last executing test programs: 2.244617226s ago: executing program 0 (id=1266): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c00030026ad3dc548f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20050890) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write(r1, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea9", 0x28) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x855) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.946597122s ago: executing program 1 (id=1267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000440)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.927327673s ago: executing program 1 (id=1268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf00000000000005"]) 1.845496664s ago: executing program 1 (id=1269): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xd9}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x2}]}) 1.772460325s ago: executing program 1 (id=1270): syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x20, 0x5, 0x1b4}, &(0x7f0000000140), 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x579700e17cdd9421, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8811}, 0x8054) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xeb46, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r5, 0x0) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) 1.738897786s ago: executing program 1 (id=1271): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file1\x00', 0x8084, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xb, 0x170, &(0x7f0000000780)="$eJzs2z+LE0EYB+B3Tdy70+ZqsViwsQpqZanICeKCoqTQSuG0uZMDr1mt8ims/YKCpErlSLIh0ZAQgmY3XJ6nyQs/knkn7B9mYN7d/nR2enH58eLlMA6zLLqPoohfWRzHtehEbRAAwFUySil+ppTSwSCOvkdKqe2OAIBtG+XTwvsfAPbG2vX/w5YaAwC2xv4/AOyf12/ePn9clieviuIw4seg6lf9+rPOnz4rT+4VE8fzbw2rqt+Z5ffrvPg7vx43pvmDpXked+/U+Th78qJcyG/G6fanDwAAAHuhV8wsXd/3eqvyuvpjf2Bh/d6NW93GpgEAbODyy9ez9+fnHz43UBxNRsyaHXSz4lsLf8vOFp3YiTYUa4vxJfu/f7nNpxLQhPlN33YnAAAAAAAAAAAAAADAKv94VCiPiCVRRL7uZMFB41MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmd8BAAD//27zPto=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x10000) syz_open_pts(r0, 0x101000) chdir(&(0x7f00000001c0)='./bus\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x101201, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r4, 0x1004}], 0x1, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000600)=0x14) close(r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000380), &(0x7f00000005c0)=r3}, 0x20) sendmsg$unix(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) socket$inet6(0xa, 0x80000, 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1.373654713s ago: executing program 4 (id=1276): r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r0) 1.372821743s ago: executing program 0 (id=1277): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x2) r2 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) r3 = socket$inet(0x2, 0x1, 0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000300)={0x27, 0x0, 0x1, 0x3, 0x2, 0xf, "c7cde812b360b4c0a229ccbdf58306941c1138dafbe4213794b7f4c73a3eb79f2e616e1e11a2e92e03e5e20acfc20f4e800cd9e9b3a1fd3acd9e491fde1f2a", 0x17}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000180), 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) fcntl$addseals(r2, 0x409, 0xb) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r5, 0x6, 0x10, &(0x7f0000000440)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) listen(0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x800) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@private1, @in6}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000580)=0xe8) 1.367273604s ago: executing program 4 (id=1279): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x5, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0xe6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r7, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="2d96368edd1a"], 0x4c}}, 0x0) 1.289382975s ago: executing program 3 (id=1280): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) setreuid(0xee01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf00000000000005"]) 1.097545769s ago: executing program 0 (id=1281): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xd9}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x2}]}) 1.04794241s ago: executing program 4 (id=1282): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10000000000100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) unshare(0x22020600) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.02661162s ago: executing program 0 (id=1283): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 952.069982ms ago: executing program 0 (id=1285): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$eJzs28tvG8UfAPDvrp3219cvpiqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCgpC5YgqcUcckfgLOMEFASckrnBHlSrUSwsno7V3E8exncQ4ccGfj7TJzO5EM1/vjD2zEwcwtMayH0nE7oj4NSJGG9mVBcYav+7cujLz560rM0nUam/8kdTL3b51ZaYoWvzdriJTjkg/SeJgm3oXLl0+N12tzl3M8xOL59+dWLh0+Zmz56fPzJ2ZuzB18uTxY5PPnZh6ti9xZnHdPvDB/KH9r7x1/bWZU9ff/vHrpIi/JY4+Get28fFarc/VDdaepnRSHmBD2JBSY5jGSH38j0Yplm/eaLz88UAbB2yqWq1Wu6/z5as14D8siUG3ABiM4oM+W/8WxxZNPe4KN19oLICyuO/kR+NKOdK8zEjL+rafxiLi1NW/vsiO2JznEAAAK3ybzX+ebjf/S6P5udD/8z2USkTcExF7I+JEROyLiHsj6mXvj4gHNlh/6ybJ6vlPeqOnwNYpm/89n+9trZz/FbO/qJTy3J56/CPJ6bPVuaP5a3IkRrZn+ckudXz30i+fdbrWPP/Ljqz+Yi6Yt+NGeXufgm3j5kcRB8rt4k+WdgKSiNgfEQd6rOPsk18d6nRt7fi76MM+U+3LiCca9/9qtMRfSLrvT078L6pzRyeKXrHaTz9fe71T/euKP/nncXaS3f+dEVF0sdXx76kkzfu1Cxuv49pvn3Zc0/TS/2enF6e3JW+uOPf+9OLixcmIbcmr9Xyl+fxUS7mp5fJZ/EcOtx//e2P5lTgYEVknfjAiHoqIh/O2PxIRj0bE4S7x//DiY+/0Hv/myuKfbfv+t9TpWu7/cmJbtJ5pnyid+/6bFZVWNhJ/dv+P11NH8jPZ/V8rrvW0q7feDAAAAP8+aUTsjiQdX0qn6fh443/498XOtDq/sPjU6fn3Lsw2viNQiZG0eNI12vQ8dDJf1hf5sZb8sfy58eelHfX8+Mx8dXbQwcOQ29Vh/Gd+Lw26dcCm830tGF7GPwwv4x+Gl/EPw6vN+N8xiHYAW6/d5/+HA2gHsPVaxr9tPxgi1v8wvMrW+zC0fP7DUFrYEWt/SV5CYlUi0ruiGRI9JtKI6FZm0O9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/fF3AAAA//+edt38") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf00000000000005"]) 951.550912ms ago: executing program 2 (id=1286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) 890.427902ms ago: executing program 2 (id=1287): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000006c0), &(0x7f0000000500)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) r5 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) io_uring_enter(r5, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000000040), &(0x7f0000000080)={'U-', 0x7fff}, 0x16, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r9}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r8}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) syz_io_uring_setup(0x120f, &(0x7f0000000900)={0x0, 0x43b7, 0x10000, 0x4, 0x80003e4}, &(0x7f0000000300), &(0x7f0000000580)) 851.623773ms ago: executing program 1 (id=1288): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c00030026ad3dc548f0d8e54d23edfcbe6d55b57cb15e63c10080000000000000abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x20050890) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) write(r1, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea9", 0x28) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)}, 0x855) recvmsg$unix(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 551.04527ms ago: executing program 0 (id=1289): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000200)=[{&(0x7f00000000c0)="ee", 0xfe23}], 0x1}}], 0x400000000000181, 0x9200000000000080) recvmmsg(r1, &(0x7f0000001f40)=[{{0x0, 0xfffffffffffffff0, &(0x7f0000000040)}, 0xbe58}, {{&(0x7f00000013c0)=@alg, 0x80, 0x0, 0x17, &(0x7f0000004100)=""/4096, 0x1000}}], 0x2, 0x7fffedc0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x105) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x289) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20008}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f000001d540)=ANY=[@ANYBLOB="1400000076001f03010001000000000004002c80"], 0x14}], 0x1}, 0x0) cachestat(r3, &(0x7f0000000140)={0xff, 0x8}, &(0x7f00000001c0), 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r4, &(0x7f0000005100)=""/4112, 0x1010) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000001ec0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40814) 485.225721ms ago: executing program 2 (id=1290): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0xb, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x804000, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r2, 0x0) 479.917831ms ago: executing program 3 (id=1291): syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x20, 0x5, 0x1b4}, &(0x7f0000000140), &(0x7f0000000300)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x579700e17cdd9421, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8811}, 0x8054) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xeb46, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r5, 0x0) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB='\x00'/16, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) 385.341193ms ago: executing program 3 (id=1292): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1253, &(0x7f0000002e00)="$eJzs3U1rXFUcB+B/kqaTpiYTtda2IB50U0GGJgs3ugmSgnRAaTtCKwhTM9Ex15mQOwRGxNaVWz+HCCK4U8SdbrLxGwjusnFZQXolM5o3MoOjaQfK82xyuOf+Ts6Ze+6FM5zL7Lz2xUfra3llrd6JyYmJmNyISPdTpJiMf9yLl1796efnbty6fW25Wl25ntLV5ZuLr6SU5p//4Z1Pvnrhx87Zt7+d/64U2wvv7vy+9Nv2+e2LOw9uftDMUzNPrXYn1dOddrtTv5M10mozX6+k9FbWqOeN1Gzljc1D9WtZe2Ojm+qt1bnZjc1Gnqd6q5vWG93UaafOZjfV3683W6lSqaS52WB0p/ZKtS/vF0URURTTcTqKoijOxGycjSdiLuajHAvxZDwVT8e5eCbOx7NxIb759etuMTHW7gMAAAAAAAAAAAAAAAAAAMBj51+8/3/h4Pv/F3tnjbvXAAAAAAAAAAAAAAAAAAAA8Hi5cev2teVqdeV6SjMR2edbta1a/2+/fnktmpHt/+B/sadfvvpGdeVK6lmIz7K7f+fvbtWmDuSjEYtRjpePzy/28+lwvhSzB/NLUY5zx+WnYyml3Q4eyc/E5RcP5CtRjl/ei3Zksdobx/7//3QxpdffrB7JX+qdN9jUw70wAAAAcIIqac+x6/dKZVB9P99bX3//IOJKlOPPod8PHFpf72YvnRrr0ImIvPvxej3LGpsKxxYuDzunNDw+Eyfbn9MnOcDpiBgt9UdRFIeOTPbnz5kR23m0hdrRI9P/ac4PvlNKETFCg7uP1f0jExFDJkl5sn+TDmvww0FV9/7nRzfuJxOPwv5FH3dPAAAAAAAAAAAAGMXAbYClYTsEp0baTjjuMQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+xA8cCAAAAAML8rdPo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KsAAAD//7z1xAc=") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa20000000000000702000004000000b72eff0008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000480)=ANY=[], 0x2000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) remap_file_pages(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x100000c, 0x9, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a4c000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a300000000018000480140001800a000100696e6e6572000000040002800500070000000000001100010000000000000000000000000a000000"], 0x74}, 0x1, 0x0, 0x0, 0xc090}, 0x4080080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) 372.988723ms ago: executing program 2 (id=1293): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x5, 0xfffffffc, 0xb95b5ec032cc8e84, 0x0, 0xe6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="4005000000000000180012800b0001006772657461700000080002800400120008000a00", @ANYRES32=r7, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="2d96368edd1a"], 0x4c}}, 0x0) 284.922035ms ago: executing program 3 (id=1294): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xd9}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x2}]}) 189.073687ms ago: executing program 4 (id=1295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) 170.923397ms ago: executing program 3 (id=1296): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 168.535677ms ago: executing program 4 (id=1297): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 149.147748ms ago: executing program 3 (id=1298): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_dev$loop(&(0x7f00000003c0), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000500000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r6}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000050000000800000018110000", @ANYRES32=r7, @ANYRESHEX=r6], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xfee, &(0x7f0000001e00)=""/4078, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) 148.779027ms ago: executing program 4 (id=1299): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000059c0)='./bus\x00', 0x1400e, &(0x7f0000000100)={[{@quota}]}, 0x1, 0x441, &(0x7f00000009c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) writev(r1, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000600)=ANY=[@ANYBLOB="09000000000000000dcf00000000000005"]) 45.184159ms ago: executing program 2 (id=1300): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000440)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 0s ago: executing program 2 (id=1301): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000006c0), &(0x7f0000000500)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) r5 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) io_uring_enter(r5, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) r8 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) fsetxattr$trusted_overlay_nlink(r10, &(0x7f0000000040), &(0x7f0000000080)={'U-', 0x7fff}, 0x16, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r9}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r8}, &(0x7f0000000400), &(0x7f0000000440)=r1}, 0x20) syz_io_uring_setup(0x120f, &(0x7f0000000900)={0x0, 0x43b7, 0x10000, 0x4, 0x80003e4}, &(0x7f0000000300), &(0x7f0000000580)) kernel console output (not intermixed with test programs): action is not started [ 86.393635][ T5264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.394656][ T5273] 9pnet_fd: Insufficient options for proto=fd [ 86.429805][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.441017][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.479914][ T5276] unsupported nla_type 52263 [ 87.340844][ T5292] loop0: detected capacity change from 0 to 512 [ 87.357394][ T5292] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 87.385256][ T5292] EXT4-fs (loop0): 1 truncate cleaned up [ 87.399376][ T5292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.515736][ T5299] loop1: detected capacity change from 0 to 512 [ 87.539191][ T5299] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 87.561880][ T5299] EXT4-fs (loop1): 1 truncate cleaned up [ 87.568112][ T5299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.636484][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.673764][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.749479][ T5290] loop3: detected capacity change from 0 to 512 [ 87.768471][ T5313] 9pnet_fd: Insufficient options for proto=fd [ 87.776284][ T5290] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.812128][ T5290] EXT4-fs (loop3): 1 truncate cleaned up [ 87.818336][ T5290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.840431][ T5287] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.573: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 87.867626][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 87.876824][ T5319] bridge_slave_1: left allmulticast mode [ 87.882679][ T5319] bridge_slave_1: left promiscuous mode [ 87.888784][ T5319] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.902580][ T5319] bridge_slave_0: left allmulticast mode [ 87.908381][ T5319] bridge_slave_0: left promiscuous mode [ 87.914262][ T5319] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.945477][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.975149][ T5323] loop2: detected capacity change from 0 to 8192 [ 88.024010][ T5327] loop1: detected capacity change from 0 to 512 [ 88.041710][ T5329] loop9: detected capacity change from 0 to 7 [ 88.049333][ T5329] buffer_io_error: 24 callbacks suppressed [ 88.049346][ T5329] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.065032][ T5329] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.073055][ T5329] loop9: unable to read partition table [ 88.079038][ T5329] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 88.079038][ T5329] ) failed (rc=-5) [ 88.097241][ T5330] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 88.116146][ T5329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.588'. [ 88.123744][ T5333] loop0: detected capacity change from 0 to 512 [ 88.137772][ T5333] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.162540][ T5333] EXT4-fs (loop0): 1 truncate cleaned up [ 88.175842][ T5333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.314263][ T5341] loop0: detected capacity change from 0 to 128 [ 88.737134][ T5360] 9pnet_fd: Insufficient options for proto=fd [ 88.768972][ T5355] loop2: detected capacity change from 0 to 512 [ 88.776337][ T5355] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 88.790199][ T5355] EXT4-fs (loop2): 1 truncate cleaned up [ 88.896435][ T5372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.604'. [ 89.019845][ T5386] loop1: detected capacity change from 0 to 128 [ 89.190688][ T5397] loop1: detected capacity change from 0 to 512 [ 89.263792][ T5402] netlink: 'syz.1.612': attribute type 10 has an invalid length. [ 89.311491][ T5375] loop3: detected capacity change from 0 to 512 [ 89.326591][ T5375] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 89.385353][ T5375] EXT4-fs (loop3): 1 truncate cleaned up [ 89.394040][ T5407] 9pnet_fd: Insufficient options for proto=fd [ 89.420766][ T5375] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.605: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 89.519743][ T5380] loop2: detected capacity change from 0 to 512 [ 89.527966][ T5380] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 89.543765][ T5380] EXT4-fs (loop2): 1 truncate cleaned up [ 89.963982][ T5435] loop0: detected capacity change from 0 to 512 [ 89.989017][ T5435] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 90.043515][ T5435] EXT4-fs (loop0): 1 truncate cleaned up [ 90.410050][ T5424] loop2: detected capacity change from 0 to 512 [ 90.417181][ T5424] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 90.430499][ T5424] EXT4-fs (loop2): 1 truncate cleaned up [ 90.438647][ T29] kauditd_printk_skb: 1747 callbacks suppressed [ 90.438663][ T29] audit: type=1326 audit(2000000000.360:12402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 90.487323][ T29] audit: type=1326 audit(2000000000.400:12403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 90.490566][ T5461] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20001 [ 90.511402][ T29] audit: type=1326 audit(2000000000.400:12404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 90.541798][ T29] audit: type=1326 audit(2000000000.400:12405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 90.566409][ T29] audit: type=1326 audit(2000000000.400:12406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 90.590214][ T29] audit: type=1326 audit(2000000000.400:12407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 90.613854][ T29] audit: type=1326 audit(2000000000.400:12408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 90.632183][ T5444] loop4: detected capacity change from 0 to 512 [ 90.637480][ T29] audit: type=1326 audit(2000000000.400:12409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 90.637512][ T29] audit: type=1326 audit(2000000000.000:12410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5457 comm="syz.0.633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 90.696229][ T5444] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.720629][ T5444] EXT4-fs (loop4): 1 truncate cleaned up [ 90.756316][ T5444] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #15: comm syz.4.629: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 90.946375][ T5472] loop4: detected capacity change from 0 to 128 [ 91.190075][ T29] audit: type=1326 audit(2000000000.710:12411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5464 comm="syz.0.635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 91.242648][ T5484] netlink: 'syz.1.640': attribute type 1 has an invalid length. [ 91.264860][ T5484] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 91.276035][ T5467] loop2: detected capacity change from 0 to 512 [ 91.285434][ T5484] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 91.293315][ T5467] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.305703][ T5467] EXT4-fs (loop2): 1 truncate cleaned up [ 91.319966][ T5487] gretap1: entered promiscuous mode [ 91.328202][ T5467] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #15: comm syz.2.636: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 91.329205][ T5487] bond1: (slave gretap1): making interface the new active one [ 91.358970][ T5487] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 91.370991][ T5465] loop0: detected capacity change from 0 to 512 [ 91.378754][ T5465] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.390659][ T5465] EXT4-fs (loop0): 1 truncate cleaned up [ 91.432022][ T5484] macvlan2: entered promiscuous mode [ 91.437570][ T5484] macvlan2: entered allmulticast mode [ 91.452526][ T5484] bond1: entered promiscuous mode [ 91.461143][ T5484] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.480479][ T5484] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 91.500866][ T5484] bond1: left promiscuous mode [ 91.560119][ T5498] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20001 [ 91.741920][ T5506] loop2: detected capacity change from 0 to 512 [ 91.749036][ T5506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.762590][ T5506] EXT4-fs (loop2): 1 truncate cleaned up [ 91.777264][ T5506] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #15: comm syz.2.648: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 91.841708][ T5517] loop0: detected capacity change from 0 to 128 [ 91.893531][ T5520] loop2: detected capacity change from 0 to 128 [ 92.264995][ T5515] loop3: detected capacity change from 0 to 512 [ 92.272612][ T5515] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 92.285245][ T5515] EXT4-fs (loop3): 1 truncate cleaned up [ 92.295961][ T5515] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.651: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 92.431430][ T5541] loop3: detected capacity change from 0 to 8192 [ 92.651453][ T5543] loop2: detected capacity change from 0 to 512 [ 92.678894][ T5543] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.739622][ T5543] EXT4-fs (loop2): 1 truncate cleaned up [ 92.751392][ T5552] netlink: 48 bytes leftover after parsing attributes in process `syz.4.660'. [ 92.862882][ T5562] netlink: 'syz.0.664': attribute type 1 has an invalid length. [ 92.903429][ T5562] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 92.929421][ T5562] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 92.948548][ T5566] loop9: detected capacity change from 0 to 7 [ 92.952791][ T5565] gretap1: entered promiscuous mode [ 92.954968][ T5566] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.967981][ T5566] Buffer I/O error on dev loop9, logical block 0, async page read [ 92.971319][ T5565] bond1: (slave gretap1): making interface the new active one [ 92.976121][ T5566] loop9: unable to read partition table [ 92.991160][ T5566] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 92.991160][ T5566] ) failed (rc=-5) [ 93.005800][ T5568] loop2: detected capacity change from 0 to 512 [ 93.016015][ T5565] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 93.025104][ T5566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.666'. [ 93.032793][ T5568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 93.047208][ T5568] EXT4-fs (loop2): 1 truncate cleaned up [ 93.097041][ T5576] loop3: detected capacity change from 0 to 512 [ 93.160803][ T5584] loop2: detected capacity change from 0 to 128 [ 93.171756][ T5586] netlink: 48 bytes leftover after parsing attributes in process `syz.4.673'. [ 93.187321][ T5590] netlink: 'syz.3.669': attribute type 10 has an invalid length. [ 93.432764][ T5592] loop4: detected capacity change from 0 to 512 [ 93.440547][ T5592] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 93.452415][ T5592] EXT4-fs (loop4): 1 truncate cleaned up [ 93.640784][ T5599] loop0: detected capacity change from 0 to 512 [ 93.647822][ T5599] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.659988][ T5599] EXT4-fs (loop0): 1 truncate cleaned up [ 93.884776][ T5609] loop4: detected capacity change from 0 to 128 [ 93.893783][ T5609] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.001298][ T5618] netlink: 'syz.1.684': attribute type 1 has an invalid length. [ 94.033436][ T5618] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 94.046497][ T5618] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 94.097702][ T5626] netlink: 48 bytes leftover after parsing attributes in process `syz.2.687'. [ 94.158019][ T5631] pim6reg: entered allmulticast mode [ 94.196238][ T5632] loop2: detected capacity change from 0 to 1024 [ 94.227073][ T5639] FAULT_INJECTION: forcing a failure. [ 94.227073][ T5639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.240564][ T5639] CPU: 0 UID: 0 PID: 5639 Comm: syz.0.692 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.240611][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 94.240628][ T5639] Call Trace: [ 94.240637][ T5639] [ 94.240647][ T5639] __dump_stack+0x1d/0x30 [ 94.240722][ T5639] dump_stack_lvl+0xe8/0x140 [ 94.240747][ T5639] dump_stack+0x15/0x1b [ 94.240820][ T5639] should_fail_ex+0x265/0x280 [ 94.240863][ T5639] should_fail+0xb/0x20 [ 94.240884][ T5639] should_fail_usercopy+0x1a/0x20 [ 94.240910][ T5639] strncpy_from_user+0x25/0x230 [ 94.241023][ T5639] ? __kmalloc_cache_noprof+0x189/0x320 [ 94.241068][ T5639] __se_sys_memfd_create+0x1ff/0x590 [ 94.241092][ T5639] __x64_sys_memfd_create+0x31/0x40 [ 94.241177][ T5639] x64_sys_call+0x2abe/0x2ff0 [ 94.241204][ T5639] do_syscall_64+0xd2/0x200 [ 94.241239][ T5639] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 94.241270][ T5639] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 94.241379][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.241409][ T5639] RIP: 0033:0x7fb25473eec9 [ 94.241438][ T5639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.241456][ T5639] RSP: 002b:00007fb25319ed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 94.241531][ T5639] RAX: ffffffffffffffda RBX: 00000000000005c2 RCX: 00007fb25473eec9 [ 94.241548][ T5639] RDX: 00007fb25319edec RSI: 0000000000000000 RDI: 00007fb2547c2960 [ 94.241565][ T5639] RBP: 0000200000000000 R08: 00007fb25319eb07 R09: 0000000000000000 [ 94.241581][ T5639] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 94.241597][ T5639] R13: 00007fb25319edec R14: 00007fb25319edf0 R15: 00007ffd0df14778 [ 94.241622][ T5639] [ 94.431665][ T5635] loop3: detected capacity change from 0 to 128 [ 94.443130][ T5642] loop1: detected capacity change from 0 to 512 [ 94.451196][ T5635] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.469880][ T5645] loop0: detected capacity change from 0 to 512 [ 94.481591][ T5642] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 94.491190][ T5642] EXT4-fs (loop1): orphan cleanup on readonly fs [ 94.501188][ T5642] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.693: corrupted inode contents [ 94.515040][ T5642] EXT4-fs (loop1): Remounting filesystem read-only [ 94.521984][ T5642] EXT4-fs (loop1): 1 truncate cleaned up [ 94.527879][ T51] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 94.538496][ T51] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 94.555996][ T5650] netlink: 'syz.0.694': attribute type 10 has an invalid length. [ 94.572940][ T51] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 94.921490][ T5658] loop3: detected capacity change from 0 to 512 [ 94.942334][ T5658] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 94.980457][ T5658] EXT4-fs (loop3): 1 truncate cleaned up [ 94.988924][ T5659] loop4: detected capacity change from 0 to 512 [ 94.988970][ T5658] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.698: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 95.030589][ T5659] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.044153][ T5659] EXT4-fs (loop4): 1 truncate cleaned up [ 95.357460][ T5673] netlink: 'syz.2.702': attribute type 1 has an invalid length. [ 95.390613][ T5673] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 95.441849][ T29] kauditd_printk_skb: 1048 callbacks suppressed [ 95.441868][ T29] audit: type=1326 audit(2000000000.200:13454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.4.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4bbeec9 code=0x7ffc0000 [ 95.446593][ T5673] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 95.448433][ T29] audit: type=1326 audit(2000000000.200:13455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5666 comm="syz.4.