last executing test programs: 20.523691239s ago: executing program 0 (id=48): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0x58) 20.355050802s ago: executing program 0 (id=51): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 20.137147629s ago: executing program 0 (id=57): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) 19.966277794s ago: executing program 0 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x6}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@remote, @in6=@private0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000080000001b00000018000180140002007465616d5f736c6176655f30"], 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x3) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$eJzs3U9oHNUfAPDvzDb59U9+JhURWxQDHipIt9lYrHpqezGHggU9iHhoaDY1ZNOEJAUTemjBi1BB1KuHXgTP3iV3byKoN48iVJGIJyEyu7NJTHaTELJOmvl8YHbfn03e++7wMu/t7CMBlNZw9pBGnImIG0nE4Ka6Y5FXDrdet/rH3ZvZkcTa2lu/J5HkZe3XJ/nzqTxzPCK+uxrxZGV7uwtLy9PjjUZ9Ps9fWJyZu7CwtHx+amb8Vv1W/XZt9NWLl0Zeq12sHVisD7767Jexa28++/GH778y+X3jfBKXYyCv2xzHQRmO4fX3ZLPsfb100I0VpJLH0ylODr/2+euLiKdjMCr5qM8MxtSDQjsH9NRaJWINKKnE+IeSas8D2mv7XqyDD7NHV1oLoO3xH2t9NhLHm2ujk6vJppVRa707dADtZ238fffsF9kRPfocYif37kfEM53iT5p9G2p+ipPFn/4r/jQiRvL+Z+Wj+2x/eEv+cYr/cv6clV/dZ/tFxw9AOa1caV3It1//0vX5T3SY/wx0uHbtR9HXv+7zv434K13mf9f32MbPH4192q1u8/wvO7L223PB/8Kj+xFnO8afrMefdIg/m/fc2GMbb/zw21i3uqLjX3sYca7j+mfjjlay8/3JC5NTjfpI67FjG998+96X3dovOv7s/J/sEv9O5z8rm9tjG19ffzjTrW73+NNf+5O3m6n+vOSD8cXF+VpEf3Jte/kuC5H2a9q/I4v/xRd2Hv+d4j+RrR32GP/cO9Or+4+/t7L4J/Z5/j/ZYxt/vXvnuW51RccPAAAAAAAAR0na/C5HklbX02larbb28D4VJ9PG7MLiS5Ozd25PtL7zMRR9aftO92Arn2T5Wv592HZ+dEv+5Yg4HRGfV04089Wbs42JooMHAAAAAAAAAAAAAAAAAACAQ+LUlv3/f1Za+/+BkjhWdAeAwhj/UF7GP5SX8Q/lZfxDeRn/UF7GP5SX8Q/lZfxDeRn/UF7GPwAAAAAcSaefX/kpiYh7r59oHpn+vK6v0J4BvZYW3QGgMJWiOwAUxq1/KC9rfCDZpf54t4qV3X4SAAAAAAAAAAAAADgo587Y/w9lZf8/lJf9/1Be9v9DeVnjA/b/AwAAAAAAAAAAAMDhN9A8krSa7wUeiDStViP+HxFD0ZdMTjXqIxHxRET8WOn7X5avFd1pAAAAAAAAAAAAAAAAAAAAOGIWlpanxxuN+ryEhITEeqLov0wAAAAAAAAAAAAAAAAAAFA+G5t+i+4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABRn4///9y5RdIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOPpnwAAAP//bKsggw==") socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) 19.907296629s ago: executing program 0 (id=61): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ff0f00000000000000fe00"/32], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x130}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000b69e087b9d2f128b78000000200d255a26b88c194bc3c8e96bba0648e4d279a816d3117ca020b6c5e2848cd6e3da36d0ae091865cde291a45e78a7afe754c71dec9f5ad9c215af2400d261cd515af3c65bcb4723f733f46899687457f3990e40fccf819808065bcf8c4474dbc7c46fadd2f6eeff9219800209300d16f3127070e657ad786dd89bbadbe6f644a255dd79c7ae000000e4c5ae35e916a3891e97492ab401907ec97104f53bf4a84873b06bc24c1a380b64d5c76a594bd945f8556621bdd484b123d15a2380bd82c267d747254d12aaa96c434f34470da0f8a4facd"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='io_uring_req_failed\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) syz_io_uring_setup(0x10b, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) io_pgetevents(0x0, 0x5, 0xfffffffffffffe4b, &(0x7f0000000400)=[{}], &(0x7f0000000380)={0x0, 0x3938700}, 0x0) 19.684319226s ago: executing program 0 (id=63): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x88, &(0x7f0000000640)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@norecovery}, {@nodiscard}, {@grpid}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") chdir(&(0x7f0000000500)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file2\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) 19.684045926s ago: executing program 32 (id=63): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x88, &(0x7f0000000640)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@norecovery}, {@nodiscard}, {@grpid}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") chdir(&(0x7f0000000500)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x538, &(0x7f0000000600)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file5\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file2\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) 1.892337748s ago: executing program 2 (id=295): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280080002400000000e080001400000001405000300630000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tee(r1, r0, 0x7, 0x8) sigaltstack(0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000001c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x2040, 0x0) pause() fcntl$setlease(r7, 0x400, 0x0) fremovexattr(r7, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bind$unix(r2, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) 1.561133235s ago: executing program 1 (id=299): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 1.532741167s ago: executing program 1 (id=300): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4084, 0xff4}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}]}}], 0x3, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000380)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@fmask}, {@uni_xlate}, {@uni_xlateno}, {@rodir}, {@shortname_mixed}, {@uni_xlateno}, {@utf8no}, {@utf8}, {@shortname_win95}, {@rodir}, {@fat=@nfs_nostale_ro}, {@rodir}, {@utf8}, {@shortname_winnt}, {}]}, 0x6, 0x2c3, &(0x7f0000000900)="$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") r5 = dup3(r1, r0, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.24511232s ago: executing program 5 (id=303): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_complete(0x0) fsetxattr$security_capability(r1, &(0x7f0000000400), &(0x7f0000000180)=@v3={0x3000000, [{0xd5a, 0x10a}, {0x6}]}, 0x18, 0x1) (fail_nth: 1) 1.039715947s ago: executing program 2 (id=305): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x59, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0xfe59}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_complete(0x0) fsetxattr$security_capability(r1, &(0x7f0000000400), &(0x7f0000000180)=@v3={0x3000000, [{0xd5a, 0x10a}, {0x6}]}, 0x18, 0x1) 984.550251ms ago: executing program 2 (id=307): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@dots}, {@nodots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@dots}]}, 0x4, 0x157, &(0x7f00000004c0)="$eJzs2z+LE0EcBuBfzB+jNqnFYsHGKqifQJEI4oIipLFSiDaJBEyz2piP4hcUJFW6EV1J7nLJkRzs7ZE8T5MX3hmYKbLDLOyHB1/Go+ns8/TtIrqNRrSeRRbLRvTiVjSjNA8A4JgsU4rfKaV0ex53fkZK6cKQH7UsDACozB7nPwBwZJz/AHB6nP8AcHo68f718zwfvMuybsSveTEshuVv2b98lQ8eZ//01rMWRTFsrvonZZ+d79tx93//dGvfiUcPy/5v9+JNvtHfi1H12wcAAICT0M9Wtt7v+/1dfZnOvB/YuL+34n7r2rYBABxg9u37+ONk8unrQSHiKrOOIrQj4gYsQxCqDXU/mYCqrf/0da8EAAAAAAAAAAAAAADYZe/vgbqXD16m3dPr3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs+hMAAP//P3BOpw==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 984.260181ms ago: executing program 5 (id=308): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa66a6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1ffffffffffffe06, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 920.818716ms ago: executing program 5 (id=312): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) 898.267658ms ago: executing program 4 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x40, 0x0, 0x0, 0x5}]}) 892.075658ms ago: executing program 5 (id=314): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4084, 0xff4}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}]}}], 0x3, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40000001, 0x0) 832.297694ms ago: executing program 4 (id=317): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x4, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_config_ext={0x9, 0xb92}, 0x10048a, 0x81, 0x7ff, 0x1, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="9800000000000000020000000000000085000000130000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, &(0x7f0000000200)=[{&(0x7f0000001380)=""/129, 0x81}, {0x0}, {&(0x7f00000002c0)=""/118, 0x76}], 0x3, 0x0, 0x4, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000140)={r4, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 820.418994ms ago: executing program 2 (id=318): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, 0x0, 0x0, 0x8080c61) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) close(r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r8 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000140)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x4, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddabca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a01000000000000000003000000000000008f3400", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5112406c7f000000155cc30cf11d0bd00000000400", [0x4, 0x40000000000000]}}) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0xfffffffffffffe3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_bp={0x0}, 0x0, 0x1003, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100000009}, r3, 0x0, 0xffffffffffffffff, 0x0) 701.374784ms ago: executing program 4 (id=320): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r3}, 0x18) setreuid(0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x20, &(0x7f00000002c0)={&(0x7f0000000900)=""/173, 0xad, 0x0, &(0x7f00000009c0)=""/153, 0x99}}, 0x10) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet6_int(r5, 0x29, 0x12, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xc, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffffb) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={0x0, @local, @local}, &(0x7f00000001c0)=0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', r6, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAF(r8, 0x5408, &(0x7f00000000c0)={0x2, 0x5, 0x7, 0x2, 0x5, "6b1c14a434a2622a"}) r9 = socket$tipc(0x1e, 0x5, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffa000/0x3000)=nil) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r9, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 675.011456ms ago: executing program 2 (id=321): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 674.365916ms ago: executing program 1 (id=322): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa66a6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1ffffffffffffe06, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 633.227669ms ago: executing program 4 (id=324): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) 627.37363ms ago: executing program 1 (id=325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff43052f002000636777fbac141443e000000d62079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 626.15738ms ago: executing program 2 (id=326): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4084, 0xff4}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}]}}], 0x3, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) r5 = dup3(r1, r0, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 572.004484ms ago: executing program 1 (id=328): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@dots}, {@nodots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@dots}]}, 0x4, 0x157, &(0x7f00000004c0)="$eJzs2z+LE0EcBuBfzB+jNqnFYsHGKqifQJEI4oIipLFSiDaJBEyz2piP4hcUJFW6EV1J7nLJkRzs7ZE8T5MX3hmYKbLDLOyHB1/Go+ns8/TtIrqNRrSeRRbLRvTiVjSjNA8A4JgsU4rfKaV0ex53fkZK6cKQH7UsDACozB7nPwBwZJz/AHB6nP8AcHo68f718zwfvMuybsSveTEshuVv2b98lQ8eZ//01rMWRTFsrvonZZ+d79tx93//dGvfiUcPy/5v9+JNvtHfi1H12wcAAICT0M9Wtt7v+/1dfZnOvB/YuL+34n7r2rYBABxg9u37+ONk8unrQSHiKrOOIrQj4gYsQxCqDXU/mYCqrf/0da8EAAAAAAAAAAAAAADYZe/vgbqXD16m3dPr3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs+hMAAP//P3BOpw==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 571.539224ms ago: executing program 4 (id=329): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x2}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)='}\xfe$$($[\x00', 0x0) 538.653237ms ago: executing program 4 (id=330): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") truncate(&(0x7f0000000040)='./file2\x00', 0x8000c00) 412.572527ms ago: executing program 1 (id=333): recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4084, 0xff4}}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}]}}], 0x3, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000380)={[{@utf8no}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@fmask}, {@uni_xlate}, {@uni_xlateno}, {@rodir}, {@shortname_mixed}, {@uni_xlateno}, {@utf8no}, {@utf8}, {@shortname_win95}, {@rodir}, {@fat=@nfs_nostale_ro}, {@rodir}, {@utf8}, {@shortname_winnt}, {}]}, 0x6, 0x2c3, &(0x7f0000000900)="$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") r5 = dup3(r1, r0, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 215.227633ms ago: executing program 3 (id=338): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 160.622597ms ago: executing program 3 (id=339): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xffa8) truncate(&(0x7f0000000080)='./file1\x00', 0xfff) getpid() 87.252893ms ago: executing program 3 (id=340): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x2}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000180)='}\xfe$$($[\x00', 0x0) 69.675905ms ago: executing program 3 (id=341): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @v={0x9, 0x2, 0x5, 0x6, 0x6, 0x5, 0xbe, {0xd8, 0xff, "66f8878f34dfbd2a"}, 0x33, 0x8, 0x4, 0x6, 0x4, "e46e3441"}}, 0x1d) 42.218167ms ago: executing program 5 (id=342): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) io_pgetevents(0x0, 0x5, 0xfffffffffffffe4b, &(0x7f0000000400)=[{}], &(0x7f0000000380)={0x0, 0x3938700}, 0x0) 524.2µs ago: executing