data will be lost [ 93.073435][ T6081] [ 93.083222][ T6081] EXT4-fs (loop2): Total free blocks count 0 [ 93.089242][ T6081] EXT4-fs (loop2): Free/Dirty block details [ 93.095146][ T6081] EXT4-fs (loop2): free_blocks=4293918720 [ 93.100916][ T6081] EXT4-fs (loop2): dirty_blocks=192 [ 93.106144][ T6081] EXT4-fs (loop2): Block reservation details [ 93.112155][ T6081] EXT4-fs (loop2): i_reserved_data_blocks=12 [ 93.119497][ T6049] FAT-fs (loop5): Directory bread(block 40) failed [ 93.128557][ T6049] FAT-fs (loop5): Directory bread(block 41) failed [ 93.251660][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 93.373778][ T6098] loop3: detected capacity change from 0 to 8192 [ 93.809702][ T6020] syz.1.808: attempt to access beyond end of device [ 93.809702][ T6020] loop1: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 93.826330][ T6020] FAT-fs (loop1): Filesystem has been set read-only [ 93.834446][ T6020] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 94.101886][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.841'. [ 94.141564][ T6122] 9pnet_fd: Insufficient options for proto=fd [ 94.228134][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.842'. [ 94.271874][ T6130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.846'. [ 94.288309][ T6135] loop3: detected capacity change from 0 to 1024 [ 94.308636][ T6135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 94.361385][ T6135] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 94.376372][ T6135] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 94.389032][ T6135] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.389032][ T6135] [ 94.398734][ T6135] EXT4-fs (loop3): Total free blocks count 0 [ 94.404754][ T6135] EXT4-fs (loop3): Free/Dirty block details [ 94.410738][ T6135] EXT4-fs (loop3): free_blocks=4293918720 [ 94.416511][ T6135] EXT4-fs (loop3): dirty_blocks=192 [ 94.421792][ T6135] EXT4-fs (loop3): Block reservation details [ 94.427901][ T6135] EXT4-fs (loop3): i_reserved_data_blocks=12 [ 94.466177][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 94.530053][ T6147] loop2: detected capacity change from 0 to 128 [ 94.672093][ T6156] 9pnet_fd: Insufficient options for proto=fd [ 94.723303][ T6157] loop3: detected capacity change from 0 to 128 [ 94.772739][ T6147] FAT-fs (loop2): Directory bread(block 32) failed [ 94.802015][ T6157] FAT-fs (loop3): Directory bread(block 32) failed [ 94.808862][ T6157] FAT-fs (loop3): Directory bread(block 33) failed [ 94.808899][ T6147] FAT-fs (loop2): Directory bread(block 33) failed [ 94.823637][ T6157] FAT-fs (loop3): Directory bread(block 34) failed [ 94.826904][ T6147] FAT-fs (loop2): Directory bread(block 34) failed [ 94.838972][ T6157] FAT-fs (loop3): Directory bread(block 35) failed [ 94.839888][ T6147] FAT-fs (loop2): Directory bread(block 35) failed [ 94.860931][ T6147] FAT-fs (loop2): Directory bread(block 36) failed [ 94.868269][ T6157] FAT-fs (loop3): Directory bread(block 36) failed [ 94.868295][ T6157] FAT-fs (loop3): Directory bread(block 37) failed [ 94.868323][ T6157] FAT-fs (loop3): Directory bread(block 38) failed [ 94.868343][ T6157] FAT-fs (loop3): Directory bread(block 39) failed [ 94.868384][ T6157] FAT-fs (loop3): Directory bread(block 40) failed [ 94.868421][ T6157] FAT-fs (loop3): Directory bread(block 41) failed [ 94.914608][ T6147] FAT-fs (loop2): Directory bread(block 37) failed [ 94.923001][ T6147] FAT-fs (loop2): Directory bread(block 38) failed [ 94.930493][ T6147] FAT-fs (loop2): Directory bread(block 39) failed [ 94.950409][ T6161] loop1: detected capacity change from 0 to 8192 [ 94.957994][ T6147] FAT-fs (loop2): Directory bread(block 40) failed [ 94.970519][ T6147] FAT-fs (loop2): Directory bread(block 41) failed [ 95.325755][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.334202][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.590001][ T6193] pimreg: entered allmulticast mode [ 95.657814][ T6147] syz.2.850: attempt to access beyond end of device [ 95.657814][ T6147] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 95.700158][ T6147] FAT-fs (loop2): Filesystem has been set read-only [ 95.741139][ T6200] 9pnet_fd: Insufficient options for proto=fd [ 95.752588][ T6147] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 95.769974][ T6191] loop0: detected capacity change from 0 to 512 [ 95.791137][ T6191] EXT4-fs warning (device loop0): ext4_xattr_inode_get:542: inode #11: comm syz.0.873: ea_inode file size=4 entry size=6 [ 95.791370][ T6191] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.873: corrupted inode contents [ 95.791527][ T6191] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #15: comm syz.0.873: mark_inode_dirty error [ 95.791748][ T6191] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #15: comm syz.0.873: corrupted inode contents [ 95.791951][ T6191] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #15: comm syz.0.873: mark_inode_dirty error [ 95.792146][ T6191] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #15: comm syz.0.873: mark inode dirty (error -117) [ 95.792306][ T6191] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 95.792340][ T6191] EXT4-fs (loop0): 1 orphan inode deleted [ 95.792826][ T6191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.793723][ T6191] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.847432][ T6204] loop1: detected capacity change from 0 to 1024 [ 95.883399][ T6191] __nla_validate_parse: 2 callbacks suppressed [ 95.883416][ T6191] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.873'. [ 95.899375][ T6204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 95.907714][ T6191] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 96.005708][ T6204] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 96.022527][ T6204] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 186 with error 28 [ 96.035052][ T6204] EXT4-fs (loop1): This should not happen!! Data will be lost [ 96.035052][ T6204] [ 96.044778][ T6204] EXT4-fs (loop1): Total free blocks count 0 [ 96.047227][ T6210] netlink: 'syz.2.869': attribute type 16 has an invalid length. [ 96.050839][ T6204] EXT4-fs (loop1): Free/Dirty block details [ 96.058537][ T6210] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.869'. [ 96.064445][ T6204] EXT4-fs (loop1): free_blocks=4293918720 [ 96.079338][ T6204] EXT4-fs (loop1): dirty_blocks=192 [ 96.084551][ T6204] EXT4-fs (loop1): Block reservation details [ 96.090569][ T6204] EXT4-fs (loop1): i_reserved_data_blocks=12 [ 96.139254][ T6210] usb usb8: usbfs: process 6210 (syz.2.869) did not claim interface 0 before use [ 96.168896][ T6210] loop2: detected capacity change from 0 to 512 [ 96.188586][ T6210] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.189427][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 96.203089][ T6210] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 96.232917][ T6210] EXT4-fs (loop2): 1 truncate cleaned up [ 96.239247][ T6210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.614336][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.636108][ T6233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.655382][ T6233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.736566][ T6245] loop2: detected capacity change from 0 to 128 [ 96.781087][ T6245] FAT-fs (loop2): Directory bread(block 32) failed [ 96.790956][ T6240] loop5: detected capacity change from 0 to 8192 [ 96.797725][ T6245] FAT-fs (loop2): Directory bread(block 33) failed [ 96.814416][ T6245] FAT-fs (loop2): Directory bread(block 34) failed [ 96.831275][ T6245] FAT-fs (loop2): Directory bread(block 35) failed [ 96.838227][ T6245] FAT-fs (loop2): Directory bread(block 36) failed [ 96.844990][ T6245] FAT-fs (loop2): Directory bread(block 37) failed [ 96.859861][ T6245] FAT-fs (loop2): Directory bread(block 38) failed [ 96.866584][ T6245] FAT-fs (loop2): Directory bread(block 39) failed [ 96.873271][ T6245] FAT-fs (loop2): Directory bread(block 40) failed [ 96.881099][ T6245] FAT-fs (loop2): Directory bread(block 41) failed [ 96.884094][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.884'. [ 96.940371][ T6242] syz.2.881: attempt to access beyond end of device [ 96.940371][ T6242] loop2: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 96.962025][ T6258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.966082][ T6242] FAT-fs (loop2): Filesystem has been set read-only [ 96.972044][ T6258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.987553][ T6242] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 97.269287][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.894'. [ 97.483986][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 97.484004][ T29] audit: type=1326 audit(97.468:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 97.582253][ T29] audit: type=1326 audit(97.468:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 97.605036][ T29] audit: type=1326 audit(97.468:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 97.627715][ T29] audit: type=1326 audit(97.468:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 97.650318][ T29] audit: type=1326 audit(97.468:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 97.673077][ T29] audit: type=1326 audit(97.468:2783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 97.695737][ T29] audit: type=1326 audit(97.468:2784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 97.718509][ T29] audit: type=1326 audit(97.468:2785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 97.741289][ T29] audit: type=1326 audit(97.468:2786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0784e0ec29 code=0x7ffc0000 [ 97.764076][ T29] audit: type=1326 audit(97.468:2787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6273 comm="syz.3.