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4bbeec9 code=0x7ffc0000 [ 95.509667][ T5678] gretap1: entered promiscuous mode [ 95.521210][ T5678] bond0: (slave gretap1): making interface the new active one [ 95.542552][ T5678] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 95.668628][ T5692] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20001 [ 95.697168][ T5694] loop4: detected capacity change from 0 to 512 [ 95.779235][ T5697] netlink: 'syz.4.709': attribute type 10 has an invalid length. [ 95.795462][ T5699] loop0: detected capacity change from 0 to 512 [ 95.840183][ T5703] loop2: detected capacity change from 0 to 128 [ 95.875223][ T5704] netlink: 'syz.0.711': attribute type 10 has an invalid length. [ 95.923979][ T5707] loop3: detected capacity change from 0 to 512 [ 95.931136][ T5707] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 95.943340][ T5707] EXT4-fs (loop3): 1 truncate cleaned up [ 96.058076][ T29] audit: type=1400 audit(2000000000.810:13456): avc: denied { map_create } for pid=5709 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 96.080234][ T29] audit: type=1400 audit(2000000000.830:13457): avc: denied { prog_load } for pid=5709 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 96.099683][ T29] audit: type=1400 audit(2000000000.840:13458): avc: denied { bpf } for pid=5709 comm="syz.3.715" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.120780][ T29] audit: type=1400 audit(2000000000.840:13459): avc: denied { perfmon } for pid=5709 comm="syz.3.715" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.143501][ T29] audit: type=1400 audit(2000000000.890:13460): avc: denied { map_read map_write } for pid=5709 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 96.164028][ T29] audit: type=1400 audit(2000000000.890:13461): avc: denied { create } for pid=5709 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.185202][ T29] audit: type=1400 audit(2000000000.890:13462): avc: denied { write } for pid=5709 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 96.274727][ T29] audit: type=1400 audit(2000000001.030:13463): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 96.582888][ T5722] loop4: detected capacity change from 0 to 128 [ 96.671096][ T5728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.722'. [ 96.731024][ T5737] loop4: detected capacity change from 0 to 128 [ 96.797206][ T5746] loop2: detected capacity change from 0 to 512 [ 96.805677][ T5746] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 96.830870][ T5746] EXT4-fs (loop2): 1 truncate cleaned up [ 96.937996][ T5764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.735'. [ 96.965994][ T5767] loop1: detected capacity change from 0 to 128 [ 97.078639][ T5774] loop1: detected capacity change from 0 to 1024 [ 97.091297][ T5774] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.104043][ T5774] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 97.119683][ T5774] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 97.132291][ T5774] EXT4-fs (loop1): This should not happen!! Data will be lost [ 97.132291][ T5774] [ 97.142367][ T5774] EXT4-fs (loop1): Total free blocks count 0 [ 97.148413][ T5774] EXT4-fs (loop1): Free/Dirty block details [ 97.154503][ T5774] EXT4-fs (loop1): free_blocks=4293918720 [ 97.160413][ T5774] EXT4-fs (loop1): dirty_blocks=16 [ 97.165673][ T5774] EXT4-fs (loop1): Block reservation details [ 97.171693][ T5774] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 97.309778][ T5788] loop1: detected capacity change from 0 to 128 [ 97.481161][ T5789] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.738'. [ 98.112974][ T5802] loop2: detected capacity change from 0 to 512 [ 98.121744][ T5802] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.149501][ T5802] EXT4-fs (loop2): 1 truncate cleaned up [ 98.155589][ T5808] loop4: detected capacity change from 0 to 512 [ 98.167496][ T5808] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 98.198265][ T5808] EXT4-fs (loop4): 1 truncate cleaned up [ 98.345071][ T5820] netlink: 28 bytes leftover after parsing attributes in process `syz.1.752'. [ 98.416550][ T5822] loop1: detected capacity change from 0 to 128 [ 98.651016][ T5836] loop3: detected capacity change from 0 to 512 [ 98.672991][ T5836] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.692789][ T5836] EXT4-fs (loop3): 1 truncate cleaned up [ 98.923407][ T5845] loop0: detected capacity change from 0 to 128 [ 98.931374][ T5824] loop2: detected capacity change from 0 to 512 [ 98.938959][ T5824] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 98.951525][ T5845] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.958260][ T5824] EXT4-fs (loop2): 1 truncate cleaned up [ 99.176921][ T5861] loop3: detected capacity change from 0 to 8192 [ 99.281147][ T5865] loop1: detected capacity change from 0 to 128 [ 99.374292][ T5859] loop2: detected capacity change from 0 to 512 [ 99.386085][ T5859] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.398393][ T5859] EXT4-fs (loop2): 1 truncate cleaned up [ 99.666367][ T5880] loop4: detected capacity change from 0 to 8192 [ 99.767173][ T5890] loop1: detected capacity change from 0 to 512 [ 99.784426][ T5890] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 99.810358][ T5890] EXT4-fs (loop1): 1 truncate cleaned up [ 99.835055][ T5896] loop3: detected capacity change from 0 to 128 [ 99.944401][ T5904] loop0: detected capacity change from 0 to 128 [ 100.033860][ T5914] loop4: detected capacity change from 0 to 512 [ 100.049823][ T5914] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 100.074960][ T5914] EXT4-fs (loop4): 1 truncate cleaned up [ 100.092788][ T5914] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #15: comm syz.4.783: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 100.178849][ T5926] loop0: detected capacity change from 0 to 512 [ 100.200931][ T5924] netlink: 28 bytes leftover after parsing attributes in process `syz.1.784'. [ 100.245723][ T5931] netlink: 'syz.0.786': attribute type 10 has an invalid length. [ 100.286921][ T5930] loop1: detected capacity change from 0 to 8192 [ 100.315121][ T5935] loop4: detected capacity change from 0 to 128 [ 100.462216][ T29] kauditd_printk_skb: 1701 callbacks suppressed [ 100.462238][ T29] audit: type=1326 audit(2000000000.230:15165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.1.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 100.492585][ T29] audit: type=1326 audit(2000000000.230:15166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5939 comm="syz.1.791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 100.623004][ T5949] loop1: detected capacity change from 0 to 512 [ 100.650121][ T5949] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.665072][ T5949] EXT4-fs (loop1): 1 truncate cleaned up [ 100.676105][ T5923] loop2: detected capacity change from 0 to 512 [ 100.682744][ T29] audit: type=1326 audit(2000000000.440:15167): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abb13eec9 code=0x7ffc0000 [ 100.707169][ T29] audit: type=1326 audit(2000000000.440:15168): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2abb13eec9 code=0x7ffc0000 [ 100.731464][ T29] audit: type=1326 audit(2000000000.440:15169): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2abb13ef03 code=0x7ffc0000 [ 100.755206][ T29] audit: type=1326 audit(2000000000.440:15170): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2abb13d97f code=0x7ffc0000 [ 100.779467][ T29] audit: type=1326 audit(2000000000.440:15171): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2abb13ef57 code=0x7ffc0000 [ 100.803850][ T29] audit: type=1326 audit(2000000000.440:15172): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2abb13d710 code=0x7ffc0000 [ 100.809877][ T5949] EXT4-fs mount: 63 callbacks suppressed [ 100.809908][ T5949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.827895][ T29] audit: type=1326 audit(2000000000.440:15173): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2abb13eacb code=0x7ffc0000 [ 100.834069][ T5923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.884515][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.899187][ T29] audit: type=1326 audit(2000000000.600:15174): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5922 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f2abb13db2a code=0x7ffc0000 [ 100.927113][ T5923] EXT4-fs (loop2): 1 truncate cleaned up [ 100.934487][ T5956] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20001 [ 100.942155][ T5923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.074955][ T5959] netlink: 'syz.1.798': attribute type 1 has an invalid length. [ 101.103682][ T5952] loop3: detected capacity change from 0 to 512 [ 101.125298][ T5952] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.146896][ T5952] EXT4-fs (loop3): 1 truncate cleaned up [ 101.154609][ T5959] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 101.165772][ T5952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.180069][ T5959] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 101.190361][ T5952] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.796: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 101.227306][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.262947][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.351050][ T5979] loop1: detected capacity change from 0 to 128 [ 101.398138][ T5981] loop0: detected capacity change from 0 to 512 [ 101.417417][ T5984] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20001 [ 101.495394][ T5990] netlink: 'syz.0.807': attribute type 10 has an invalid length. [ 101.756121][ T6005] loop4: detected capacity change from 0 to 512 [ 101.768588][ T6005] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 101.789629][ T6005] EXT4-fs (loop4): 1 truncate cleaned up [ 101.795747][ T6005] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.814029][ T6000] loop3: detected capacity change from 0 to 512 [ 101.827644][ T6000] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.870784][ T6000] EXT4-fs (loop3): 1 truncate cleaned up [ 101.881759][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.891448][ T6000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.982608][ T6011] loop4: detected capacity change from 0 to 128 [ 102.095251][ T5994] loop2: detected capacity change from 0 to 512 [ 102.103455][ T5994] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.115291][ T5994] EXT4-fs (loop2): 1 truncate cleaned up [ 102.122787][ T5994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.139319][ T5994] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #15: comm syz.2.809: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 102.160432][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.198335][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.219026][ T6020] loop2: detected capacity change from 0 to 128 [ 102.251566][ T6022] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20001 [ 102.351578][ T6029] netlink: 'syz.0.821': attribute type 1 has an invalid length. [ 102.382923][ T6029] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 102.395277][ T6029] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 102.438103][ T6029] macvlan2: entered promiscuous mode [ 102.443674][ T6029] macvlan2: entered allmulticast mode [ 102.469552][ T6029] bond2: entered promiscuous mode [ 102.475068][ T6029] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.492696][ T6029] bond2: left promiscuous mode [ 102.660880][ T6041] loop9: detected capacity change from 0 to 7 [ 102.687690][ T6041] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.708748][ T6041] Buffer I/O error on dev loop9, logical block 0, async page read [ 102.716916][ T6041] loop9: unable to read partition table [ 102.727894][ T6043] netlink: 28 bytes leftover after parsing attributes in process `syz.0.824'. [ 102.737053][ T6041] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 102.737053][ T6041] ) failed (rc=-5) [ 102.771956][ T6018] loop1: detected capacity change from 0 to 512 [ 102.788901][ T6018] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 102.800462][ T6037] loop2: detected capacity change from 0 to 128 [ 102.812068][ T6037] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.836960][ T6037] ext4 filesystem being mounted at /138/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.848851][ T6018] EXT4-fs (loop1): 1 truncate cleaned up [ 102.858757][ T6018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.907335][ T6037] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.951092][ T6056] loop0: detected capacity change from 0 to 128 [ 103.109910][ T6067] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20001 [ 103.139315][ T6034] loop3: detected capacity change from 0 to 512 [ 103.159444][ T6034] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.181881][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.201197][ T6034] EXT4-fs (loop3): 1 truncate cleaned up [ 103.207376][ T6034] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.254489][ T6073] loop1: detected capacity change from 0 to 512 [ 103.271587][ T6073] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 103.300498][ T6073] EXT4-fs (loop1): orphan cleanup on readonly fs [ 103.311640][ T6073] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.831: corrupted inode contents [ 103.339896][ T6073] EXT4-fs (loop1): Remounting filesystem read-only [ 103.346857][ T6073] EXT4-fs (loop1): 1 truncate cleaned up [ 103.353157][ T59] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 103.363878][ T59] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 103.374807][ T59] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 103.387015][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.396639][ T6054] loop4: detected capacity change from 0 to 512 [ 103.398449][ T6073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.403813][ T6054] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 103.431912][ T6054] EXT4-fs (loop4): 1 truncate cleaned up [ 103.444144][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.455795][ T6054] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.486019][ T6081] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.570782][ T6081] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.631031][ T6081] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.649474][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.667102][ T6085] FAULT_INJECTION: forcing a failure. [ 103.667102][ T6085] name failslab, interval 1, probability 0, space 0, times 0 [ 103.679943][ T6085] CPU: 0 UID: 0 PID: 6085 Comm: syz.4.835 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.680028][ T6085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.680046][ T6085] Call Trace: [ 103.680054][ T6085] [ 103.680062][ T6085] __dump_stack+0x1d/0x30 [ 103.680114][ T6085] dump_stack_lvl+0xe8/0x140 [ 103.680139][ T6085] dump_stack+0x15/0x1b [ 103.680161][ T6085] should_fail_ex+0x265/0x280 [ 103.680194][ T6085] should_failslab+0x8c/0xb0 [ 103.680227][ T6085] kmem_cache_alloc_noprof+0x50/0x310 [ 103.680341][ T6085] ? getname_flags+0x80/0x3b0 [ 103.680381][ T6085] getname_flags+0x80/0x3b0 [ 103.680494][ T6085] do_sys_openat2+0x60/0x110 [ 103.680536][ T6085] __x64_sys_openat+0xf2/0x120 [ 103.680579][ T6085] x64_sys_call+0x2e9c/0x2ff0 [ 103.680608][ T6085] do_syscall_64+0xd2/0x200 [ 103.680700][ T6085] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.680726][ T6085] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.680817][ T6085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.680846][ T6085] RIP: 0033:0x7febe4bbd710 [ 103.680872][ T6085] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 103.680897][ T6085] RSP: 002b:00007febe3626f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 103.680920][ T6085] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007febe4bbd710 [ 103.680933][ T6085] RDX: 0000000000000002 RSI: 00007febe3626fa0 RDI: 00000000ffffff9c [ 103.680945][ T6085] RBP: 00007febe3626fa0 R08: 0000000000000000 R09: 0000000000000000 [ 103.680958][ T6085] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 103.680976][ T6085] R13: 00007febe4e16038 R14: 00007febe4e15fa0 R15: 00007ffd5aba07e8 [ 103.681002][ T6085] [ 103.870019][ T6086] loop3: detected capacity change from 0 to 512 [ 103.878235][ T6086] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.890132][ T6081] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.906076][ T6086] EXT4-fs (loop3): 1 truncate cleaned up [ 103.913631][ T6086] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.960429][ T175] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.979219][ T175] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.997691][ T175] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.017626][ T175] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.141390][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.210860][ T6105] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.281964][ T6105] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.311443][ T6105] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.375489][ T6096] loop0: detected capacity change from 0 to 512 [ 104.382774][ T6096] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.394341][ T6105] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.407788][ T6096] EXT4-fs (loop0): 1 truncate cleaned up [ 104.414028][ T6096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.481491][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.490364][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.499247][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.507850][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.531625][ T6123] loop3: detected capacity change from 0 to 512 [ 104.538685][ T6123] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.550955][ T6123] EXT4-fs (loop3): 1 truncate cleaned up [ 104.565428][ T6123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.581060][ T6123] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.849: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 104.581397][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.620647][ T6128] loop0: detected capacity change from 0 to 512 [ 104.627741][ T6128] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 104.627803][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.640510][ T6128] EXT4-fs (loop0): 1 truncate cleaned up [ 104.653536][ T6128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.675043][ T6132] netlink: 'syz.3.852': attribute type 1 has an invalid length. [ 104.687676][ T6128] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #15: comm syz.0.851: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 104.750137][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.760599][ T6132] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 104.777754][ T6132] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 104.821867][ T6140] gretap1: entered promiscuous mode [ 104.835209][ T6140] bond1: (slave gretap1): making interface the new active one [ 104.837870][ T6143] netlink: 'syz.0.857': attribute type 1 has an invalid length. [ 104.845762][ T6140] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 104.874498][ T6143] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 104.886806][ T6143] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 104.926797][ T6148] macvlan2: entered promiscuous mode [ 104.932338][ T6148] macvlan2: entered allmulticast mode [ 104.938422][ T6148] bond3: entered promiscuous mode [ 104.945243][ T6148] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.957277][ T6148] bond3: left promiscuous mode [ 104.981131][ T6150] loop3: detected capacity change from 0 to 512 [ 105.001414][ T6150] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 105.042168][ T6150] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.858: invalid indirect mapped block 4294967295 (level 0) [ 105.059050][ T6150] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.858: invalid indirect mapped block 4294967295 (level 1) [ 105.075656][ T6150] EXT4-fs (loop3): 1 orphan inode deleted [ 105.081826][ T6150] EXT4-fs (loop3): 1 truncate cleaned up [ 105.087935][ T6141] loop2: detected capacity change from 0 to 512 [ 105.088768][ T6150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.112892][ T6141] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.135898][ T6157] loop0: detected capacity change from 0 to 512 [ 105.144504][ T6141] EXT4-fs (loop2): 1 truncate cleaned up [ 105.151186][ T6141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.165740][ T6157] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 105.175706][ T6157] EXT4-fs (loop0): orphan cleanup on readonly fs [ 105.183648][ T6157] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.860: corrupted inode contents [ 105.197689][ T6157] EXT4-fs (loop0): Remounting filesystem read-only [ 105.204493][ T6157] EXT4-fs (loop0): 1 truncate cleaned up [ 105.210425][ T59] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 105.221016][ T59] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 105.239192][ T59] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 105.250240][ T6157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.303805][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.355735][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.381483][ T6165] netlink: 48 bytes leftover after parsing attributes in process `syz.2.862'. [ 105.421518][ T6163] loop0: detected capacity change from 0 to 8192 [ 105.433034][ T6161] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 105.443950][ T6161] netlink: 64 bytes leftover after parsing attributes in process `syz.3.858'. [ 105.460823][ T6168] loop1: detected capacity change from 0 to 512 [ 105.468790][ T6168] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 105.471273][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 105.471294][ T29] audit: type=1326 audit(2000000001.470:15332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 105.485836][ T6170] loop2: detected capacity change from 0 to 512 [ 105.518912][ T29] audit: type=1326 audit(2000000001.510:15333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 105.542714][ T29] audit: type=1326 audit(2000000001.510:15334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 105.566794][ T29] audit: type=1326 audit(2000000001.510:15335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 105.590352][ T29] audit: type=1326 audit(2000000001.510:15336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 105.614132][ T29] audit: type=1326 audit(2000000001.510:15337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 105.627826][ T6168] EXT4-fs (loop1): 1 truncate cleaned up [ 105.637800][ T29] audit: type=1326 audit(2000000001.510:15338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 105.645861][ T6168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.667447][ T29] audit: type=1326 audit(2000000001.510:15339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 105.703432][ T29] audit: type=1326 audit(2000000001.510:15340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 105.729063][ T6170] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 105.749651][ T6170] EXT4-fs (loop2): orphan cleanup on readonly fs [ 105.767965][ T29] audit: type=1326 audit(2000000001.510:15341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6162 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 105.796205][ T6170] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.864: corrupted inode contents [ 105.819736][ T6170] EXT4-fs (loop2): Remounting filesystem read-only [ 105.831995][ T6170] EXT4-fs (loop2): 1 truncate cleaned up [ 105.842117][ T41] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 105.852944][ T41] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 105.869666][ T41] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 105.880559][ T6170] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.882060][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.904450][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.933902][ T6178] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.969986][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.021381][ T6178] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.046884][ T6186] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.081257][ T6178] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.124482][ T6193] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20001 [ 106.141225][ T6178] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.165035][ T6180] loop1: detected capacity change from 0 to 128 [ 106.181423][ T6180] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.203124][ T41] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.214348][ T6180] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.225190][ T41] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.227442][ T6180] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.237858][ T41] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.252116][ T41] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.364296][ T6207] loop4: detected capacity change from 0 to 512 [ 106.371892][ T6207] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.383337][ T6207] EXT4-fs (loop4): 1 truncate cleaned up [ 106.389475][ T6207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.464426][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.928062][ T6231] loop3: detected capacity change from 0 to 128 [ 107.096387][ T6244] loop3: detected capacity change from 0 to 512 [ 107.122478][ T6244] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 107.149990][ T6244] EXT4-fs (loop3): 1 truncate cleaned up [ 107.156316][ T6244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.239602][ T6258] netlink: 48 bytes leftover after parsing attributes in process `syz.1.895'. [ 107.266728][ T6257] hub 9-0:1.0: USB hub found [ 107.287012][ T6257] hub 9-0:1.0: 8 ports detected [ 107.365758][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.385169][ T6268] FAULT_INJECTION: forcing a failure. [ 107.385169][ T6268] name failslab, interval 1, probability 0, space 0, times 0 [ 107.399368][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.4.899 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.399493][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 107.399512][ T6268] Call Trace: [ 107.399520][ T6268] [ 107.399530][ T6268] __dump_stack+0x1d/0x30 [ 107.399555][ T6268] dump_stack_lvl+0xe8/0x140 [ 107.399575][ T6268] dump_stack+0x15/0x1b [ 107.399607][ T6268] should_fail_ex+0x265/0x280 [ 107.399641][ T6268] should_failslab+0x8c/0xb0 [ 107.399675][ T6268] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 107.399767][ T6268] ? sidtab_sid2str_get+0xa0/0x130 [ 107.399800][ T6268] kmemdup_noprof+0x2b/0x70 [ 107.399837][ T6268] sidtab_sid2str_get+0xa0/0x130 [ 107.399864][ T6268] security_sid_to_context_core+0x1eb/0x2e0 [ 107.399999][ T6268] security_sid_to_context+0x27/0x40 [ 107.400028][ T6268] selinux_lsmprop_to_secctx+0x67/0xf0 [ 107.400059][ T6268] security_lsmprop_to_secctx+0x43/0x80 [ 107.400100][ T6268] audit_log_task_context+0x77/0x190 [ 107.400285][ T6268] audit_log_task+0xf4/0x250 [ 107.400322][ T6268] audit_seccomp+0x61/0x100 [ 107.400355][ T6268] ? __seccomp_filter+0x68c/0x10d0 [ 107.400384][ T6268] __seccomp_filter+0x69d/0x10d0 [ 107.400479][ T6268] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 107.400516][ T6268] ? vfs_write+0x7e8/0x960 [ 107.400622][ T6268] ? __rcu_read_unlock+0x4f/0x70 [ 107.400651][ T6268] ? __fget_files+0x184/0x1c0 [ 107.400688][ T6268] __secure_computing+0x82/0x150 [ 107.400715][ T6268] syscall_trace_enter+0xcf/0x1e0 [ 107.400776][ T6268] do_syscall_64+0xac/0x200 [ 107.400838][ T6268] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 107.400999][ T6268] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 107.401038][ T6268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.401068][ T6268] RIP: 0033:0x7febe4bbeec9 [ 107.401094][ T6268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.401119][ T6268] RSP: 002b:00007febe3627038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 107.401195][ T6268] RAX: ffffffffffffffda RBX: 00007febe4e15fa0 RCX: 00007febe4bbeec9 [ 107.401210][ T6268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.401225][ T6268] RBP: 00007febe3627090 R08: 0000000000000000 R09: 0000000000000000 [ 107.401240][ T6268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.401257][ T6268] R13: 00007febe4e16038 R14: 00007febe4e15fa0 R15: 00007ffd5aba07e8 [ 107.401283][ T6268] [ 107.713674][ T6242] loop2: detected capacity change from 0 to 512 [ 107.726414][ T6242] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 107.739659][ T6242] EXT4-fs (loop2): 1 truncate cleaned up [ 107.745769][ T6242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.856732][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.035250][ T6298] loop2: detected capacity change from 0 to 512 [ 108.043041][ T6298] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.054506][ T6298] EXT4-fs (loop2): 1 truncate cleaned up [ 108.061681][ T6298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.106404][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.147613][ T6287] loop4: detected capacity change from 0 to 512 [ 108.159274][ T6287] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.170076][ T6305] loop2: detected capacity change from 0 to 512 [ 108.177175][ T6305] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.177356][ T6287] EXT4-fs (loop4): 1 truncate cleaned up [ 108.191675][ T6305] EXT4-fs (loop2): 1 truncate cleaned up [ 