program 3 (id=343): socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4, @local, {[@routing={0x29}]}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 288.85µs ago: executing program 5 (id=344): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@dots}, {@nodots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@dots}]}, 0x4, 0x157, &(0x7f00000004c0)="$eJzs2z+LE0EcBuBfzB+jNqnFYsHGKqifQJEI4oIipLFSiDaJBEyz2piP4hcUJFW6EV1J7nLJkRzs7ZE8T5MX3hmYKbLDLOyHB1/Go+ns8/TtIrqNRrSeRRbLRvTiVjSjNA8A4JgsU4rfKaV0ex53fkZK6cKQH7UsDACozB7nPwBwZJz/AHB6nP8AcHo68f718zwfvMuybsSveTEshuVv2b98lQ8eZ//01rMWRTFsrvonZZ+d79tx93//dGvfiUcPy/5v9+JNvtHfi1H12wcAAICT0M9Wtt7v+/1dfZnOvB/YuL+34n7r2rYBABxg9u37+ONk8unrQSHiKrOOIrQj4gYsQxCqDXU/mYCqrf/0da8EAAAAAAAAAAAAAADYZe/vgbqXD16m3dPr3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs+hMAAP//P3BOpw==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 0s ago: executing program 3 (id=345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x6}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@remote, @in6=@private0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000080000001b00000018000180140002007465616d5f736c6176655f30"], 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x3) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") r9 = socket$pptp(0x18, 0x1, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 17.806244][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 17.806259][ T29] audit: type=1400 audit(1754456116.978:57): avc: denied { transition } for pid=3180 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.810772][ T29] audit: type=1400 audit(1754456116.978:58): avc: denied { noatsecure } for pid=3180 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.813752][ T29] audit: type=1400 audit(1754456116.978:59): avc: denied { write } for pid=3180 comm="sh" path="pipe:[2381]" dev="pipefs" ino=2381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 17.816993][ T29] audit: type=1400 audit(1754456116.978:60): avc: denied { rlimitinh } for pid=3180 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.819679][ T29] audit: type=1400 audit(1754456116.978:61): avc: denied { siginh } for pid=3180 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.239' (ED25519) to the list of known hosts. [ 25.137153][ T29] audit: type=1400 audit(1754456124.308:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.138055][ T3292] cgroup: Unknown subsys name 'net' [ 25.160222][ T29] audit: type=1400 audit(1754456124.308:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.187582][ T29] audit: type=1400 audit(1754456124.338:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.346681][ T3292] cgroup: Unknown subsys name 'cpuset' [ 25.352951][ T3292] cgroup: Unknown subsys name 'rlimit' [ 25.522505][ T29] audit: type=1400 audit(1754456124.688:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.545933][ T29] audit: type=1400 audit(1754456124.688:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.566664][ T29] audit: type=1400 audit(1754456124.688:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.587211][ T29] audit: type=1400 audit(1754456124.688:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.594511][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.607479][ T29] audit: type=1400 audit(1754456124.698:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.640812][ T29] audit: type=1400 audit(1754456124.698:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.664131][ T29] audit: type=1400 audit(1754456124.788:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.697291][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.862082][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 26.939600][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 26.948943][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 26.966913][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 26.975878][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.983073][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.990453][ T3304] bridge_slave_0: entered allmulticast mode [ 26.996831][ T3304] bridge_slave_0: entered promiscuous mode [ 27.016688][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.023810][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.031043][ T3304] bridge_slave_1: entered allmulticast mode [ 27.037436][ T3304] bridge_slave_1: entered promiscuous mode [ 27.046591][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.090654][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.111249][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.170674][ T3304] team0: Port device team_slave_0 added [ 27.176657][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.183702][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.191040][ T3308] bridge_slave_0: entered allmulticast mode [ 27.197473][ T3308] bridge_slave_0: entered promiscuous mode [ 27.203865][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.211223][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.218570][ T3302] bridge_slave_0: entered allmulticast mode [ 27.225243][ T3302] bridge_slave_0: entered promiscuous mode [ 27.231575][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.238649][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.246120][ T3303] bridge_slave_0: entered allmulticast mode [ 27.252442][ T3303] bridge_slave_0: entered promiscuous mode [ 27.264843][ T3304] team0: Port device team_slave_1 added [ 27.270740][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.277873][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.285430][ T3308] bridge_slave_1: entered allmulticast mode [ 27.291863][ T3308] bridge_slave_1: entered promiscuous mode [ 27.298201][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.305261][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.312542][ T3302] bridge_slave_1: entered allmulticast mode [ 27.319117][ T3302] bridge_slave_1: entered promiscuous mode [ 27.325481][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.332574][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.339794][ T3303] bridge_slave_1: entered allmulticast mode [ 27.346239][ T3303] bridge_slave_1: entered promiscuous mode [ 27.379654][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.386841][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.393939][ T3311] bridge_slave_0: entered allmulticast mode [ 27.400401][ T3311] bridge_slave_0: entered promiscuous mode [ 27.407233][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.414600][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.440684][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.457584][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.477799][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.486972][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.494014][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.501244][ T3311] bridge_slave_1: entered allmulticast mode [ 27.507718][ T3311] bridge_slave_1: entered promiscuous mode [ 27.513940][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.520978][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.547198][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.558984][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.574482][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.584654][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.611490][ T3308] team0: Port device team_slave_0 added [ 27.618657][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.636930][ T3303] team0: Port device team_slave_0 added [ 27.647934][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.658669][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.668440][ T3308] team0: Port device team_slave_1 added [ 27.679450][ T3303] team0: Port device team_slave_1 added [ 27.685808][ T3302] team0: Port device team_slave_0 added [ 27.717177][ T3302] team0: Port device team_slave_1 added [ 27.728257][ T3311] team0: Port device team_slave_0 added [ 27.734593][ T3311] team0: Port device team_slave_1 added [ 27.748780][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.755823][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.781979][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.803817][ T3304] hsr_slave_0: entered promiscuous mode [ 27.809958][ T3304] hsr_slave_1: entered promiscuous mode [ 27.816231][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.823175][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.849495][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.860613][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.867605][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.893791][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.916493][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.923586][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.949522][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.962048][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.969113][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.995066][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.013485][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.020464][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.046613][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.057857][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.064804][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.090858][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.101760][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.108714][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.134857][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.163521][ T3303] hsr_slave_0: entered promiscuous mode [ 28.169638][ T3303] hsr_slave_1: entered promiscuous mode [ 28.175497][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 28.181268][ T3303] Cannot create hsr debugfs directory [ 28.219317][ T3311] hsr_slave_0: entered promiscuous mode [ 28.225355][ T3311] hsr_slave_1: entered promiscuous mode [ 28.231273][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 28.237147][ T3311] Cannot create hsr debugfs directory [ 28.270708][ T3302] hsr_slave_0: entered promiscuous mode [ 28.277071][ T3302] hsr_slave_1: entered promiscuous mode [ 28.282985][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 28.288729][ T3302] Cannot create hsr debugfs directory [ 28.297271][ T3308] hsr_slave_0: entered promiscuous mode [ 28.303172][ T3308] hsr_slave_1: entered promiscuous mode [ 28.309217][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 28.314921][ T3308] Cannot create hsr debugfs directory [ 28.493734][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.507361][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.518681][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.529603][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.545085][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.554275][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.563092][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.571738][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.602283][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.611041][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.625862][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.635693][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.668647][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.677913][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.696843][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.712592][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.739405][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.755064][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.767975][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.778076][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.791275][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.809615][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.818245][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.827591][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.838297][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.845629][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.869014][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.876322][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.894488][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.902858][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.917722][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.924909][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.934975][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.942057][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.967659][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.974786][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.984951][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.992013][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.032181][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.054148][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.069629][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.080301][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.090831][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.111959][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.137516][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.144575][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.156228][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.163337][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.182737][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.193139][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.212341][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.219442][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.238152][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.250393][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.257502][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.279971][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.298141][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.313974][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.435896][ T3304] veth0_vlan: entered promiscuous mode [ 29.476895][ T3304] veth1_vlan: entered promiscuous mode [ 29.492178][ T3308] veth0_vlan: entered promiscuous mode [ 29.499894][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.512428][ T3303] veth0_vlan: entered promiscuous mode [ 29.518562][ T3304] veth0_macvtap: entered promiscuous mode [ 29.527541][ T3304] veth1_macvtap: entered promiscuous mode [ 29.541979][ T3308] veth1_vlan: entered promiscuous mode [ 29.549169][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.559681][ T3303] veth1_vlan: entered promiscuous mode [ 29.573990][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.597058][ T166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.605797][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.616726][ T3308] veth0_macvtap: entered promiscuous mode [ 29.629119][ T3308] veth1_macvtap: entered promiscuous mode [ 29.641098][ T3303] veth0_macvtap: entered promiscuous mode [ 29.648071][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.660497][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.670617][ T3302] veth0_vlan: entered promiscuous mode [ 29.685328][ T3303] veth1_macvtap: entered promiscuous mode [ 29.697281][ T3302] veth1_vlan: entered promiscuous mode [ 29.708683][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.729105][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.740520][ T3302] veth0_macvtap: entered promiscuous mode [ 29.752740][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.761901][ T3302] veth1_macvtap: entered promiscuous mode [ 29.766888][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.770413][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.791471][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.804422][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.818409][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.828656][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.835940][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.853438][ T3311] veth0_vlan: entered promiscuous mode [ 29.860524][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.869644][ T3470] loop2: detected capacity change from 0 to 1024 [ 29.881107][ T3470] ======================================================= [ 29.881107][ T3470] WARNING: The mand mount option has been deprecated and [ 29.881107][ T3470] and is ignored by this kernel. Remove the mand [ 29.881107][ T3470] option from the mount to silence this warning. [ 29.881107][ T3470] ======================================================= [ 29.921180][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.931435][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.941139][ T3311] veth1_vlan: entered promiscuous mode [ 29.948125][ T3470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 29.960412][ T3470] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.962061][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.982322][ T3470] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.3: lblock 3 mapped to illegal pblock 3 (length 3) [ 29.983918][ T3473] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 29.998801][ T3470] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 30.023297][ T3470] EXT4-fs (loop2): This should not happen!! Data will be lost [ 30.023297][ T3470] [ 30.047641][ T386] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.056997][ T3311] veth0_macvtap: entered promiscuous mode [ 30.071208][ T386] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.083805][ T3470] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 30.084361][ T3311] veth1_macvtap: entered promiscuous mode [ 30.109187][ T3470] EXT4-fs error (device loop2) in ext4_setattr:6071: Corrupt filesystem [ 30.127692][ T386] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.155827][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 30.168911][ T386] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.179468][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.189099][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 30.189121][ T29] audit: type=1400 audit(1754456129.358:101): avc: denied { bpf } for pid=3478 comm="syz.4.5" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.220353][ T386] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.230675][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.282787][ T386] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.290213][ T3481] loop0: detected capacity change from 0 to 2048 [ 30.295445][ T29] audit: type=1400 audit(1754456129.388:102): avc: denied { prog_load } for pid=3478 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.316931][ T29] audit: type=1400 audit(1754456129.388:103): avc: denied { prog_run } for pid=3478 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.322580][ T3483] loop1: detected capacity change from 0 to 512 [ 30.335770][ T29] audit: type=1400 audit(1754456129.428:104): avc: denied { mount } for pid=3482 comm="syz.1.2" name="/" dev="hugetlbfs" ino=3855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 30.364938][ T29] audit: type=1400 audit(1754456129.448:105): avc: denied { create } for pid=3482 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.380716][ T3483] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.385623][ T29] audit: type=1400 audit(1754456129.458:106): avc: denied { write } for pid=3482 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 30.398649][ T3483] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 30.454238][ T386] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.463424][ T386] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.478206][ T3484] Alternate GPT is invalid, using primary GPT. [ 30.484571][ T3484] loop0: p2 p3 p7 [ 30.488879][ T3489] loop4: detected capacity change from 0 to 2048 [ 30.490180][ T3483] EXT4-fs (loop1): 1 truncate cleaned up [ 30.498527][ T3486] lo speed is unknown, defaulting to 1000 [ 30.503620][ T386] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.517311][ T3486] lo speed is unknown, defaulting to 1000 [ 30.523321][ T3486] lo speed is unknown, defaulting to 1000 [ 30.526908][ T3483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.539016][ T3487] loop2: detected capacity change from 0 to 1024 [ 30.548785][ T29] audit: type=1326 audit(1754456129.478:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 30.571921][ T29] audit: type=1326 audit(1754456129.478:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 30.572962][ T3486] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 30.595229][ T29] audit: type=1326 audit(1754456129.478:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 30.625344][ T29] audit: type=1326 audit(1754456129.478:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3482 comm="syz.1.2" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 30.674053][ T3483] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.684064][ T3295] Alternate GPT is invalid, using primary GPT. [ 30.690358][ T3486] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 30.690542][ T3295] loop4: p2 p3 p7 [ 30.712009][ T3487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.731568][ T3486] lo speed is unknown, defaulting to 1000 [ 30.740692][ T3481] Alternate GPT is invalid, using primary GPT. [ 30.746505][ T3486] lo speed is unknown, defaulting to 1000 [ 30.747312][ T3481] loop0: p2 p3 p7 [ 30.753458][ T3486] lo speed is unknown, defaulting to 1000 [ 30.776891][ T3489] Alternate GPT is invalid, using primary GPT. [ 30.783358][ T3489] loop4: p2 p3 p7 [ 30.788953][ T3487] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.809954][ T3486] lo speed is unknown, defaulting to 1000 [ 30.824844][ T3486] lo speed is unknown, defaulting to 1000 [ 30.859404][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 30.860900][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 30.870523][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 30.894134][ C0] hrtimer: interrupt took 37726 ns [ 30.917156][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 30.920247][ T3499] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.932119][ T3501] lo speed is unknown, defaulting to 1000 [ 30.955916][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 30.999974][ T3497] udevd[3497]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 31.010271][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 31.013684][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 31.022017][ T3508] Zero length message leads to an empty skb [ 31.025461][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 31.028072][ T3486] binfmt_misc: register: failed to install interpreter file ./file2 [ 31.028617][ T3486] syz.2.6 (3486) used greatest stack depth: 10712 bytes left [ 31.046691][ T3496] udevd[3496]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 31.083591][ T3516] loop3: detected capacity change from 0 to 128 [ 31.134254][ T3519] loop4: detected capacity change from 0 to 2048 [ 31.142026][ T166] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 31.167244][ T3497] Alternate GPT is invalid, using primary GPT. [ 31.167437][ T3497] loop4: p2 p3 p7 [ 31.189612][ T3516] lo speed is unknown, defaulting to 1000 [ 31.244012][ T3526] loop2: detected capacity change from 0 to 1024 [ 31.255193][ T3519] Alternate GPT is invalid, using primary GPT. [ 31.255528][ T3519] loop4: p2 p3 p7 [ 31.292412][ T3526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.293152][ T3526] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.333238][ T3533] loop4: detected capacity change from 0 to 1024 [ 31.336216][ T3526] binfmt_misc: register: failed to install interpreter file ./file2 [ 31.339476][ T3533] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 31.352038][ T3528] lo speed is unknown, defaulting to 1000 [ 31.396234][ T3533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.409042][ T3533] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 31.463374][ T3540] loop2: detected capacity change from 0 to 2048 [ 31.618640][ T3540] Alternate GPT is invalid, using primary GPT. [ 31.625029][ T3540] loop2: p2 p3 p7 [ 31.772830][ T3545] loop3: detected capacity change from 0 to 8192 [ 31.783434][ T3545] syz.3.20: attempt to access beyond end of device [ 31.783434][ T3545] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 31.783612][ T3545] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 31.783630][ T3545] FAT-fs (loop3): Filesystem has been set read-only [ 31.783855][ T3545] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 31.784034][ T3545] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 31.925951][ T3552] loop0: detected capacity change from 0 to 512 [ 31.932440][ T3550] loop2: detected capacity change from 0 to 8192 [ 31.939871][ T3552] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 31.952025][ T3550] syz.2.22: attempt to access beyond end of device [ 31.952025][ T3550] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 31.976295][ T3550] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 31.984186][ T3550] FAT-fs (loop2): Filesystem has been set read-only [ 31.991618][ T3552] EXT4-fs (loop0): 1 truncate cleaned up [ 31.997827][ T3550] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 31.997965][ T3552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.006281][ T3550] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 32.033767][ T3552] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.135641][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.145129][ T3557] loop1: detected capacity change from 0 to 2048 [ 32.163318][ T3560] loop4: detected capacity change from 0 to 128 [ 32.204335][ T3557] Alternate GPT is invalid, using primary GPT. [ 32.210768][ T3557] loop1: p2 p3 p7 [ 32.252662][ T3562] loop1: detected capacity change from 0 to 512 [ 32.260446][ T3562] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.277703][ T3562] EXT4-fs (loop1): 1 truncate cleaned up [ 32.286939][ T3562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.300334][ T3562] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.332417][ T3565] loop4: detected capacity change from 0 to 128 [ 32.358591][ T3565] lo speed is unknown, defaulting to 1000 [ 32.480090][ T3569] loop3: detected capacity change from 0 to 512 [ 32.490303][ T3569] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 32.501399][ T3569] EXT4-fs (loop3): 1 truncate cleaned up [ 32.507716][ T3569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.521135][ T3569] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.575753][ T3572] loop4: detected capacity change from 0 to 1024 [ 32.583319][ T3572] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 32.607855][ T3572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.622019][ T3572] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 32.759572][ T3580] siw: device registration error -23 [ 32.779047][ T3580] loop0: detected capacity change from 0 to 1024 [ 32.780035][ T3581] lo speed is unknown, defaulting to 1000 [ 32.803254][ T3580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.831524][ T3580] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.859699][ T3580] binfmt_misc: register: failed to install interpreter file ./file2 [ 32.898323][ T3586] loop2: detected capacity change from 0 to 1024 [ 32.919715][ T3586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 32.933419][ T3586] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.949535][ T3586] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.33: lblock 3 mapped to illegal pblock 3 (length 3) [ 32.999204][ T3586] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 33.002003][ T3594] loop0: detected capacity change from 0 to 1024 [ 33.011661][ T3586] EXT4-fs (loop2): This should not happen!! Data will be lost [ 33.011661][ T3586] [ 33.015207][ T3586] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.33: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 33.022222][ T3594] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 33.040992][ T3586] EXT4-fs error (device loop2) in ext4_setattr:6071: Corrupt filesystem [ 33.067435][ T3594] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.093190][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.123571][ T3594] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 33.136175][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.145455][ T3600] loop1: detected capacity change from 0 to 2048 [ 33.162069][ T3599] loop2: detected capacity change from 0 to 256 [ 33.193743][ T3602] loop4: detected capacity change from 0 to 128 [ 33.224845][ T3497] Alternate GPT is invalid, using primary GPT. [ 33.231401][ T3497] loop1: p2 p3 p7 [ 33.259587][ T3600] Alternate GPT is invalid, using primary GPT. [ 33.266109][ T3600] loop1: p2 p3 p7 [ 33.332939][ T3606] loop3: detected capacity change from 0 to 1024 [ 33.345651][ T3608] loop1: detected capacity change from 0 to 1024 [ 33.353438][ T3606] EXT4-fs: Ignoring removed orlov option [ 33.381015][ T3608] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 33.415217][ T3606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.442258][ T3615] loop4: detected capacity change from 0 to 128 [ 33.466798][ T3608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.489151][ T3608] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 33.522836][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.700294][ T3625] loop3: detected capacity change from 0 to 512 [ 33.719949][ T3625] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.761095][ T3625] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.800066][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.803834][ T3625] EXT4-fs (loop3): 1 truncate cleaned up [ 33.809450][ T3630] netlink: 8 bytes leftover after parsing attributes in process `syz.4.49'. [ 33.815890][ T3625] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.836019][ T3630] IPVS: Error joining to the multicast group [ 33.892389][ T3625] lo speed is unknown, defaulting to 1000 [ 33.973692][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.984097][ T3636] loop0: detected capacity change from 0 to 1024 [ 34.011254][ T3639] lo speed is unknown, defaulting to 1000 [ 34.023224][ T3641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'. [ 34.025847][ T3636] EXT4-fs: Ignoring removed orlov option [ 34.046452][ T3641] IPVS: Error joining to the multicast group [ 34.069214][ T3636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.153647][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.171205][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.213946][ T3654] loop1: detected capacity change from 0 to 128 [ 34.224091][ T3652] loop2: detected capacity change from 0 to 512 [ 34.240639][ T3652] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.255814][ T3652] EXT4-fs (loop2): 1 truncate cleaned up [ 34.264508][ T3652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.285277][ T3652] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.351382][ T3663] siw: device registration error -23 [ 34.363599][ T3663] loop0: detected capacity change from 0 to 1024 [ 34.373037][ T3663] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.454092][ T3668] loop1: detected capacity change from 0 to 1024 [ 34.461734][ T3668] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 34.477680][ T3668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.491657][ T3668] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 34.585873][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.660212][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.729650][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.765358][ T3674] lo speed is unknown, defaulting to 1000 [ 34.778740][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.800070][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.835090][ T3684] loop1: detected capacity change from 0 to 512 [ 34.872218][ T3684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.882705][ T41] bridge_slave_1: left allmulticast mode [ 34.888421][ T41] bridge_slave_1: left promiscuous mode [ 34.894065][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.903285][ T41] bridge_slave_0: left allmulticast mode [ 34.909769][ T41] bridge_slave_0: left promiscuous mode [ 34.910336][ T3684] EXT4-fs (loop1): 1 truncate cleaned up [ 34.915515][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.921877][ T3684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.941351][ T3684] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.028605][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.040233][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.056129][ T41] bond0 (unregistering): Released all slaves [ 35.068355][ T3674] chnl_net:caif_netlink_parms(): no params data found [ 35.101253][ T3695] loop2: detected capacity change from 0 to 1024 [ 35.111023][ T3695] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 35.148276][ T3695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.174717][ T41] hsr_slave_0: left promiscuous mode [ 35.180421][ T3712] loop3: detected capacity change from 0 to 1024 [ 35.185058][ T3695] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 35.193283][ T41] hsr_slave_1: left promiscuous mode [ 35.196900][ T3712] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 35.204624][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.213120][ T29] kauditd_printk_skb: 458 callbacks suppressed [ 35.213136][ T29] audit: type=1400 audit(1754456134.388:569): avc: denied { remove_name } for pid=3713 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=1520 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.215717][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.221968][ T29] audit: type=1400 audit(1754456134.388:570): avc: denied { unlink } for pid=3713 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=1520 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.279712][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.287233][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.310409][ T41] veth1_macvtap: left promiscuous mode [ 35.310851][ T3712] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.336891][ T41] veth0_macvtap: left promiscuous mode [ 35.338581][ T3712] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 35.342488][ T41] veth1_vlan: left promiscuous mode [ 35.375012][ T41] veth0_vlan: left promiscuous mode [ 35.393853][ T3719] loop4: detected capacity change from 0 to 1024 [ 35.407954][ T3719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.568261][ T41] team0 (unregistering): Port device team_slave_1 removed [ 35.586371][ T41] team0 (unregistering): Port device team_slave_0 removed [ 35.660296][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.667559][ T3674] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.685701][ T29] audit: type=1400 audit(1754456134.798:571): avc: denied { connect } for pid=3718 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.705613][ T29] audit: type=1400 audit(1754456134.798:572): avc: denied { write } for pid=3718 comm="syz.4.69" path="socket:[6436]" dev="sockfs" ino=6436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.736806][ T3674] bridge_slave_0: entered allmulticast mode [ 35.766053][ T3674] bridge_slave_0: entered promiscuous mode [ 35.782387][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.789551][ T3674] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.831975][ T3674] bridge_slave_1: entered allmulticast mode [ 35.854396][ T3674] bridge_slave_1: entered promiscuous mode [ 35.861998][ T29] audit: type=1326 audit(1754456134.928:573): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.70" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6cc43bebe9 code=0x0 [ 35.901459][ T3729] loop1: detected capacity change from 0 to 8192 [ 35.917990][ T3674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.929264][ T3729] syz.1.70: attempt to access beyond end of device [ 35.929264][ T3729] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 35.951516][ T3729] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 35.959627][ T3729] FAT-fs (loop1): Filesystem has been set read-only [ 35.970543][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.976836][ T3674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.989514][ T3729] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 35.998266][ T3729] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 36.030185][ T3674] team0: Port device team_slave_0 added [ 36.040560][ T3738] random: crng reseeded on system resumption [ 36.042678][ T29] audit: type=1400 audit(1754456135.208:574): avc: denied { write } for pid=3737 comm="syz.2.71" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 36.054278][ T3674] team0: Port device team_slave_1 added [ 36.069820][ T29] audit: type=1400 audit(1754456135.208:575): avc: denied { open } for pid=3737 comm="syz.2.71" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 36.108437][ T3674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.115440][ T3674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.141418][ T3674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.157574][ T3674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.164744][ T3674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.165561][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.190819][ T3674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.216079][ T386] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 36.280334][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.293417][ T3674] hsr_slave_0: entered promiscuous mode [ 36.299733][ T3674] hsr_slave_1: entered promiscuous mode [ 36.325510][ T3752] loop2: detected capacity change from 0 to 128 [ 36.326300][ T3674] debugfs: 'hsr0' already exists in 'hsr' [ 36.337734][ T3674] Cannot create hsr debugfs directory [ 36.355023][ T29] audit: type=1326 audit(1754456135.518:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3757 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382cf2ebe9 code=0x7ffc0000 [ 36.378492][ T29] audit: type=1326 audit(1754456135.518:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3757 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382cf2ebe9 code=0x7ffc0000 [ 36.401637][ T29] audit: type=1326 audit(1754456135.518:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3757 comm="syz.4.