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0784e0d590 code=0x7ffc0000 [ 97.796966][ T6289] 9pnet_fd: Insufficient options for proto=fd [ 97.816456][ T6287] veth0: entered promiscuous mode [ 97.829991][ T6286] veth0: left promiscuous mode [ 97.840617][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'. [ 97.863698][ T6297] loop1: detected capacity change from 0 to 1024 [ 97.901171][ T6297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 98.017264][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 98.069602][ T6320] 9pnet_fd: Insufficient options for proto=fd [ 98.131795][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz.2.911'. [ 98.259609][ T6321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.271631][ T6321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.363961][ T6339] veth0: entered promiscuous mode [ 98.370299][ T6338] veth0: left promiscuous mode [ 98.471583][ T6348] loop5: detected capacity change from 0 to 1024 [ 98.500148][ T6348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 98.573028][ T6362] 9pnet_fd: Insufficient options for proto=fd [ 98.581928][ T3990] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 98.626713][ T6366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.923'. [ 98.686811][ T6372] loop2: detected capacity change from 0 to 8192 [ 98.807796][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.819304][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.993363][ T6380] loop0: detected capacity change from 0 to 8192 [ 99.060689][ T6393] loop1: detected capacity change from 0 to 1024 [ 99.088986][ T6393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.120924][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 99.162029][ T6406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.174397][ T6406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.179041][ T6407] 9pnet_fd: Insufficient options for proto=fd [ 99.335110][ T6415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'. [ 99.586016][ T6419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.598986][ T6419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.623577][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.942'. [ 99.917890][ T6441] loop1: detected capacity change from 0 to 1024 [ 99.936293][ T3534] ================================================================== [ 99.944314][ T6441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.944413][ T3534] BUG: KCSAN: data-race in _copy_to_iter / _copy_to_iter [ 99.944450][ T3534] [ 99.944457][ T3534] write to 0xffff88811d09e000 of 1024 bytes by task 51 on cpu 1: [ 99.973462][ T3534] _copy_to_iter+0x602/0xe70 [ 99.978070][ T3534] copy_page_to_iter+0x18f/0x2d0 [ 99.983015][ T3534] shmem_file_read_iter+0x2d6/0x540 [ 99.988223][ T3534] lo_rw_aio+0x69d/0x760 [ 99.992468][ T3534] loop_process_work+0x52d/0xa60 [ 99.997413][ T3534] loop_workfn+0x31/0x40 [ 100.001658][ T3534] process_scheduled_works+0x4cb/0x9d0 [ 100.007131][ T3534] worker_thread+0x582/0x770 [ 100.011733][ T3534] kthread+0x489/0x510 [ 100.015801][ T3534] ret_from_fork+0x11f/0x1b0 [ 100.020390][ T3534] ret_from_fork_asm+0x1a/0x30 [ 100.025157][ T3534] [ 100.027480][ T3534] read to 0xffff88811d09e000 of 512 bytes by task 3534 on cpu 0: [ 100.035197][ T3534] _copy_to_iter+0x130/0xe70 [ 100.039811][ T3534] copy_page_to_iter+0x18f/0x2d0 [ 100.044757][ T3534] filemap_read+0x407/0xa00 [ 100.049262][ T3534] blkdev_read_iter+0x22d/0x2e0 [ 100.054125][ T3534] vfs_read+0x64c/0x770 [ 100.058286][ T3534] ksys_read+0xda/0x1a0 [ 100.062442][ T3534] __x64_sys_read+0x40/0x50 [ 100.066945][ T3534] x64_sys_call+0x27bc/0x2ff0 [ 100.071622][ T3534] do_syscall_64+0xd2/0x200 [ 100.076226][ T3534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.082127][ T3534] [ 100.084446][ T3534] Reported by Kernel Concurrency Sanitizer on: [ 100.090600][ T3534] CPU: 0 UID: 0 PID: 3534 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.099970][ T3534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 100.110024][ T3534] ================================================================== [ 100.135130][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.