108.194336][ T6287] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.201508][ T6305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.303015][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.338117][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.356441][ T6311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.366614][ T6311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.598989][ T6318] netlink: 20 bytes leftover after parsing attributes in process `syz.3.914'. [ 108.699243][ T6321] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.773412][ T6322] loop0: detected capacity change from 0 to 512 [ 108.781132][ T6322] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 108.782719][ T6321] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.811620][ T6322] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 108.825216][ T6322] EXT4-fs (loop0): 1 truncate cleaned up [ 108.831787][ T6322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.847562][ T6309] loop2: detected capacity change from 0 to 512 [ 108.856663][ T6309] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 108.868282][ T6313] loop4: detected capacity change from 0 to 512 [ 108.871894][ T6309] EXT4-fs (loop2): 1 truncate cleaned up [ 108.876201][ T6313] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 108.892311][ T6321] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.900218][ T6309] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.920523][ T6309] EXT4-fs error (device loop2): ext4_ext_precache:632: inode #15: comm syz.2.910: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 108.926597][ T6313] EXT4-fs (loop4): 1 truncate cleaned up [ 108.949721][ T6313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.966922][ T6321] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.997237][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.048719][ T175] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.092643][ T175] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.138790][ T175] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.159775][ T6330] loop1: detected capacity change from 0 to 8192 [ 109.179827][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.243271][ T6334] loop2: detected capacity change from 0 to 1024 [ 109.268998][ T6334] EXT4-fs: dax option not supported [ 109.344528][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.358468][ T6342] loop3: detected capacity change from 0 to 512 [ 109.376939][ T6342] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.392994][ T6342] EXT4-fs (loop3): 1 truncate cleaned up [ 109.405108][ T6342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.475917][ T6346] netlink: 'syz.4.921': attribute type 1 has an invalid length. [ 109.500581][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.541191][ T6346] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 109.554178][ T6355] loop9: detected capacity change from 0 to 7 [ 109.560781][ T6346] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 109.568745][ T6355] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.581591][ T6355] Buffer I/O error on dev loop9, logical block 0, async page read [ 109.589786][ T6355] loop9: unable to read partition table [ 109.619282][ T6355] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 109.619282][ T6355] ) failed (rc=-5) [ 109.644040][ T6355] netlink: 28 bytes leftover after parsing attributes in process `syz.0.923'. [ 109.657403][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.671628][ T6346] macvlan2: entered promiscuous mode [ 109.677066][ T6346] macvlan2: entered allmulticast mode [ 109.685168][ T6346] bond2: entered promiscuous mode [ 109.691027][ T6346] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.700791][ T6346] bond2: left promiscuous mode [ 109.898526][ T6373] netlink: 'syz.4.931': attribute type 1 has an invalid length. [ 109.971643][ T6373] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 110.023798][ T6373] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 110.074337][ T6378] macvlan2: entered promiscuous mode [ 110.079771][ T6378] macvlan2: entered allmulticast mode [ 110.095527][ T6348] loop1: detected capacity change from 0 to 512 [ 110.097656][ T6378] bond3: entered promiscuous mode [ 110.108445][ T6348] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.132735][ T6378] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 110.151466][ T6378] bond3: left promiscuous mode [ 110.157528][ T6348] EXT4-fs (loop1): 1 truncate cleaned up [ 110.171180][ T6348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.432049][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.479250][ T29] kauditd_printk_skb: 640 callbacks suppressed [ 110.479268][ T29] audit: type=1326 audit(2000000000.000:15975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 110.548436][ T29] audit: type=1326 audit(2000000000.000:15976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 110.572438][ T29] audit: type=1326 audit(2000000000.000:15977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 110.595992][ T29] audit: type=1326 audit(2000000000.000:15978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6389 comm="syz.1.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 110.648897][ T6370] loop3: detected capacity change from 0 to 512 [ 110.670819][ T6370] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.689271][ T6391] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 110.689271][ T6391] The task syz.2.934 (6391) triggered the difference, watch for misbehavior. [ 110.716667][ T6370] EXT4-fs (loop3): 1 truncate cleaned up [ 110.717462][ T29] audit: type=1326 audit(2000000000.090:15979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abb13eec9 code=0x7ffc0000 [ 110.746482][ T29] audit: type=1326 audit(2000000000.090:15980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abb13eec9 code=0x7ffc0000 [ 110.770273][ T29] audit: type=1326 audit(2000000000.090:15981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f2abb13eec9 code=0x7ffc0000 [ 110.794152][ T29] audit: type=1326 audit(2000000000.090:15982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abb13eec9 code=0x7ffc0000 [ 110.817994][ T29] audit: type=1326 audit(2000000000.090:15983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abb13eec9 code=0x7ffc0000 [ 110.842160][ T29] audit: type=1326 audit(2000000000.090:15984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6386 comm="syz.2.934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2abb13eec9 code=0x7ffc0000 [ 111.060065][ T6407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.938'. [ 111.305103][ T6423] loop2: detected capacity change from 0 to 512 [ 111.314355][ T6423] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.325762][ T6423] EXT4-fs (loop2): 1 truncate cleaned up [ 111.521689][ T6430] loop0: detected capacity change from 0 to 512 [ 111.548271][ T6429] loop1: detected capacity change from 0 to 512 [ 111.555824][ T6430] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.558369][ T6429] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.581607][ T6429] EXT4-fs (loop1): 1 truncate cleaned up [ 111.597057][ T6430] EXT4-fs (loop0): 1 truncate cleaned up [ 111.846195][ T6447] netlink: 'syz.0.956': attribute type 1 has an invalid length. [ 111.914072][ T6447] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 111.939609][ T6447] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 111.963482][ T6457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.982876][ T6458] macvlan2: entered promiscuous mode [ 111.988284][ T6458] macvlan2: entered allmulticast mode [ 112.004249][ T6457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.027282][ T6458] bond4: entered promiscuous mode [ 112.042655][ T6458] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 112.057152][ T6458] bond4: left promiscuous mode [ 112.157504][ T6449] loop1: detected capacity change from 0 to 512 [ 112.174904][ T6449] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.186601][ T6449] EXT4-fs (loop1): 1 truncate cleaned up [ 112.216489][ T6441] loop2: detected capacity change from 0 to 512 [ 112.235185][ T6441] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.288556][ T6441] EXT4-fs (loop2): 1 truncate cleaned up [ 112.526290][ T6479] loop1: detected capacity change from 0 to 128 [ 112.544283][ T6479] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.570484][ T6484] loop3: detected capacity change from 0 to 128 [ 112.608129][ T6489] loop4: detected capacity change from 0 to 512 [ 112.615377][ T6489] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 112.633947][ T6489] EXT4-fs (loop4): 1 truncate cleaned up [ 112.644326][ T6474] loop0: detected capacity change from 0 to 512 [ 112.652057][ T6474] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 112.665411][ T6474] EXT4-fs (loop0): 1 truncate cleaned up [ 112.770909][ T6504] loop4: detected capacity change from 0 to 128 [ 112.781044][ T6504] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 112.789250][ T6504] FAT-fs (loop4): Filesystem has been set read-only [ 112.796322][ T6504] bio_check_eod: 18 callbacks suppressed [ 112.796347][ T6504] syz.4.974: attempt to access beyond end of device [ 112.796347][ T6504] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 112.816432][ T6504] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 112.824519][ T6504] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 112.833013][ T6504] syz.4.974: attempt to access beyond end of device [ 112.833013][ T6504] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.846770][ T6504] syz.4.974: attempt to access beyond end of device [ 112.846770][ T6504] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.862710][ T6504] syz.4.974: attempt to access beyond end of device [ 112.862710][ T6504] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.876752][ T6504] syz.4.974: attempt to access beyond end of device [ 112.876752][ T6504] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.892214][ T6504] syz.4.974: attempt to access beyond end of device [ 112.892214][ T6504] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.910096][ T6504] syz.4.974: attempt to access beyond end of device [ 112.910096][ T6504] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.910157][ T6504] syz.4.974: attempt to access beyond end of device [ 112.910157][ T6504] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.938506][ T6504] syz.4.974: attempt to access beyond end of device [ 112.938506][ T6504] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 112.953467][ T6504] syz.4.974: attempt to access beyond end of device [ 112.953467][ T6504] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.191077][ T6509] loop0: detected capacity change from 0 to 512 [ 113.203867][ T6509] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.216853][ T6509] EXT4-fs (loop0): 1 truncate cleaned up [ 113.384036][ T6527] loop0: detected capacity change from 0 to 512 [ 113.391102][ T6527] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.402805][ T6527] EXT4-fs (loop0): 1 truncate cleaned up [ 113.628831][ T6549] loop2: detected capacity change from 0 to 128 [ 113.663837][ T6551] loop4: detected capacity change from 0 to 512 [ 113.680070][ T6551] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.697239][ T6551] EXT4-fs (loop4): 1 truncate cleaned up [ 113.711177][ T6551] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #15: comm syz.4.993: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 113.736908][ T6554] loop1: detected capacity change from 0 to 512 [ 113.744261][ T6554] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.781327][ T6554] EXT4-fs (loop1): 1 truncate cleaned up [ 113.876083][ T6558] loop4: detected capacity change from 0 to 8192 [ 113.921824][ T6564] loop3: detected capacity change from 0 to 128 [ 113.933658][ T6564] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.992882][ T6547] loop0: detected capacity change from 0 to 512 [ 114.008428][ T6547] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.032254][ T6547] EXT4-fs (loop0): 1 truncate cleaned up [ 114.079083][ T6571] loop1: detected capacity change from 0 to 512 [ 114.097145][ T6571] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 114.109290][ T6571] EXT4-fs (loop1): orphan cleanup on readonly fs [ 114.119790][ T6571] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.996: corrupted inode contents [ 114.134320][ T6571] EXT4-fs (loop1): Remounting filesystem read-only [ 114.142712][ T6571] EXT4-fs (loop1): 1 truncate cleaned up [ 114.148501][ T41] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 114.159308][ T41] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 114.170117][ T41] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 114.541328][ T6582] loop1: detected capacity change from 0 to 512 [ 114.551368][ T6582] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.564303][ T6596] loop2: detected capacity change from 0 to 512 [ 114.571685][ T6596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.583826][ T6582] EXT4-fs (loop1): 1 truncate cleaned up [ 114.594372][ T6599] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.615424][ T6596] EXT4-fs (loop2): 1 truncate cleaned up [ 114.651916][ T6599] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.688844][ T6604] loop2: detected capacity change from 0 to 512 [ 114.695844][ T6604] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 114.712266][ T6599] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.739232][ T6604] EXT4-fs (loop2): 1 truncate cleaned up [ 114.781262][ T6599] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.863957][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.892199][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.929422][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.958689][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.985030][ T6613] loop3: detected capacity change from 0 to 128 [ 115.012224][ T6594] loop0: detected capacity change from 0 to 512 [ 115.030671][ T6594] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 115.050086][ T6594] EXT4-fs (loop0): 1 truncate cleaned up [ 115.066682][ T6594] EXT4-fs error (device loop0): ext4_ext_precache:632: inode #15: comm syz.0.1004: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 115.152831][ T6636] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.187236][ T6638] loop2: detected capacity change from 0 to 8192 [ 115.242779][ T6636] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.303159][ T6636] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.353012][ T6636] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.412397][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.432965][ T6653] loop9: detected capacity change from 0 to 7 [ 115.438829][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.453133][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.458117][ T6653] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.463921][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.478739][ T6653] Buffer I/O error on dev loop9, logical block 0, async page read [ 115.486727][ T6653] loop9: unable to read partition table [ 115.494810][ T6653] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 115.494810][ T6653] ) failed (rc=-5) [ 115.495722][ T29] kauditd_printk_skb: 1035 callbacks suppressed [ 115.495815][ T29] audit: type=1326 audit(2000000000.430:17014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 115.514729][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1027'. [ 115.552033][ T29] audit: type=1326 audit(2000000000.490:17015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 115.576650][ T29] audit: type=1326 audit(2000000000.490:17016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 115.600652][ T29] audit: type=1326 audit(2000000000.490:17017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 115.624752][ T29] audit: type=1326 audit(2000000000.490:17018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 115.648585][ T29] audit: type=1326 audit(2000000000.490:17019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 115.722728][ T6659] loop4: detected capacity change from 0 to 512 [ 115.741104][ T29] audit: type=1326 audit(2000000000.630:17020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 115.767963][ T29] audit: type=1326 audit(2000000000.630:17021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6654 comm="syz.0.1028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb25473eec9 code=0x7ffc0000 [ 115.794260][ T6659] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.838861][ T6659] EXT4-fs (loop4): 1 truncate cleaned up [ 115.896332][ T6670] loop3: detected capacity change from 0 to 128 [ 116.320082][ T6695] loop3: detected capacity change from 0 to 128 [ 116.331571][ T6695] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.358430][ T6694] loop0: detected capacity change from 0 to 512 [ 116.380419][ T6694] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.409457][ T6697] loop1: detected capacity change from 0 to 512 [ 116.409561][ T6694] EXT4-fs (loop0): 1 truncate cleaned up [ 116.463657][ T6697] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.535476][ T6697] EXT4-fs (loop1): 1 truncate cleaned up [ 116.563143][ T6703] loop3: detected capacity change from 0 to 512 [ 116.582827][ T6703] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 116.609809][ T6703] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.683607][ T6692] loop4: detected capacity change from 0 to 512 [ 116.691937][ T29] audit: type=1326 audit(2000000001.620:17022): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.4.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4bbeec9 code=0x7ffc0000 [ 116.716100][ T29] audit: type=1326 audit(2000000001.620:17023): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.4.1041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7febe4bbeec9 code=0x7ffc0000 [ 116.743027][ T6692] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 116.754076][ T6707] loop9: detected capacity change from 0 to 7 [ 116.760615][ T6707] Buffer I/O error on dev loop9, logical block 0, async page read [ 116.768538][ T6707] Buffer I/O error on dev loop9, logical block 0, async page read [ 116.769869][ T6703] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.1042: corrupted inode contents [ 116.776731][ T6707] loop9: unable to read partition table [ 116.790446][ T6703] EXT4-fs (loop3): Remounting filesystem read-only [ 116.801673][ T6703] EXT4-fs (loop3): 1 truncate cleaned up [ 116.807622][ T6707] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 116.807622][ T6707] ) failed (rc=-5) [ 116.822566][ T41] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 116.833298][ T41] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 116.847060][ T6692] EXT4-fs (loop4): 1 truncate cleaned up [ 116.853607][ T6707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'. [ 116.864673][ T41] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 116.983806][ T6714] loop0: detected capacity change from 0 to 8192 [ 117.016612][ T6699] loop2: detected capacity change from 0 to 512 [ 117.034801][ T6699] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 117.056981][ T6699] EXT4-fs (loop2): 1 truncate cleaned up [ 117.178534][ T6724] loop1: detected capacity change from 0 to 128 [ 117.208595][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1048'. [ 117.525172][ T6740] loop0: detected capacity change from 0 to 512 [ 117.532166][ T6740] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.543747][ T6740] EXT4-fs (loop0): 1 truncate cleaned up [ 118.042456][ T6784] loop3: detected capacity change from 0 to 128 [ 118.051802][ T6784] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 118.060004][ T6784] FAT-fs (loop3): Filesystem has been set read-only [ 118.066964][ T6784] bio_check_eod: 982 callbacks suppressed [ 118.067054][ T6784] syz.3.1073: attempt to access beyond end of device [ 118.067054][ T6784] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 118.087169][ T6784] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 118.095148][ T6784] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 118.103396][ T6784] syz.3.1073: attempt to access beyond end of device [ 118.103396][ T6784] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 118.116973][ T6784] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 118.125343][ T6784] syz.3.1073: attempt to access beyond end of device [ 118.125343][ T6784] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 118.140058][ T6784] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 118.148451][ T6784] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 118.156939][ T6784] syz.3.1073: attempt to access beyond end of device [ 118.156939][ T6784] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 118.170606][ T6787] syz.3.1073: attempt to access beyond end of device [ 118.170606][ T6787] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 118.184123][ T6787] Buffer I/O error on dev loop3, logical block 2065, async page read [ 118.193481][ T6785] loop0: detected capacity change from 0 to 128 [ 118.193616][ T6787] syz.3.1073: attempt to access beyond end of device [ 118.193616][ T6787] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 118.213168][ T6787] Buffer I/O error on dev loop3, logical block 2066, async page read [ 118.222361][ T6787] syz.3.1073: attempt to access beyond end of device [ 118.222361][ T6787] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 118.235836][ T6787] Buffer I/O error on dev loop3, logical block 2067, async page read [ 118.247013][ T6785] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.260789][ T6787] syz.3.1073: attempt to access beyond end of device [ 118.260789][ T6787] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 118.275008][ T6787] Buffer I/O error on dev loop3, logical block 2068, async page read [ 118.285369][ T6787] syz.3.1073: attempt to access beyond end of device [ 118.285369][ T6787] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 118.299424][ T6787] Buffer I/O error on dev loop3, logical block 2069, async page read [ 118.308601][ T6787] syz.3.1073: attempt to access beyond end of device [ 118.308601][ T6787] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 118.322657][ T6787] Buffer I/O error on dev loop3, logical block 2070, async page read [ 118.331932][ T6787] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 118.339960][ T6787] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 118.570093][ T6810] loop4: detected capacity change from 0 to 128 [ 118.633404][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 118.778199][ T6807] loop1: detected capacity change from 0 to 512 [ 118.790783][ T6807] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.803352][ T6807] EXT4-fs (loop1): 1 truncate cleaned up [ 118.811142][ T6807] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #15: comm syz.1.1081: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 118.898432][ T6827] loop3: detected capacity change from 0 to 512 [ 118.906797][ T6827] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.920992][ T6827] EXT4-fs (loop3): 1 truncate cleaned up [ 119.348828][ T6841] loop3: detected capacity change from 0 to 512 [ 119.356423][ T6841] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 119.371802][ T6841] EXT4-fs (loop3): 1 truncate cleaned up [ 119.464824][ T6855] loop2: detected capacity change from 0 to 128 [ 119.481680][ T6855] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 119.490200][ T6855] FAT-fs (loop2): Filesystem has been set read-only [ 119.497404][ T6855] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 119.505856][ T6855] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 119.643777][ T6862] loop1: detected capacity change from 0 to 128 [ 119.687234][ T6860] loop4: detected capacity change from 0 to 128 [ 119.697227][ T6860] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.772645][ T6880] loop9: detected capacity change from 0 to 7 [ 119.780687][ T6880] loop9: unable to read partition table [ 119.786471][ T6880] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 119.786471][ T6880] ) failed (rc=-5) [ 119.789888][ T6883] loop0: detected capacity change from 0 to 128 [ 119.811928][ T6880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1104'. [ 119.894402][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 120.283930][ T6902] loop3: detected capacity change from 0 to 8192 [ 120.342413][ T6908] loop4: detected capacity change from 0 to 128 [ 120.383647][ T6910] loop2: detected capacity change from 0 to 128 [ 120.447766][ T6913] loop9: detected capacity change from 0 to 7 [ 120.454347][ T6913] loop9: unable to read partition table [ 120.460179][ T6913] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 120.460179][ T6913] ) failed (rc=-5) [ 120.478047][ T6913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1116'. [ 120.555854][ T29] kauditd_printk_skb: 1103 callbacks suppressed [ 120.555930][ T29] audit: type=1326 audit(2000000001.540:18121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4bbeec9 code=0x7ffc0000 [ 120.586784][ T29] audit: type=1326 audit(2000000001.540:18122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4bbeec9 code=0x7ffc0000 [ 120.668484][ T29] audit: type=1326 audit(2000000001.540:18123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febe4bbeec9 code=0x7ffc0000 [ 120.692708][ T29] audit: type=1326 audit(2000000001.540:18124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4bbeec9 code=0x7ffc0000 [ 120.716424][ T29] audit: type=1326 audit(2000000001.540:18125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4bbeec9 code=0x7ffc0000 [ 120.740196][ T29] audit: type=1326 audit(2000000001.540:18126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febe4bbeec9 code=0x7ffc0000 [ 120.763995][ T29] audit: type=1326 audit(2000000001.540:18127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4bbeec9 code=0x7ffc0000 [ 120.787727][ T29] audit: type=1326 audit(2000000001.540:18128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febe4bbeec9 code=0x7ffc0000 [ 120.811503][ T29] audit: type=1326 audit(2000000001.540:18129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7febe4bbeec9 code=0x7ffc0000 [ 120.835790][ T29] audit: type=1326 audit(2000000001.540:18130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.4.1119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7febe4bbeec9 code=0x7ffc0000 [ 121.085314][ T6940] loop0: detected capacity change from 0 to 128 [ 121.107576][ T6940] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 121.116027][ T6940] FAT-fs (loop0): Filesystem has been set read-only [ 121.132048][ T6940] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 121.140403][ T6940] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 121.184057][ T6942] buffer_io_error: 2902 callbacks suppressed [ 121.184079][ T6942] Buffer I/O error on dev loop0, logical block 2065, async page read [ 121.219088][ T6942] Buffer I/O error on dev loop0, logical block 2066, async page read [ 121.236701][ T6942] Buffer I/O error on dev loop0, logical block 2067, async page read [ 121.245076][ T6942] Buffer I/O error on dev loop0, logical block 2068, async page read [ 121.282865][ T6942] Buffer I/O error on dev loop0, logical block 2069, async page read [ 121.352193][ T6942] Buffer I/O error on dev loop0, logical block 2070, async page read [ 121.361917][ T6950] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.398972][ T6942] Buffer I/O error on dev loop0, logical block 2071, async page read [ 121.423923][ T6942] Buffer I/O error on dev loop0, logical block 2072, async page read [ 121.433199][ T6950] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.443609][ T6921] loop3: detected capacity change from 0 to 512 [ 121.451828][ T6940] Buffer I/O error on dev loop0, logical block 2065, async page read [ 121.461807][ T6940] Buffer I/O error on dev loop0, logical block 2066, async page read [ 121.473464][ T6948] loop1: detected capacity change from 0 to 512 [ 121.491377][ T6921] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 121.491978][ T6950] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.511861][ T6948] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.531840][ T6921] EXT4-fs (loop3): 1 truncate cleaned up [ 121.537809][ T6948] EXT4-fs (loop1): 1 truncate cleaned up [ 121.592677][ T6955] loop4: detected capacity change from 0 to 8192 [ 121.620769][ T6950] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.809627][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.822325][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.852433][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.861361][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.957568][ T6967] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 122.034227][ T6969] macvlan2: entered promiscuous mode [ 122.040793][ T6969] macvlan2: entered allmulticast mode [ 122.422725][ T6983] loop3: detected capacity change from 0 to 512 [ 122.450629][ T6983] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 122.483881][ T6983] EXT4-fs (loop3): 1 truncate cleaned up [ 122.512163][ T6983] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.1136: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 122.595772][ T6991] loop2: detected capacity change from 0 to 512 [ 122.602952][ T6991] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.619833][ T6991] EXT4-fs (loop2): 1 truncate cleaned up [ 122.676318][ T6988] loop4: detected capacity change from 0 to 1024 [ 122.690864][ T6988] EXT4-fs: dax option not supported [ 122.740444][ T6999] loop3: detected capacity change from 0 to 128 [ 122.756257][ T6999] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 122.764245][ T6999] FAT-fs (loop3): Filesystem has been set read-only [ 122.773081][ T6971] loop1: detected capacity change from 0 to 512 [ 122.790150][ T6999] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 122.790620][ T6971] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 122.798149][ T6999] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 122.830698][ T6971] EXT4-fs (loop1): 1 truncate cleaned up [ 122.847534][ T6971] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #15: comm syz.1.1131: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 122.937871][ T7016] loop9: detected capacity change from 0 to 7 [ 122.944395][ T7016] loop9: unable to read partition table [ 122.955619][ T7016] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 122.955619][ T7016] ) failed (rc=-5) [ 123.007790][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'. [ 123.126286][ T7032] loop1: detected capacity change from 0 to 512 [ 123.140797][ T7032] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 123.149280][ T7032] EXT4-fs (loop1): orphan cleanup on readonly fs [ 123.157738][ T7032] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.1152: corrupted inode contents [ 123.170234][ T7032] EXT4-fs (loop1): Remounting filesystem read-only [ 123.176954][ T7032] EXT4-fs (loop1): 1 truncate cleaned up [ 123.182831][ T175] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 123.193507][ T175] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 123.204088][ T175] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 123.239637][ T7036] loop1: detected capacity change from 0 to 512 [ 123.246742][ T7036] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.258327][ T7036] EXT4-fs (loop1): 1 truncate cleaned up [ 123.334361][ T7039] loop1: detected capacity change from 0 to 128 [ 123.486300][ T7050] loop1: detected capacity change from 0 to 512 [ 123.494848][ T7050] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.506438][ T7050] EXT4-fs (loop1): 1 truncate cleaned up [ 123.651195][ T7057] loop9: detected capacity change from 0 to 7 [ 123.657468][ T7057] loop9: unable to read partition table [ 123.671655][ T7057] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 123.671655][ T7057] ) failed (rc=-5) [ 123.697123][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1160'. [ 123.854847][ T7066] loop2: detected capacity change from 0 to 512 [ 123.909760][ T7066] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 123.946362][ T7074] loop3: detected capacity change from 0 to 128 [ 123.961049][ T7074] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 123.969185][ T7074] FAT-fs (loop3): Filesystem has been set read-only [ 123.976066][ T7074] bio_check_eod: 26479 callbacks suppressed [ 123.976086][ T7074] syz.3.1168: attempt to access beyond end of device [ 123.976086][ T7074] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 123.977485][ T7066] EXT4-fs (loop2): 1 truncate cleaned up [ 124.023897][ T7074] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 124.032932][ T7074] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 124.064755][ T7078] syz.3.1168: attempt to access beyond end of device [ 124.064755][ T7078] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 124.132999][ T7078] syz.3.1168: attempt to access beyond end of device [ 124.132999][ T7078] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 124.151175][ T7084] loop0: detected capacity change from 0 to 128 [ 124.194996][ T7078] syz.3.1168: attempt to access beyond end of device [ 124.194996][ T7078] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 124.212995][ T7078] syz.3.1168: attempt to access beyond end of device [ 124.212995][ T7078] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 124.237007][ T7078] syz.3.1168: attempt to access beyond end of device [ 124.237007][ T7078] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 124.258071][ T7078] syz.3.1168: attempt to access beyond end of device [ 124.258071][ T7078] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 124.310611][ T7078] syz.3.1168: attempt to access beyond end of device [ 124.310611][ T7078] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 124.369495][ T7078] syz.3.1168: attempt to access beyond end of device [ 124.369495][ T7078] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 124.391412][ T7092] loop1: detected capacity change from 0 to 512 [ 124.398858][ T7092] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.417343][ T7074] syz.3.1168: attempt to access beyond end of device [ 124.417343][ T7074] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 124.488277][ T7092] EXT4-fs (loop1): 1 truncate cleaned up [ 124.661770][ T7108] loop4: detected capacity change from 0 to 512 [ 124.689828][ T7108] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 124.710714][ T7108] EXT4-fs (loop4): 1 truncate cleaned up [ 124.985124][ T7123] loop4: detected capacity change from 0 to 512 [ 124.994265][ T7123] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.039392][ T7123] EXT4-fs (loop4): 1 truncate cleaned up [ 125.074178][ T7125] loop3: detected capacity change from 0 to 128 [ 125.083170][ T7125] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.214387][ T7116] loop1: detected capacity change from 0 to 512 [ 125.245272][ T7116] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 125.258335][ T7116] EXT4-fs (loop1): 1 truncate cleaned up [ 125.353656][ T7137] loop2: detected capacity change from 0 to 512 [ 125.372072][ T7137] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 125.382048][ T7137] EXT4-fs (loop2): orphan cleanup on readonly fs [ 125.391170][ T7137] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1184: corrupted inode contents [ 125.403500][ T7135] loop4: detected capacity change from 0 to 512 [ 125.410334][ T7137] EXT4-fs (loop2): Remounting filesystem read-only [ 125.410976][ T7135] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 125.427775][ T7137] EXT4-fs (loop2): 1 truncate cleaned up [ 125.434339][ T41] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 125.435009][ T7135] EXT4-fs (loop4): 1 truncate cleaned up [ 125.445167][ T41] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 125.464230][ T41] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 125.561514][ T7153] loop2: detected capacity change from 0 to 128 [ 125.570628][ T7153] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 125.578762][ T7153] FAT-fs (loop2): Filesystem has been set read-only [ 125.585634][ T7153] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 125.593691][ T7153] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 126.094054][ T7150] syz.4.1182 (7150) used greatest stack depth: 9680 bytes left [ 126.301976][ T29] kauditd_printk_skb: 2576 callbacks suppressed [ 126.301993][ T29] audit: type=1400 audit(2000000005.660:20695): avc: denied { setopt } for pid=7164 comm="syz.0.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 126.363133][ T7168] loop0: detected capacity change from 0 to 128 [ 126.371772][ T29] audit: type=1326 audit(2000000005.730:20696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 126.395888][ T29] audit: type=1326 audit(2000000005.730:20697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 126.484423][ T29] audit: type=1326 audit(2000000005.730:20698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 126.509955][ T29] audit: type=1326 audit(2000000005.730:20699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 126.534076][ T29] audit: type=1326 audit(2000000005.730:20700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 126.558880][ T29] audit: type=1326 audit(2000000005.730:20701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 126.584702][ T29] audit: type=1326 audit(2000000005.730:20702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 126.608981][ T29] audit: type=1326 audit(2000000005.730:20703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 126.633235][ T29] audit: type=1326 audit(2000000005.730:20704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.1.1194" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fe083d3eec9 code=0x7ffc0000 [ 126.704992][ T7186] loop2: detected capacity change from 0 to 512 [ 126.745502][ T7186] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 126.759079][ T7186] EXT4-fs (loop2): 1 truncate cleaned up [ 126.779869][ T7188] loop1: detected capacity change from 0 to 8192 [ 126.786672][ T7157] loop3: detected capacity change from 0 to 512 [ 126.801706][ T7159] loop4: detected capacity change from 0 to 512 [ 126.808798][ T7159] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 126.819279][ T7157] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 126.832142][ T7159] EXT4-fs (loop4): 1 truncate cleaned up [ 126.843022][ T7157] EXT4-fs (loop3): 1 truncate cleaned up [ 126.852909][ T7157] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.1190: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 127.110485][ T7197] loop3: detected capacity change from 0 to 512 [ 127.122156][ T7197] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.134507][ T7197] EXT4-fs (loop3): 1 truncate cleaned up [ 127.372526][ T7219] loop0: detected capacity change from 0 to 128 [ 127.423603][ T7224] loop3: detected capacity change from 0 to 512 [ 127.435165][ T7225] netlink: 'syz.4.1213': attribute type 1 has an invalid length. [ 127.443324][ T7224] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.456840][ T7224] EXT4-fs (loop3): 1 truncate cleaned up [ 127.471280][ T7224] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.1212: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 127.490958][ T7230] loop2: detected capacity change from 0 to 128 [ 127.514391][ T7233] macvlan2: entered promiscuous mode [ 127.520004][ T7233] macvlan2: entered allmulticast mode [ 127.740181][ T7252] loop9: detected capacity change from 0 to 7 [ 127.746787][ T7252] buffer_io_error: 55698 callbacks suppressed [ 127.746803][ T7252] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.761152][ T7252] Buffer I/O error on dev loop9, logical block 0, async page read [ 127.769598][ T7252] loop9: unable to read partition table [ 127.775479][ T7252] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 127.775479][ T7252] ) failed (rc=-5) [ 127.793506][ T7252] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1218'. [ 127.880090][ T7263] loop0: detected capacity change from 0 to 512 [ 127.890685][ T7263] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 127.899260][ T7263] EXT4-fs (loop0): orphan cleanup on readonly fs [ 127.907325][ T7263] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.1223: corrupted inode contents [ 127.919973][ T7263] EXT4-fs (loop0): Remounting filesystem read-only [ 127.926780][ T7263] EXT4-fs (loop0): 1 truncate cleaned up [ 127.933478][ T51] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 127.944312][ T51] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 127.954975][ T51] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 128.036416][ T7271] loop4: detected capacity change from 0 to 128 [ 128.043604][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'. [ 128.350499][ T7276] loop1: detected capacity change from 0 to 512 [ 128.357717][ T7276] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 128.369285][ T7276] EXT4-fs (loop1): 1 truncate cleaned up [ 128.503184][ T7285] loop9: detected capacity change from 0 to 7 [ 128.510256][ T7280] loop3: detected capacity change from 0 to 1024 [ 128.510416][ T7285] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.517540][ T7280] EXT4-fs: dax option not supported [ 128.526014][ T7285] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.538679][ T7285] loop9: unable to read partition table [ 128.546090][ T7285] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 128.546090][ T7285] ) failed (rc=-5) [ 128.576035][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1230'. [ 128.586950][ T7286] netlink: 'syz.1.1229': attribute type 1 has an invalid length. [ 128.609949][ T7283] macvlan2: entered promiscuous mode [ 128.615308][ T7283] macvlan2: entered allmulticast mode [ 128.622160][ T7283] bond4: entered promiscuous mode [ 128.627740][ T7283] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.638580][ T7290] blktrace: Concurrent blktraces are not allowed on sg0 [ 128.648023][ T7283] bond4: left promiscuous mode [ 128.706659][ T7298] loop2: detected capacity change from 0 to 512 [ 128.722531][ T7298] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 128.731200][ T7298] EXT4-fs (loop2): orphan cleanup on readonly fs [ 128.740932][ T7298] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1235: corrupted inode contents [ 128.753582][ T7298] EXT4-fs (loop2): Remounting filesystem read-only [ 128.760632][ T7298] EXT4-fs (loop2): 1 truncate cleaned up [ 128.766712][ T291] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 128.777553][ T291] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 128.788642][ T291] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 128.825351][ T7307] loop2: detected capacity change from 0 to 128 [ 129.081900][ T7324] loop9: detected capacity change from 0 to 7 [ 129.121559][ T7324] Buffer I/O error on dev loop9, logical block 0, async page read [ 129.136472][ T7325] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1242'. [ 129.146923][ T7324] Buffer I/O error on dev loop9, logical block 0, async page read [ 129.154913][ T7324] loop9: unable to read partition table [ 129.179179][ T7324] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 129.179179][ T7324] ) failed (rc=-5) [ 129.255933][ T7331] blktrace: Concurrent blktraces are not allowed on sg0 [ 129.275306][ T7326] loop1: detected capacity change from 0 to 512 [ 129.290688][ T7326] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 129.302545][ T7329] loop0: detected capacity change from 0 to 512 [ 129.302771][ T7326] EXT4-fs (loop1): 1 truncate cleaned up [ 129.314978][ T7329] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.338224][ T7329] EXT4-fs (loop0): 1 truncate cleaned up [ 129.573999][ T7346] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.624000][ T7344] loop1: detected capacity change from 0 to 8192 [ 129.666211][ T7346] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.866205][ T7343] loop4: detected capacity change from 0 to 512 [ 129.883510][ T7343] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.917596][ T7346] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.973566][ T7343] EXT4-fs (loop4): 1 truncate cleaned up [ 130.118172][ T7356] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.1251'. [ 130.420921][ T7346] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.484553][ T51] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.509178][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.517430][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.531609][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.554669][ T7351] loop3: detected capacity change from 0 to 512 [ 130.571363][ T7351] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 130.591141][ T7351] EXT4-fs (loop3): 1 truncate cleaned up [ 130.595366][ T7368] blktrace: Concurrent blktraces are not allowed on sg0 [ 130.598953][ T7351] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #15: comm syz.3.1250: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 130.650533][ T7373] loop4: detected capacity change from 0 to 512 [ 130.721775][ T7373] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 130.741418][ T7373] EXT4-fs (loop4): orphan cleanup on readonly fs [ 130.753828][ T7373] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1257: corrupted inode contents [ 130.772983][ T7389] loop2: detected capacity change from 0 to 128 [ 130.774440][ T7373] EXT4-fs (loop4): Remounting filesystem read-only [ 130.783951][ T7390] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.786465][ T7373] EXT4-fs (loop4): 1 truncate cleaned up [ 130.802420][ T175] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 130.813152][ T175] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 130.824081][ T175] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 130.835334][ T7373] EXT4-fs mount: 122 callbacks suppressed [ 130.835358][ T7373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.872744][ T7390] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.883465][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.898096][ T7395] loop9: detected capacity change from 0 to 7 [ 130.904852][ T7395] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.911734][ T7397] loop4: detected capacity change from 0 to 512 [ 130.914427][ T7395] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.927258][ T7395] loop9: unable to read partition table [ 130.933421][ T7395] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 130.933421][ T7395] ) failed (rc=-5) [ 130.948496][ T7390] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.958642][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1264'. [ 130.986366][ T7398] netlink: 'syz.4.1265': attribute type 10 has an invalid length. [ 131.000167][ T7400] loop0: detected capacity change from 0 to 128 [ 131.009080][ T7400] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 131.017161][ T7400] FAT-fs (loop0): Filesystem has been set read-only [ 131.024190][ T7400] bio_check_eod: 33531 callbacks suppressed [ 131.024212][ T7400] syz.0.1266: attempt to access beyond end of device [ 131.024212][ T7400] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 131.026682][ T7390] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.030308][ T7400] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 131.062125][ T7400] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 131.070373][ T7400] syz.0.1266: attempt to access beyond end of device [ 131.070373][ T7400] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.083844][ T7400] syz.0.1266: attempt to access beyond end of device [ 131.083844][ T7400] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.097954][ T7400] syz.0.1266: attempt to access beyond end of device [ 131.097954][ T7400] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 131.113185][ T7400] syz.0.1266: attempt to access beyond end of device [ 131.113185][ T7400] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.113273][ T7400] syz.0.1266: attempt to access beyond end of device [ 131.113273][ T7400] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.113407][ T7400] syz.0.1266: attempt to access beyond end of device [ 131.113407][ T7400] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 131.155833][ T7401] syz.0.1266: attempt to access beyond end of device [ 131.155833][ T7401] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 131.169287][ T7401] Buffer I/O error on dev loop0, logical block 2065, async page read [ 131.178143][ T7401] syz.0.1266: attempt to access beyond end of device [ 131.178143][ T7401] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 131.188734][ T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.192052][ T7401] Buffer I/O error on dev loop0, logical block 2066, async page read [ 131.209672][ T7401] syz.0.1266: attempt to access beyond end of device [ 131.209672][ T7401] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 131.213393][ T51] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.241189][ T51] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.255790][ T51] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.306476][ T7406] loop1: detected capacity change from 0 to 512 [ 131.314686][ T7406] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.326983][ T7406] EXT4-fs (loop1): 1 truncate cleaned up [ 131.333383][ T7406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.348276][ T7406] EXT4-fs error (device loop1): ext4_ext_precache:632: inode #15: comm syz.1.1268: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964) [ 131.380121][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.491418][ T7414] loop1: detected capacity change from 0 to 128 [ 131.562724][ T7418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1272'. [ 131.592594][ T29] kauditd_printk_skb: 1864 callbacks suppressed [ 131.592695][ T29] audit: type=1326 audit(2000000000.860:22551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.3.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ab3ceec9 code=0x7ffc0000 [ 131.625117][ T29] audit: type=1326 audit(2000000000.860:22552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.3.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7ab3ceec9 code=0x7ffc0000 [ 131.649522][ T29] audit: type=1326 audit(2000000000.860:22553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.3.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ab3ceec9 code=0x7ffc0000 [ 131.673408][ T29] audit: type=1326 audit(2000000000.860:22554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.3.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ab3ceec9 code=0x7ffc0000 [ 131.697111][ T29] audit: type=1326 audit(2000000000.860:22555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.3.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7ab3ceec9 code=0x7ffc0000 [ 131.720863][ T29] audit: type=1326 audit(2000000000.890:22556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.3.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ab3ceec9 code=0x7ffc0000 [ 131.758154][ T29] audit: type=1326 audit(2000000000.890:22557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.3.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7fc7ab3ceec9 code=0x7ffc0000 [ 131.782641][ T29] audit: type=1326 audit(2000000000.890:22558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.3.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7ab3ceec9 code=0x7ffc0000 [ 131.877643][ T7434] netlink: 'syz.4.1279': attribute type 1 has an invalid length. [ 131.886819][ T7435] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.913332][ T7434] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 131.942830][ T7434] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 131.958768][ T7435] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.973720][ T7442] macvlan2: entered promiscuous mode [ 131.979245][ T7442] macvlan2: entered allmulticast mode [ 131.985329][ T7442] bond4: entered promiscuous mode [ 131.990824][ T7442] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 132.003085][ T7442] bond4: left promiscuous mode [ 132.035240][ T7435] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.086278][ T7435] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.145901][ T291] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.154495][ T291] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.183833][ T291] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.197480][ T291] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.234309][ T29] audit: type=1326 audit(2000000001.500:22559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2abb13eec9 code=0x7ffc0000 [ 132.276131][ T29] audit: type=1326 audit(2000000001.530:22560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.2.1284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2abb13eec9 code=0x7ffc0000 [ 132.326519][ T7454] loop0: detected capacity change from 0 to 512 [ 132.344838][ T7454] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 132.363993][ T7458] loop3: detected capacity change from 0 to 512 [ 132.377802][ T7458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 132.392175][ T7463] loop1: detected capacity change from 0 to 128 [ 132.402332][ T7454] EXT4-fs (loop0): 1 truncate cleaned up [ 132.404169][ T7463] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 132.408665][ T7454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.416020][ T7463] FAT-fs (loop1): Filesystem has been set read-only [ 132.437114][ T7463] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 132.445468][ T7463] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 132.461006][ T7458] EXT4-fs (loop3): 1 truncate cleaned up [ 132.471453][ T7458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.675526][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.698399][ T7472] loop0: detected capacity change from 0 to 128 [ 132.746987][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.830853][ T7479] loop3: detected capacity change from 0 to 8192 [ 132.859967][ T7481] netlink: 'syz.2.1293': attribute type 1 has an invalid length. [ 132.881305][ T7481] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 132.893789][ T7481] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 132.934000][ T7484] macvlan2: entered promiscuous mode [ 132.939712][ T7484] macvlan2: entered allmulticast mode [ 132.946115][ T7484] bond1: entered promiscuous mode [ 132.951760][ T7484] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 132.965193][ T7484] bond1: left promiscuous mode [ 133.080982][ T7494] loop9: detected capacity change from 0 to 7 [ 133.087464][ T7494] buffer_io_error: 3662 callbacks suppressed [ 133.087483][ T7494] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.087494][ T7496] loop4: detected capacity change from 0 to 512 [ 133.088140][ T7496] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.103205][ T7494] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.110093][ T7496] EXT4-fs (loop4): 1 truncate cleaned up [ 133.118628][ T7494] loop9: unable to read partition table [ 133.127477][ T7496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.151184][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1298'. [ 133.163065][ T7494] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 133.163065][ T7494] ) failed (rc=-5) [ 133.228384][ T7501] ================================================================== [ 133.237359][ T7501] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 133.244717][ T7501] [ 133.247141][ T7501] read-write to 0xffff88811a178b58 of 8 bytes by task 7496 on cpu 0: [ 133.255213][ T7501] xas_clear_mark+0x91/0x180 [ 133.259913][ T7501] __folio_start_writeback+0x2e7/0x440 [ 133.265400][ T7501] ext4_bio_write_folio+0x5ad/0x9f0 [ 133.270643][ T7501] mpage_process_page_bufs+0x4a1/0x620 [ 133.276382][ T7501] mpage_prepare_extent_to_map+0x786/0xc00 [ 133.282290][ T7501] ext4_do_writepages+0x708/0x2750 [ 133.287429][ T7501] ext4_writepages+0x176/0x300 [ 133.292306][ T7501] do_writepages+0x1c3/0x310 [ 133.296944][ T7501] file_write_and_wait_range+0x156/0x2c0 [ 133.302692][ T7501] generic_buffers_fsync_noflush+0x45/0x120 [ 133.308612][ T7501] ext4_sync_file+0x1ab/0x690 [ 133.313307][ T7501] vfs_fsync_range+0x10a/0x130 [ 133.318180][ T7501] ext4_buffered_write_iter+0x34f/0x3c0 [ 133.323855][ T7501] ext4_file_write_iter+0x383/0xf00 [ 133.329170][ T7501] do_iter_readv_writev+0x499/0x540 [ 133.334387][ T7501] vfs_writev+0x2df/0x8b0 [ 133.338766][ T7501] do_writev+0xe7/0x210 [ 133.342954][ T7501] __x64_sys_writev+0x45/0x50 [ 133.347805][ T7501] x64_sys_call+0x1e9a/0x2ff0 [ 133.352518][ T7501] do_syscall_64+0xd2/0x200 [ 133.357133][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.363044][ T7501] [ 133.365379][ T7501] read to 0xffff88811a178b58 of 8 bytes by task 7501 on cpu 1: [ 133.373328][ T7501] xas_find_marked+0x218/0x620 [ 133.378144][ T7501] find_get_entry+0x5d/0x380 [ 133.383025][ T7501] filemap_get_folios_tag+0x13b/0x210 [ 133.388429][ T7501] mpage_prepare_extent_to_map+0x320/0xc00 [ 133.394251][ T7501] ext4_do_writepages+0x708/0x2750 [ 133.399440][ T7501] ext4_writepages+0x176/0x300 [ 133.404335][ T7501] do_writepages+0x1c3/0x310 [ 133.408985][ T7501] filemap_write_and_wait_range+0x144/0x340 [ 133.415012][ T7501] fiemap_prep+0x14d/0x170 [ 133.419473][ T7501] iomap_fiemap+0x8c/0x460 [ 133.423907][ T7501] ext4_fiemap+0x1f9/0x220 [ 133.428342][ T7501] do_vfs_ioctl+0xc5e/0xe10 [ 133.432855][ T7501] __se_sys_ioctl+0x82/0x140 [ 133.437473][ T7501] __x64_sys_ioctl+0x43/0x50 [ 133.442069][ T7501] x64_sys_call+0x1816/0x2ff0 [ 133.446849][ T7501] do_syscall_64+0xd2/0x200 [ 133.451391][ T7501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.457299][ T7501] [ 133.459633][ T7501] value changed: 0x003fffffffffffff -> 0x003ffffffffffffc [ 133.466932][ T7501] [ 133.469363][ T7501] Reported by Kernel Concurrency Sanitizer on: [ 133.475544][ T7501] CPU: 1 UID: 0 PID: 7501 Comm: syz.4.1299 Not tainted syzkaller #0 PREEMPT(voluntary) [ 133.485319][ T7501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.495680][ T7501] ================================================================== [ 133.565899][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.