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f382cf2ebe9 code=0x7ffc0000 [ 36.403519][ T3760] loop4: detected capacity change from 0 to 512 [ 36.435533][ T3760] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.534521][ T3760] EXT4-fs (loop4): 1 truncate cleaned up [ 36.565709][ T3760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.581589][ T3779] siw: device registration error -23 [ 36.588775][ T3752] lo speed is unknown, defaulting to 1000 [ 36.600728][ T3779] loop3: detected capacity change from 0 to 1024 [ 36.612663][ T3779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.651386][ T3779] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.653382][ T3760] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.683140][ T3674] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.711683][ T3674] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.734853][ T3779] binfmt_misc: register: failed to install interpreter file ./file2 [ 36.748623][ T3674] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.773347][ T3674] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.860070][ T3809] loop3: detected capacity change from 0 to 1024 [ 36.881201][ T3809] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 36.893160][ T3674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.915251][ T3674] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.922380][ T3809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.940747][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.941926][ T3809] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 36.947865][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.973741][ T3674] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.984161][ T3674] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.015418][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.022530][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.087236][ T3820] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 37.177432][ T3674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.243040][ T3837] loop4: detected capacity change from 0 to 1024 [ 37.275346][ T3837] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.404451][ T3854] loop2: detected capacity change from 0 to 1024 [ 37.495870][ T3854] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.528133][ T3854] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.550688][ T3674] veth0_vlan: entered promiscuous mode [ 37.568667][ T3674] veth1_vlan: entered promiscuous mode [ 37.579333][ T3854] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.85: lblock 3 mapped to illegal pblock 3 (length 3) [ 37.609282][ T3674] veth0_macvtap: entered promiscuous mode [ 37.615740][ T3854] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 37.628343][ T3854] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.628343][ T3854] [ 37.643229][ T3674] veth1_macvtap: entered promiscuous mode [ 37.657641][ T3674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.669512][ T3674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.680534][ T3867] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.85: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 37.721365][ T2393] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.740055][ T2393] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.758048][ T2393] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.768603][ T386] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.777605][ T3867] EXT4-fs error (device loop2) in ext4_setattr:6071: Corrupt filesystem [ 37.812210][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.825164][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.861407][ T3880] loop3: detected capacity change from 0 to 256 [ 37.907440][ T3887] loop2: detected capacity change from 0 to 128 [ 37.992666][ T3898] loop1: detected capacity change from 0 to 1024 [ 38.008933][ T3898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.187113][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.346868][ T3929] loop4: detected capacity change from 0 to 1024 [ 38.578660][ T3935] FAULT_INJECTION: forcing a failure. [ 38.578660][ T3935] name failslab, interval 1, probability 0, space 0, times 1 [ 38.591362][ T3935] CPU: 0 UID: 0 PID: 3935 Comm: syz.2.92 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 38.591389][ T3935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.591482][ T3935] Call Trace: [ 38.591490][ T3935] [ 38.591499][ T3935] __dump_stack+0x1d/0x30 [ 38.591523][ T3935] dump_stack_lvl+0xe8/0x140 [ 38.591545][ T3935] dump_stack+0x15/0x1b [ 38.591564][ T3935] should_fail_ex+0x265/0x280 [ 38.591621][ T3935] should_failslab+0x8c/0xb0 [ 38.591643][ T3935] kmem_cache_alloc_noprof+0x50/0x310 [ 38.591695][ T3935] ? alloc_empty_file+0x76/0x200 [ 38.591727][ T3935] ? mntput+0x4b/0x80 [ 38.591756][ T3935] alloc_empty_file+0x76/0x200 [ 38.591805][ T3935] path_openat+0x68/0x2170 [ 38.591827][ T3935] ? _parse_integer_limit+0x170/0x190 [ 38.591950][ T3935] ? kstrtoull+0x111/0x140 [ 38.591985][ T3935] ? kstrtouint+0x76/0xc0 [ 38.592022][ T3935] do_filp_open+0x109/0x230 [ 38.592048][ T3935] do_sys_openat2+0xa6/0x110 [ 38.592125][ T3935] __x64_sys_openat+0xf2/0x120 [ 38.592155][ T3935] x64_sys_call+0x2e9c/0x2ff0 [ 38.592175][ T3935] do_syscall_64+0xd2/0x200 [ 38.592296][ T3935] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 38.592321][ T3935] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 38.592345][ T3935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.592472][ T3935] RIP: 0033:0x7f914056ebe9 [ 38.592501][ T3935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.592521][ T3935] RSP: 002b:00007f913eb95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 38.592540][ T3935] RAX: ffffffffffffffda RBX: 00007f9140796180 RCX: 00007f914056ebe9 [ 38.592555][ T3935] RDX: 0000000000105c00 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 38.592588][ T3935] RBP: 00007f913eb95090 R08: 0000000000000000 R09: 0000000000000000 [ 38.592602][ T3935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.592616][ T3935] R13: 00007f9140796218 R14: 00007f9140796180 R15: 00007ffd2c9cc128 [ 38.592682][ T3935] [ 38.913235][ T3929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.929433][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.127188][ T3941] loop5: detected capacity change from 0 to 128 [ 39.278478][ T3955] FAULT_INJECTION: forcing a failure. [ 39.278478][ T3955] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 39.291959][ T3955] CPU: 1 UID: 0 PID: 3955 Comm: syz.1.97 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 39.291990][ T3955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.292070][ T3955] Call Trace: [ 39.292077][ T3955] [ 39.292084][ T3955] __dump_stack+0x1d/0x30 [ 39.292104][ T3955] dump_stack_lvl+0xe8/0x140 [ 39.292125][ T3955] dump_stack+0x15/0x1b [ 39.292143][ T3955] should_fail_ex+0x265/0x280 [ 39.292227][ T3955] should_fail_alloc_page+0xf2/0x100 [ 39.292252][ T3955] __alloc_frozen_pages_noprof+0xff/0x360 [ 39.292365][ T3955] alloc_pages_mpol+0xb3/0x250 [ 39.292403][ T3955] alloc_pages_noprof+0x90/0x130 [ 39.292433][ T3955] pte_alloc_one+0x2d/0x120 [ 39.292457][ T3955] __pte_alloc+0x32/0x2b0 [ 39.292575][ T3955] handle_mm_fault+0x1c55/0x2c20 [ 39.292642][ T3955] ? __rcu_read_lock+0x37/0x50 [ 39.292664][ T3955] ? __pte_offset_map_lock+0x1d4/0x230 [ 39.292703][ T3955] __get_user_pages+0x102e/0x1fa0 [ 39.292735][ T3955] __gup_longterm_locked+0x8f4/0xe60 [ 39.292769][ T3955] ? exc_page_fault+0x62/0xa0 [ 39.292793][ T3955] ? should_fail_ex+0xdb/0x280 [ 39.292825][ T3955] pin_user_pages_remote+0x7e/0xb0 [ 39.292893][ T3955] process_vm_rw+0x484/0x960 [ 39.292936][ T3955] __x64_sys_process_vm_readv+0x78/0x90 [ 39.293001][ T3955] x64_sys_call+0x1874/0x2ff0 [ 39.293023][ T3955] do_syscall_64+0xd2/0x200 [ 39.293137][ T3955] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.293164][ T3955] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 39.293187][ T3955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.293234][ T3955] RIP: 0033:0x7f6cc43bebe9 [ 39.293248][ T3955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.293309][ T3955] RSP: 002b:00007f6cc2a27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 39.293331][ T3955] RAX: ffffffffffffffda RBX: 00007f6cc45e5fa0 RCX: 00007f6cc43bebe9 [ 39.293344][ T3955] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 0000000000000034 [ 39.293356][ T3955] RBP: 00007f6cc2a27090 R08: 0000000000000286 R09: 0000000000000000 [ 39.293367][ T3955] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000001 [ 39.293385][ T3955] R13: 00007f6cc45e6038 R14: 00007f6cc45e5fa0 R15: 00007ffca3659008 [ 39.293402][ T3955] [ 39.623141][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.678843][ T3963] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 39.705446][ T3965] loop4: detected capacity change from 0 to 128 [ 39.794714][ T3976] siw: device registration error -23 [ 39.804955][ T3976] loop1: detected capacity change from 0 to 1024 [ 39.821664][ T3976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.835474][ T3976] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.879358][ T3982] loop2: detected capacity change from 0 to 256 [ 39.906319][ T3976] binfmt_misc: register: failed to install interpreter file ./file2 [ 39.928620][ T3986] loop5: detected capacity change from 0 to 1024 [ 39.948814][ T3986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.955455][ T3986] journal_path: Non-blockdev passed as './file0' [ 39.961882][ T3986] EXT4-fs: error: could not find journal device path [ 39.983788][ T3988] loop4: detected capacity change from 0 to 128 [ 40.028046][ T3988] lo speed is unknown, defaulting to 1000 [ 40.060533][ T3992] loop5: detected capacity change from 0 to 1024 [ 40.080507][ T3996] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 40.098894][ T3992] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 40.120880][ T3992] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.130002][ T4000] lo speed is unknown, defaulting to 1000 [ 40.138427][ T3992] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 40.219948][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 40.219964][ T29] audit: type=1326 audit(1754456139.388:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 40.249902][ T29] audit: type=1326 audit(1754456139.388:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 40.286577][ T4007] loop1: detected capacity change from 0 to 128 [ 40.293410][ T4007] msdos: Unknown parameter 'dot' [ 40.302333][ T4007] FAULT_INJECTION: forcing a failure. [ 40.302333][ T4007] name failslab, interval 1, probability 0, space 0, times 0 [ 40.314988][ T4007] CPU: 1 UID: 0 PID: 4007 Comm: syz.1.114 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 40.315024][ T4007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.315036][ T4007] Call Trace: [ 40.315044][ T4007] [ 40.315052][ T4007] __dump_stack+0x1d/0x30 [ 40.315076][ T4007] dump_stack_lvl+0xe8/0x140 [ 40.315173][ T4007] dump_stack+0x15/0x1b [ 40.315240][ T4007] should_fail_ex+0x265/0x280 [ 40.315277][ T4007] should_failslab+0x8c/0xb0 [ 40.315301][ T4007] kmem_cache_alloc_noprof+0x50/0x310 [ 40.315406][ T4007] ? audit_log_start+0x365/0x6c0 [ 40.315483][ T4007] audit_log_start+0x365/0x6c0 [ 40.315633][ T4007] audit_seccomp+0x48/0x100 [ 40.315657][ T4007] ? __seccomp_filter+0x68c/0x10d0 [ 40.315677][ T4007] __seccomp_filter+0x69d/0x10d0 [ 40.315701][ T4007] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 40.315760][ T4007] ? vfs_write+0x75e/0x8e0 [ 40.315779][ T4007] ? __rcu_read_unlock+0x4f/0x70 [ 40.315802][ T4007] ? __fget_files+0x184/0x1c0 [ 40.315870][ T4007] __secure_computing+0x82/0x150 [ 40.315893][ T4007] syscall_trace_enter+0xcf/0x1e0 [ 40.315949][ T4007] do_syscall_64+0xac/0x200 [ 40.316015][ T4007] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.316046][ T4007] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 40.316066][ T4007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.316117][ T4007] RIP: 0033:0x7f6cc43bebe9 [ 40.316132][ T4007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.316149][ T4007] RSP: 002b:00007f6cc2a27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 40.316205][ T4007] RAX: ffffffffffffffda RBX: 00007f6cc45e5fa0 RCX: 00007f6cc43bebe9 [ 40.316247][ T4007] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000005 [ 40.316307][ T4007] RBP: 00007f6cc2a27090 R08: 0000000000000000 R09: 0000000000000000 [ 40.316321][ T4007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.316335][ T4007] R13: 00007f6cc45e6038 R14: 00007f6cc45e5fa0 R15: 00007ffca3659008 [ 40.316356][ T4007] [ 40.524352][ T4007] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 40.527646][ T29] audit: type=1326 audit(1754456139.448:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 40.532184][ T4007] audit: out of memory in audit_log_start [ 40.555429][ T29] audit: type=1326 audit(1754456139.448:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 40.584446][ T29] audit: type=1326 audit(1754456139.448:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 40.608019][ T29] audit: type=1326 audit(1754456139.448:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 40.631339][ T29] audit: type=1326 audit(1754456139.448:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 40.654916][ T29] audit: type=1326 audit(1754456139.448:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4006 comm="syz.1.114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 40.700065][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.707747][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.710175][ T4014] loop3: detected capacity change from 0 to 128 [ 40.715213][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.729069][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.736512][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.743911][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.751445][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.759088][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.766532][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.774028][ T3377] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.788022][ T3377] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 40.833303][ T4018] loop2: detected capacity change from 0 to 1024 [ 40.855089][ T4018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.878593][ T4019] fido_id[4019]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.901696][ T4018] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.915046][ T4024] FAULT_INJECTION: forcing a failure. [ 40.915046][ T4024] name failslab, interval 1, probability 0, space 0, times 0 [ 40.928006][ T4024] CPU: 0 UID: 0 PID: 4024 Comm: syz.1.122 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 40.928036][ T4024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 40.928049][ T4024] Call Trace: [ 40.928055][ T4024] [ 40.928127][ T4024] __dump_stack+0x1d/0x30 [ 40.928148][ T4024] dump_stack_lvl+0xe8/0x140 [ 40.928168][ T4024] dump_stack+0x15/0x1b [ 40.928186][ T4024] should_fail_ex+0x265/0x280 [ 40.928266][ T4024] should_failslab+0x8c/0xb0 [ 40.928289][ T4024] __kvmalloc_node_noprof+0x123/0x4e0 [ 40.928321][ T4024] ? file_tty_write+0x19e/0x690 [ 40.928345][ T4024] file_tty_write+0x19e/0x690 [ 40.928399][ T4024] ? __pfx_tty_write+0x10/0x10 [ 40.928424][ T4024] tty_write+0x25/0x30 [ 40.928449][ T4024] vfs_write+0x49d/0x8e0 [ 40.928477][ T4024] ksys_write+0xda/0x1a0 [ 40.928502][ T4024] __x64_sys_write+0x40/0x50 [ 40.928600][ T4024] x64_sys_call+0x27fe/0x2ff0 [ 40.928623][ T4024] do_syscall_64+0xd2/0x200 [ 40.928688][ T4024] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 40.928714][ T4024] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 40.928737][ T4024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.928760][ T4024] RIP: 0033:0x7f6cc43bebe9 [ 40.928777][ T4024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.928849][ T4024] RSP: 002b:00007f6cc2a27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.928867][ T4024] RAX: ffffffffffffffda RBX: 00007f6cc45e5fa0 RCX: 00007f6cc43bebe9 [ 40.928881][ T4024] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000004 [ 40.928892][ T4024] RBP: 00007f6cc2a27090 R08: 0000000000000000 R09: 0000000000000000 [ 40.928904][ T4024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.928953][ T4024] R13: 00007f6cc45e6038 R14: 00007f6cc45e5fa0 R15: 00007ffca3659008 [ 40.928973][ T4024] [ 41.176394][ T3674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.191987][ T4018] binfmt_misc: register: failed to install interpreter file ./file2 [ 41.205016][ T4032] netlink: 'syz.1.123': attribute type 22 has an invalid length. [ 41.212806][ T4032] netlink: 148 bytes leftover after parsing attributes in process `syz.1.123'. [ 41.216835][ T4033] loop3: detected capacity change from 0 to 8192 [ 41.275692][ T4039] loop2: detected capacity change from 0 to 1024 [ 41.290505][ T4033] syz.3.120: attempt to access beyond end of device [ 41.290505][ T4033] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 41.292612][ T4041] lo speed is unknown, defaulting to 1000 [ 41.314462][ T4033] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 41.322695][ T4033] FAT-fs (loop3): Filesystem has been set read-only [ 41.343884][ T4039] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 41.343960][ T4033] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 41.381549][ T4047] loop4: detected capacity change from 0 to 256 [ 41.395408][ T4044] siw: device registration error -23 [ 41.396059][ T4039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.410307][ T4044] loop1: detected capacity change from 0 to 1024 [ 41.413462][ T4033] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 41.452953][ T4044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.467077][ T4039] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 41.477861][ T4044] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.514971][ T4044] binfmt_misc: register: failed to install interpreter file ./file2 [ 41.524222][ T4053] tipc: Started in network mode [ 41.529200][ T4053] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 41.539403][ T4053] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 41.547692][ T4053] tipc: Enabled bearer , priority 10 [ 41.600132][ T4059] loop1: detected capacity change from 0 to 1024 [ 41.611388][ T4057] loop5: detected capacity change from 0 to 128 [ 41.662075][ T4059] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.674534][ T4059] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.690439][ T4059] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.132: lblock 3 mapped to illegal pblock 3 (length 3) [ 41.704635][ T4059] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 41.716963][ T4059] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.716963][ T4059] [ 41.729520][ T4059] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.132: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 41.756278][ T4059] EXT4-fs error (device loop1) in ext4_setattr:6071: Corrupt filesystem [ 41.784380][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.807952][ T4065] FAULT_INJECTION: forcing a failure. [ 41.807952][ T4065] name failslab, interval 1, probability 0, space 0, times 0 [ 41.820685][ T4065] CPU: 1 UID: 0 PID: 4065 Comm: syz.1.134 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 41.820718][ T4065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 41.820729][ T4065] Call Trace: [ 41.820736][ T4065] [ 41.820744][ T4065] __dump_stack+0x1d/0x30 [ 41.820764][ T4065] dump_stack_lvl+0xe8/0x140 [ 41.820791][ T4065] dump_stack+0x15/0x1b [ 41.820809][ T4065] should_fail_ex+0x265/0x280 [ 41.820953][ T4065] should_failslab+0x8c/0xb0 [ 41.820980][ T4065] kmem_cache_alloc_noprof+0x50/0x310 [ 41.821087][ T4065] ? audit_log_start+0x365/0x6c0 [ 41.821121][ T4065] audit_log_start+0x365/0x6c0 [ 41.821158][ T4065] audit_seccomp+0x48/0x100 [ 41.821191][ T4065] ? __seccomp_filter+0x68c/0x10d0 [ 41.821211][ T4065] __seccomp_filter+0x69d/0x10d0 [ 41.821232][ T4065] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 41.821256][ T4065] ? vfs_write+0x75e/0x8e0 [ 41.821294][ T4065] __secure_computing+0x82/0x150 [ 41.821318][ T4065] syscall_trace_enter+0xcf/0x1e0 [ 41.821345][ T4065] do_syscall_64+0xac/0x200 [ 41.821371][ T4065] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 41.821453][ T4065] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 41.821477][ T4065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.821508][ T4065] RIP: 0033:0x7f6cc43bebe9 [ 41.821551][ T4065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.821635][ T4065] RSP: 002b:00007f6cc2a27038 EFLAGS: 00000246 ORIG_RAX: 0000000000000124 [ 41.821654][ T4065] RAX: ffffffffffffffda RBX: 00007f6cc45e5fa0 RCX: 00007f6cc43bebe9 [ 41.821667][ T4065] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 41.821677][ T4065] RBP: 00007f6cc2a27090 R08: 0000000000000000 R09: 0000000000000000 [ 41.821684][ T4065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.821696][ T4065] R13: 00007f6cc45e6038 R14: 00007f6cc45e5fa0 R15: 00007ffca3659008 [ 41.821716][ T4065] [ 42.072570][ T4070] siw: device registration error -23 [ 42.084799][ T4070] loop3: detected capacity change from 0 to 1024 [ 42.099499][ T4070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.117680][ T4068] loop1: detected capacity change from 0 to 128 [ 42.124894][ T4068] msdos: Unknown parameter 'dot' [ 42.130943][ T4070] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.139184][ T4068] netlink: 'syz.1.135': attribute type 10 has an invalid length. [ 42.147895][ T4068] netlink: 55 bytes leftover after parsing attributes in process `syz.1.135'. [ 42.174169][ T4070] binfmt_misc: register: failed to install interpreter file ./file2 [ 42.194726][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.289840][ T4084] random: crng reseeded on system resumption [ 42.294476][ T4085] loop4: detected capacity change from 0 to 128 [ 42.337011][ T4090] loop1: detected capacity change from 0 to 1024 [ 42.344219][ T4090] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 42.367431][ T4090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.376034][ T2393] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 42.389109][ T4090] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 42.428820][ T4095] loop2: detected capacity change from 0 to 128 [ 42.470885][ T4063] netlink: 8 bytes leftover after parsing attributes in process `syz.5.133'. [ 42.480282][ T4063] IPVS: Error joining to the multicast group [ 42.623115][ T4102] FAULT_INJECTION: forcing a failure. [ 42.623115][ T4102] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 42.636275][ T4102] CPU: 0 UID: 0 PID: 4102 Comm: syz.2.146 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 42.636351][ T4102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.636358][ T4102] Call Trace: [ 42.636363][ T4102] [ 42.636368][ T4102] __dump_stack+0x1d/0x30 [ 42.636381][ T4102] dump_stack_lvl+0xe8/0x140 [ 42.636393][ T4102] dump_stack+0x15/0x1b [ 42.636402][ T4102] should_fail_ex+0x265/0x280 [ 42.636452][ T4102] should_fail+0xb/0x20 [ 42.636474][ T4102] should_fail_usercopy+0x1a/0x20 [ 42.636531][ T4102] _copy_from_user+0x1c/0xb0 [ 42.636556][ T4102] snd_seq_ioctl+0x127/0x2e0 [ 42.636609][ T4102] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 42.636629][ T4102] __se_sys_ioctl+0xce/0x140 [ 42.636664][ T4102] __x64_sys_ioctl+0x43/0x50 [ 42.636764][ T4102] x64_sys_call+0x1816/0x2ff0 [ 42.636788][ T4102] do_syscall_64+0xd2/0x200 [ 42.636884][ T4102] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.636923][ T4102] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.637014][ T4102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.637036][ T4102] RIP: 0033:0x7f914056ebe9 [ 42.637053][ T4102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.637072][ T4102] RSP: 002b:00007f913ebd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 42.637092][ T4102] RAX: ffffffffffffffda RBX: 00007f9140795fa0 RCX: 00007f914056ebe9 [ 42.637164][ T4102] RDX: 0000200000000100 RSI: 0000000040605346 RDI: 0000000000000003 [ 42.637178][ T4102] RBP: 00007f913ebd7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.637192][ T4102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.637205][ T4102] R13: 00007f9140796038 R14: 00007f9140795fa0 R15: 00007ffd2c9cc128 [ 42.637289][ T4102] [ 42.827132][ T2956] tipc: Node number set to 1 [ 42.851784][ T4100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.145'. [ 42.861051][ T4100] IPVS: Error joining to the multicast group [ 42.924429][ T4110] FAULT_INJECTION: forcing a failure. [ 42.924429][ T4110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.937767][ T4110] CPU: 1 UID: 0 PID: 4110 Comm: wޣ Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 42.937845][ T4110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 42.937858][ T4110] Call Trace: [ 42.937866][ T4110] [ 42.937874][ T4110] __dump_stack+0x1d/0x30 [ 42.937897][ T4110] dump_stack_lvl+0xe8/0x140 [ 42.937915][ T4110] dump_stack+0x15/0x1b [ 42.937955][ T4110] should_fail_ex+0x265/0x280 [ 42.937991][ T4110] should_fail+0xb/0x20 [ 42.938070][ T4110] should_fail_usercopy+0x1a/0x20 [ 42.938088][ T4110] _copy_from_user+0x1c/0xb0 [ 42.938111][ T4110] __sys_bind+0x106/0x2a0 [ 42.938146][ T4110] __x64_sys_bind+0x3f/0x50 [ 42.938205][ T4110] x64_sys_call+0x2b6e/0x2ff0 [ 42.938229][ T4110] do_syscall_64+0xd2/0x200 [ 42.938315][ T4110] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 42.938340][ T4110] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 42.938364][ T4110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.938415][ T4110] RIP: 0033:0x7f914056ebe9 [ 42.938429][ T4110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.938447][ T4110] RSP: 002b:00007f913ebd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 42.938479][ T4110] RAX: ffffffffffffffda RBX: 00007f9140795fa0 RCX: 00007f914056ebe9 [ 42.938491][ T4110] RDX: 000000000000000c RSI: 0000200000000040 RDI: 0000000000000003 [ 42.938503][ T4110] RBP: 00007f913ebd7090 R08: 0000000000000000 R09: 0000000000000000 [ 42.938514][ T4110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.938525][ T4110] R13: 00007f9140796038 R14: 00007f9140795fa0 R15: 00007ffd2c9cc128 [ 42.938546][ T4110] [ 43.130069][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.208692][ T4119] siw: device registration error -23 [ 43.218831][ T4119] loop1: detected capacity change from 0 to 1024 [ 43.243188][ T4119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.256678][ T4119] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.266941][ T4123] loop5: detected capacity change from 0 to 1024 [ 43.299638][ T4123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.325277][ T4119] binfmt_misc: register: failed to install interpreter file ./file2 [ 43.334480][ T4123] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.346256][ T4133] loop2: detected capacity change from 0 to 128 [ 43.352967][ T4133] msdos: Unknown parameter 'dot' [ 43.385818][ T4123] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.156: lblock 3 mapped to illegal pblock 3 (length 3) [ 43.411640][ T4123] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 43.423975][ T4123] EXT4-fs (loop5): This should not happen!! Data will be lost [ 43.423975][ T4123] [ 43.448752][ T4138] loop2: detected capacity change from 0 to 512 [ 43.457612][ T4138] EXT4-fs: Ignoring removed orlov option [ 43.466639][ T4123] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.156: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 43.467817][ T4141] siw: device registration error -23 [ 43.494308][ T4123] EXT4-fs error (device loop5) in ext4_setattr:6071: Corrupt filesystem [ 43.495715][ T4138] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.519750][ T4138] EXT4-fs (loop2): orphan cleanup on readonly fs [ 43.526275][ T4141] loop3: detected capacity change from 0 to 1024 [ 43.529737][ T4138] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.161: bg 0: block 248: padding at end of block bitmap is not set [ 43.548719][ T4138] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.161: Failed to acquire dquot type 1 [ 43.549986][ T4141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.573881][ T4141] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.575299][ T4138] EXT4-fs (loop2): 1 truncate cleaned up [ 43.589571][ T3674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 43.590473][ T4138] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.620117][ T4141] binfmt_misc: register: failed to install interpreter file ./file2 [ 43.672714][ T4138] syz.2.161 (4138) used greatest stack depth: 9552 bytes left [ 43.683112][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.749490][ T4158] loop3: detected capacity change from 0 to 1024 [ 43.759588][ T4159] FAULT_INJECTION: forcing a failure. [ 43.759588][ T4159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.762889][ T4158] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 43.773160][ T4159] CPU: 0 UID: 0 PID: 4159 Comm: syz.5.169 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 43.773223][ T4159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 43.773236][ T4159] Call Trace: [ 43.773244][ T4159] [ 43.773252][ T4159] __dump_stack+0x1d/0x30 [ 43.773275][ T4159] dump_stack_lvl+0xe8/0x140 [ 43.773295][ T4159] dump_stack+0x15/0x1b [ 43.773334][ T4159] should_fail_ex+0x265/0x280 [ 43.773367][ T4159] should_fail+0xb/0x20 [ 43.773409][ T4159] should_fail_usercopy+0x1a/0x20 [ 43.773429][ T4159] _copy_from_user+0x1c/0xb0 [ 43.773456][ T4159] __sys_sendto+0x19e/0x330 [ 43.773496][ T4159] __x64_sys_sendto+0x76/0x90 [ 43.773593][ T4159] x64_sys_call+0x2d05/0x2ff0 [ 43.773616][ T4159] do_syscall_64+0xd2/0x200 [ 43.773641][ T4159] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.773667][ T4159] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 43.773696][ T4159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.773719][ T4159] RIP: 0033:0x7f3353b0ebe9 [ 43.773733][ T4159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.773748][ T4159] RSP: 002b:00007f335216f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 43.773767][ T4159] RAX: ffffffffffffffda RBX: 00007f3353d35fa0 RCX: 00007f3353b0ebe9 [ 43.773842][ T4159] RDX: ffffffffffffff2c RSI: 0000200000000140 RDI: 0000000000000005 [ 43.773874][ T4159] RBP: 00007f335216f090 R08: 00002000000000c0 R09: 0000000000000014 [ 43.773887][ T4159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.773900][ T4159] R13: 00007f3353d36038 R14: 00007f3353d35fa0 R15: 00007fff20c4ad98 [ 43.773920][ T4159] [ 43.883858][ T4164] loop4: detected capacity change from 0 to 128 [ 43.969693][ T4158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.026615][ T4172] loop9: detected capacity change from 0 to 7 [ 44.033002][ T4172] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.041231][ T4172] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.049085][ T4172] loop9: unable to read partition table [ 44.054822][ T4172] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 44.054822][ T4172] ) failed (rc=-5) [ 44.086359][ T4174] loop5: detected capacity change from 0 to 128 [ 44.113827][ T4164] lo speed is unknown, defaulting to 1000 [ 44.242404][ T4179] lo speed is unknown, defaulting to 1000 [ 44.335830][ T4179] lo speed is unknown, defaulting to 1000 [ 44.728302][ T4184] loop4: detected capacity change from 0 to 1024 [ 44.773839][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.813537][ T4184] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 44.874512][ T4196] loop3: detected capacity change from 0 to 1024 [ 44.910863][ T4184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.931214][ T4184] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 44.950395][ T4196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.975803][ T4196] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.019227][ T4196] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.180: lblock 3 mapped to illegal pblock 3 (length 3) [ 45.052851][ T4196] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 45.065253][ T4196] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.065253][ T4196] [ 45.094479][ T4215] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.180: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 45.114358][ T4193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.181'. [ 45.126956][ T4193] IPVS: Error joining to the multicast group [ 45.133766][ T4215] EXT4-fs error (device loop3) in ext4_setattr:6071: Corrupt filesystem [ 45.171981][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.189941][ T4218] random: crng reseeded on system resumption [ 45.236079][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 45.236096][ T29] audit: type=1400 audit(1754456144.398:853): avc: denied { getopt } for pid=4222 comm="syz.1.187" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.250508][ T4225] loop1: detected capacity change from 0 to 128 [ 45.273420][ T41] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 45.301769][ T4225] lo speed is unknown, defaulting to 1000 [ 45.412522][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.435000][ T4233] loop4: detected capacity change from 0 to 1024 [ 45.447604][ T4233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.460627][ T4233] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.474404][ T4233] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.190: lblock 3 mapped to illegal pblock 3 (length 3) [ 45.489626][ T4233] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 45.502075][ T4233] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.502075][ T4233] [ 45.520032][ T4233] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.190: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 45.538876][ T4233] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem [ 45.556113][ T29] audit: type=1326 audit(1754456144.718:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4236 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 45.579458][ T29] audit: type=1326 audit(1754456144.718:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4236 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 45.602933][ T29] audit: type=1326 audit(1754456144.718:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4236 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 45.626383][ T29] audit: type=1326 audit(1754456144.718:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4236 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 45.649960][ T29] audit: type=1326 audit(1754456144.718:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4236 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 45.673302][ T29] audit: type=1326 audit(1754456144.718:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4236 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 45.696569][ T29] audit: type=1326 audit(1754456144.718:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4236 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 45.719869][ T29] audit: type=1326 audit(1754456144.718:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4236 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 45.743456][ T29] audit: type=1326 audit(1754456144.718:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4236 comm="syz.1.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6cc43bebe9 code=0x7ffc0000 [ 45.789547][ T4244] loop5: detected capacity change from 0 to 128 [ 45.797793][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.962460][ T4251] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 46.093003][ T4263] loop1: detected capacity change from 0 to 128 [ 46.145524][ T4265] loop2: detected capacity change from 0 to 512 [ 46.158801][ T4265] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.178209][ T4267] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.197464][ T4271] loop3: detected capacity change from 0 to 128 [ 46.212048][ T4265] EXT4-fs (loop2): 1 truncate cleaned up [ 46.218204][ T4263] lo speed is unknown, defaulting to 1000 [ 46.224268][ T4273] smc: net device bond0 applied user defined pnetid SYZ2 [ 46.236142][ T4273] smc: net device bond0 erased user defined pnetid SYZ2 [ 46.250617][ T4265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.265560][ T4267] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.278622][ T4265] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.331282][ T4267] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.399310][ T4267] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.507698][ T41] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.546644][ T41] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.554906][ T41] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.575823][ T41] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.595413][ T4285] loop3: detected capacity change from 0 to 8192 [ 46.610968][ T4285] syz.3.208: attempt to access beyond end of device [ 46.610968][ T4285] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 46.625446][ T4285] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 46.633319][ T4285] FAT-fs (loop3): Filesystem has been set read-only [ 46.642822][ T4290] loop9: detected capacity change from 0 to 7 [ 46.649655][ T3497] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.658305][ T3497] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.666198][ T3497] loop9: unable to read partition table [ 46.681028][ T4290] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.686376][ T4285] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 46.690177][ T4290] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.704707][ T4290] loop9: unable to read partition table [ 46.711117][ T4290] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 46.711117][ T4290] ) failed (rc=-5) [ 46.725666][ T3497] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.733809][ T3497] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.734593][ T4285] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 46.741984][ T3497] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.759082][ T3497] Buffer I/O error on dev loop9, logical block 0, async page read [ 46.822080][ T4299] mmap: syz.5.214 (4299) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.865159][ T4299] veth0_to_team: entered promiscuous mode [ 46.899230][ T4303] loop1: detected capacity change from 0 to 512 [ 46.907939][ T4303] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 46.933535][ T4303] EXT4-fs (loop1): 1 truncate cleaned up [ 46.946132][ T4303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.974044][ T4303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.993089][ T4311] loop5: detected capacity change from 0 to 1024 [ 47.007790][ T4311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 47.038817][ T4313] loop2: detected capacity change from 0 to 1024 [ 47.049124][ T4311] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.079708][ T4313] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 47.113631][ T4311] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.218: lblock 3 mapped to illegal pblock 3 (length 3) [ 47.132037][ T4313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.154757][ T4311] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 47.167241][ T4311] EXT4-fs (loop5): This should not happen!! Data will be lost [ 47.167241][ T4311] [ 47.181713][ T4313] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 47.189176][ T4311] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.218: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 47.222762][ T4311] EXT4-fs error (device loop5) in ext4_setattr:6071: Corrupt filesystem [ 47.283824][ T3674] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 47.367818][ T4328] loop3: detected capacity change from 0 to 128 [ 47.543615][ T4334] loop9: detected capacity change from 0 to 7 [ 47.550148][ T4334] loop9: unable to read partition table [ 47.556010][ T4334] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 47.556010][ T4334] ) failed (rc=-5) [ 47.590860][ T4336] loop3: detected capacity change from 0 to 512 [ 47.598564][ T4336] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 47.623170][ T4336] EXT4-fs (loop3): failed to open journal device unknown-block(0,9) -6 [ 47.643996][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.699216][ T4348] random: crng reseeded on system resumption [ 47.715452][ T4346] loop1: detected capacity change from 0 to 128 [ 47.757493][ T4355] loop3: detected capacity change from 0 to 1024 [ 47.764399][ T4355] EXT4-fs: Ignoring removed orlov option [ 47.778354][ T4355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.792805][ T2393] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 47.818216][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.842099][ T4360] loop2: detected capacity change from 0 to 1024 [ 47.860650][ T4362] loop3: detected capacity change from 0 to 1024 [ 47.869355][ T4360] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 47.889894][ T4362] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 47.890613][ T4360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.917301][ T4362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.924382][ T4360] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 47.932572][ T4362] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 48.116538][ T4374] loop4: detected capacity change from 0 to 512 [ 48.137420][ T4374] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 48.150750][ T4374] EXT4-fs (loop4): 1 truncate cleaned up [ 48.156959][ T4374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.172032][ T4374] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.297297][ T4378] loop5: detected capacity change from 0 to 256 [ 48.405307][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.050537][ T4400] loop1: detected capacity change from 0 to 1024 [ 49.069246][ T4399] loop3: detected capacity change from 0 to 1024 [ 49.096398][ T4400] EXT4-fs: Ignoring removed orlov option [ 49.145609][ T4399] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.150841][ T4415] loop5: detected capacity change from 0 to 128 [ 49.267507][ T4395] program syz.4.242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 49.318367][ T4395] veth1_to_bond: entered allmulticast mode [ 49.341785][ T4394] veth1_to_bond: left allmulticast mode [ 49.402646][ T4393] netlink: zone id is out of range [ 49.410366][ T4393] netlink: zone id is out of range [ 49.443984][ T4393] netlink: zone id is out of range [ 49.456294][ T4393] netlink: zone id is out of range [ 49.461579][ T4393] netlink: zone id is out of range [ 49.486948][ T4393] netlink: zone id is out of range [ 49.496268][ T4440] siw: device registration error -23 [ 49.506544][ T4440] loop5: detected capacity change from 0 to 1024 [ 49.524857][ T4440] binfmt_misc: register: failed to install interpreter file ./file2 [ 49.525012][ T4445] loop2: detected capacity change from 0 to 256 [ 49.560746][ T4448] loop5: detected capacity change from 0 to 128 [ 49.570486][ T4393] netlink: zone id is out of range [ 49.613565][ T4393] netlink: zone id is out of range [ 49.725363][ T4463] loop2: detected capacity change from 0 to 128 [ 49.740394][ T4462] can0: slcan on ttyS3. [ 49.783686][ T4463] lo speed is unknown, defaulting to 1000 [ 49.826174][ T4462] can0 (unregistered): slcan off ttyS3. [ 49.865693][ T4466] can0: slcan on ttyS3. [ 50.181921][ T4494] loop1: detected capacity change from 0 to 1024 [ 50.202958][ T4494] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 50.226139][ T4460] can0 (unregistered): slcan off ttyS3. [ 50.258834][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 50.258859][ T29] audit: type=1326 audit(1754456149.428:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382cf2ebe9 code=0x7ffc0000 [ 50.386665][ T4515] loop2: detected capacity change from 0 to 164 [ 50.419591][ T4512] netlink: 'syz.4.268': attribute type 39 has an invalid length. [ 50.446470][ T4512] veth1_macvtap: left promiscuous mode [ 50.457105][ T29] audit: type=1326 audit(1754456149.478:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f382cf2ebe9 code=0x7ffc0000 [ 50.480530][ T29] audit: type=1326 audit(1754456149.478:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382cf2ebe9 code=0x7ffc0000 [ 50.504055][ T29] audit: type=1326 audit(1754456149.478:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f382cf2ebe9 code=0x7ffc0000 [ 50.527359][ T29] audit: type=1326 audit(1754456149.478:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382cf2ebe9 code=0x7ffc0000 [ 50.550766][ T29] audit: type=1326 audit(1754456149.478:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f382cf2ebe9 code=0x7ffc0000 [ 50.574208][ T29] audit: type=1326 audit(1754456149.478:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382cf2ebe9 code=0x7ffc0000 [ 50.597693][ T29] audit: type=1326 audit(1754456149.478:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f382cf2ebe9 code=0x7ffc0000 [ 50.607751][ T4529] loop3: detected capacity change from 0 to 1024 [ 50.621286][ T29] audit: type=1326 audit(1754456149.478:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f382cf2ebe9 code=0x7ffc0000 [ 50.651042][ T29] audit: type=1326 audit(1754456149.488:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4505 comm="syz.4.266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f382cf2ebe9 code=0x7ffc0000 [ 50.682866][ T4529] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 50.686621][ T4515] Unable to read rock-ridge attributes [ 50.821287][ T4515] Unable to read rock-ridge attributes [ 50.885620][ T4554] loop5: detected capacity change from 0 to 512 [ 50.911696][ T4554] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 50.938419][ T4554] EXT4-fs (loop5): 1 truncate cleaned up [ 51.121056][ T4576] loop1: detected capacity change from 0 to 512 [ 51.129933][ T4576] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 51.147174][ T4576] EXT4-fs (loop1): 1 truncate cleaned up [ 51.274255][ T4563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 51.290480][ T4563] IPVS: Error joining to the multicast group [ 51.351390][ T4612] loop3: detected capacity change from 0 to 128 [ 51.549546][ T4618] siw: device registration error -23 [ 51.559009][ T4618] loop3: detected capacity change from 0 to 1024 [ 51.579548][ T4618] binfmt_misc: register: failed to install interpreter file ./file2 [ 51.604157][ T4621] loop3: detected capacity change from 0 to 1024 [ 51.771763][ T4639] loop5: detected capacity change from 0 to 1024 [ 51.867255][ T4639] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.883818][ T4646] loop2: detected capacity change from 0 to 1024 [ 51.941604][ T4650] random: crng reseeded on system resumption [ 51.967121][ T4639] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.284: lblock 3 mapped to illegal pblock 3 (length 3) [ 51.981170][ T4651] siw: device registration error -23 [ 51.993656][ T4651] loop4: detected capacity change from 0 to 1024 [ 52.028077][ T4639] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 52.040476][ T4639] EXT4-fs (loop5): This should not happen!! Data will be lost [ 52.040476][ T4639] [ 52.081092][ T4654] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.284: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 52.120588][ T4654] EXT4-fs error (device loop5) in ext4_setattr:6071: Corrupt filesystem [ 52.143936][ T4646] binfmt_misc: register: failed to install interpreter file ./file2 [ 52.196680][ T4671] loop2: detected capacity change from 0 to 1024 [ 52.209714][ T4651] binfmt_misc: register: failed to install interpreter file ./file2 [ 52.281494][ T4682] loop5: detected capacity change from 0 to 128 [ 52.312191][ T4671] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.289: Allocating blocks 449-513 which overlap fs metadata [ 52.337769][ T4669] EXT4-fs (loop2): pa ffff888106dd7620: logic 48, phys. 177, len 21 [ 52.345824][ T4669] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 52.386839][ T4688] loop1: detected capacity change from 0 to 128 [ 52.419045][ T4690] loop2: detected capacity change from 0 to 512 [ 52.427176][ T4690] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.430527][ T4688] lo speed is unknown, defaulting to 1000 [ 52.457118][ T4690] EXT4-fs (loop2): 1 truncate cleaned up [ 52.528534][ T4695] loop5: detected capacity change from 0 to 1024 [ 52.561718][ T4695] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 52.802353][ T4710] loop1: detected capacity change from 0 to 256 [ 53.008632][ T4714] siw: device registration error -23 [ 53.017954][ T4714] loop5: detected capacity change from 0 to 1024 [ 53.038081][ T4714] binfmt_misc: register: failed to install interpreter file ./file2 [ 53.066764][ T4717] FAULT_INJECTION: forcing a failure. [ 53.066764][ T4717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.079855][ T4717] CPU: 0 UID: 0 PID: 4717 Comm: +}[@ Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 53.079881][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.079894][ T4717] Call Trace: [ 53.079914][ T4717] [ 53.079957][ T4717] __dump_stack+0x1d/0x30 [ 53.079977][ T4717] dump_stack_lvl+0xe8/0x140 [ 53.079994][ T4717] dump_stack+0x15/0x1b [ 53.080009][ T4717] should_fail_ex+0x265/0x280 [ 53.080040][ T4717] should_fail+0xb/0x20 [ 53.080094][ T4717] should_fail_usercopy+0x1a/0x20 [ 53.080112][ T4717] strncpy_from_user+0x25/0x230 [ 53.080138][ T4717] path_setxattrat+0xeb/0x310 [ 53.080256][ T4717] __x64_sys_fsetxattr+0x6b/0x80 [ 53.080279][ T4717] x64_sys_call+0x1ced/0x2ff0 [ 53.080369][ T4717] do_syscall_64+0xd2/0x200 [ 53.080421][ T4717] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.080445][ T4717] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.080589][ T4717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.080611][ T4717] RIP: 0033:0x7f3353b0ebe9 [ 53.080628][ T4717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.080647][ T4717] RSP: 002b:00007f335216f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 53.080667][ T4717] RAX: ffffffffffffffda RBX: 00007f3353d35fa0 RCX: 00007f3353b0ebe9 [ 53.080680][ T4717] RDX: 0000200000000180 RSI: 0000200000000400 RDI: 0000000000000003 [ 53.080693][ T4717] RBP: 00007f335216f090 R08: 0000000000000001 R09: 0000000000000000 [ 53.080718][ T4717] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 53.080729][ T4717] R13: 00007f3353d36038 R14: 00007f3353d35fa0 R15: 00007fff20c4ad98 [ 53.080747][ T4717] [ 53.312795][ T4725] loop2: detected capacity change from 0 to 128 [ 53.434749][ T4742] random: crng reseeded on system resumption [ 53.489221][ T4751] loop9: detected capacity change from 0 to 7 [ 53.497518][ T4751] buffer_io_error: 8 callbacks suppressed [ 53.497531][ T4751] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.519745][ T4751] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.527635][ T4751] loop9: unable to read partition table [ 53.534508][ T4751] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 53.534508][ T4751] ) failed (rc=-5) [ 53.540722][ T3484] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.555915][ T3484] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.564062][ T3484] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.573651][ T3484] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.575845][ T4755] loop3: detected capacity change from 0 to 512 [ 53.582145][ T3484] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.590478][ T4755] EXT4-fs: quotafile must be on filesystem root [ 53.725718][ T4773] random: crng reseeded on system resumption [ 53.731494][ T4775] loop1: detected capacity change from 0 to 128 [ 53.778796][ T4783] loop9: detected capacity change from 0 to 7 [ 53.785226][ T4783] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.793244][ T4783] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.801127][ T4783] loop9: unable to read partition table [ 53.806927][ T4783] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 53.806927][ T4783] ) failed (rc=-5) [ 53.808066][ T3497] Buffer I/O error on dev loop9, logical block 0, async page read [ 53.867662][ T4785] loop4: detected capacity change from 0 to 8192 [ 53.879013][ T4785] syz.4.330: attempt to access beyond end of device [ 53.879013][ T4785] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 53.905662][ T4785] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 53.913753][ T4785] FAT-fs (loop4): Filesystem has been set read-only [ 53.920861][ T4790] loop1: detected capacity change from 0 to 256 [ 53.929506][ T4785] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 53.939143][ T4785] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 54.110586][ T4802] loop3: detected capacity change from 0 to 1024 [ 54.128434][ T4802] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.141680][ T4802] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 3: comm syz.3.339: lblock 3 mapped to illegal pblock 3 (length 3) [ 54.156695][ T4802] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 54.168993][ T4802] EXT4-fs (loop3): This should not happen!! Data will be lost [ 54.168993][ T4802] [ 54.181484][ T4802] EXT4-fs error (device loop3): ext4_ext_remove_space:2955: inode #15: comm syz.3.339: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 54.201482][ T4802] EXT4-fs error (device loop3) in ext4_setattr:6071: Corrupt filesystem [ 54.243412][ T4809] random: crng reseeded on system resumption [ 54.297581][ T4818] loop5: detected capacity change from 0 to 128 [ 54.322229][ T3497] ================================================================== [ 54.330342][ T3497] BUG: KCSAN: data-race in _copy_to_iter / fat_mirror_bhs [ 54.337464][ T3497] [ 54.339783][ T3497] write to 0xffff88810399c800 of 2048 bytes by task 4818 on cpu 0: [ 54.347662][ T3497] fat_mirror_bhs+0x1df/0x320 [ 54.352378][ T3497] fat_alloc_clusters+0x98b/0xa80 [ 54.357414][ T3497] fat_get_block+0x258/0x5e0 [ 54.362006][ T3497] __block_write_begin_int+0x3fd/0xf90 [ 54.367470][ T3497] cont_write_begin+0x5fc/0x970 [ 54.372321][ T3497] fat_write_begin+0x4f/0xe0 [ 54.376908][ T3497] generic_perform_write+0x181/0x490 [ 54.382223][ T3497] __generic_file_write_iter+0x9e/0x120 [ 54.387771][ T3497] generic_file_write_iter+0x8d/0x2f0 [ 54.393131][ T3497] vfs_write+0x49d/0x8e0 [ 54.397360][ T3497] ksys_write+0xda/0x1a0 [ 54.401594][ T3497] __x64_sys_write+0x40/0x50 [ 54.406171][ T3497] x64_sys_call+0x27fe/0x2ff0 [ 54.410842][ T3497] do_syscall_64+0xd2/0x200 [ 54.415343][ T3497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.421222][ T3497] [ 54.423537][ T3497] read to 0xffff88810399ce00 of 512 bytes by task 3497 on cpu 1: [ 54.431252][ T3497] _copy_to_iter+0x12d/0xe30 [ 54.435843][ T3497] copy_page_to_iter+0x18f/0x2d0 [ 54.440767][ T3497] filemap_read+0x407/0xa00 [ 54.445253][ T3497] blkdev_read_iter+0x22d/0x2e0 [ 54.450102][ T3497] vfs_read+0x5ca/0x6f0 [ 54.454246][ T3497] ksys_read+0xda/0x1a0 [ 54.458391][ T3497] __x64_sys_read+0x40/0x50 [ 54.462882][ T3497] x64_sys_call+0x27bc/0x2ff0 [ 54.467548][ T3497] do_syscall_64+0xd2/0x200 [ 54.472039][ T3497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.477918][ T3497] [ 54.480261][ T3497] Reported by Kernel Concurrency Sanitizer on: [ 54.486396][ T3497] CPU: 1 UID: 0 PID: 3497 Comm: udevd Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 54.498010][ T3497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 54.508051][ T3497] ================================================================== [ 54.525662][ T4820] siw: device registration error -23 [ 54.542681][ T4820] loop3: detected capacity change from 0 to 1024 [ 54.560898][ T4820] binfmt_misc: register: failed to install interpreter file ./file2