last executing test programs: 12.543855909s ago: executing program 1 (id=897): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101081, 0x0) fcntl$lock(r0, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000480)={[{@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x2, 0x2}, 0x10) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) process_mrelease(r0, 0x0) 10.995184895s ago: executing program 1 (id=906): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x7, r0, 'id0\x00'}) recvmsg$unix(r2, 0x0, 0x2121) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0x20002078) 9.118794637s ago: executing program 1 (id=911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) signalfd(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="07000000040000000802000001000000"], 0x50) r3 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(r3, 0x0, 0x20000000, 0x0) 7.534415017s ago: executing program 2 (id=914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20d41, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x80000) getsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x3) syz_clone(0x40000, &(0x7f0000000140)="3d9ab13ebab6cc8550d8cef294145ad677d0cf99a78fb0febcb65c33db1f65fbe4d79ac4aaf98b08a6587e6bcc4147e8c3a995d0545b", 0x36, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="2a02878e5e5c28ab289fd2d4d0ec12e0f9c91931c1bd21999fafee8c919b35a97fb07c2901a7f3af530fe2d9ba725f73718fac3094a478e0fad86378ef5e35bdec2818acda193bb5d0eacfa4a9621a70ddc03128561400d101266475765e6481d6dcaac88f76417c44b6cee2ba15760decda851a4988ad4ad6fedc9a2e5312573c175a3a85b63faed09cc3ee3a84b1481dfdfe98ac9211c936060137cdc12bb94a30c164ffd3a74a5d18ebd70db2b96a4c216ab7c8fc8772aced02b955f8be521c94ed71f8a1adf13477abc58b5633e093cf753f113ebb0668e838f1e4d8ecde46fdf17261785981256cf9bc04e8") ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) getpgrp(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.463548092s ago: executing program 4 (id=915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 7.37651219s ago: executing program 4 (id=916): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) setuid(0xee01) 6.954652194s ago: executing program 0 (id=917): r0 = socket$netlink(0x10, 0x3, 0x0) fstat(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x1000811, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRES16, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESHEX=r1, @ANYRES32, @ANYRES64=0x0], 0x2, 0x1da, &(0x7f00000011c0)="$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") 6.869140121s ago: executing program 4 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x20008000) 6.612092012s ago: executing program 2 (id=919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x20008000) 6.570382355s ago: executing program 0 (id=920): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 5.738429973s ago: executing program 0 (id=921): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2d, 0x0, 0x4, 0x5, 0x24, @local, @local, 0x8, 0x80, 0xfffff801, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001480)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)={0x3f4, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^\xda\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_MASK={0xec, 0x5, "f18fce7964c6163c4f5c011f71c932e8d70ff9935d866de4dfd8f2a6588e44205330e6fccedf0069fc1e5d99a95b61137a079280a9d9908885b6dd1f944f565590316391301dce94334b139f3920707cba1ad6ea2369fb6004c381a4ed0b175b2c772f190ef686cf70c40211707566015a521969d77e91d3ca813d20fde28ef300ac81790c4a4a74fdaf7baf281cefb8d222d5268e647dae9afd8198ed9a86073b1ec32a8821b67c594055fdb241e2da1d06c86399616daa2fa91d970da38f491634004f900520a19c1bb5a3262a05ad8d27f6033ae9deeca08f9d1227ea9f4c8ab02d392e34a0bb"}, @ETHTOOL_A_BITSET_MASK={0x45, 0x5, "b7cadd2af29c2bc0c8b3a8512365732e7cbfa34889cfacc32bc40bfd6cf02ed1d7d75582ec98ca0b36497fb23c1f359d781bd45d04d35a07dd00c5a2a396256311"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_VALUE={0x1a, 0x4, "87335ced6bc76a0bd32a1cf829112f4817309496b821"}, @ETHTOOL_A_BITSET_BITS={0x4c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'h-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1d0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xcf, 0x4, "5ee7768b7413f15b52f956d9a9ba080c89003046b07d9e76e02e092a637935bf9738e412d463e5cc47aa767db80599c6a137f81d0bf67ad7c489742bb6298a1cbb56d44de50810f943693ab500ee9d7fe6962dc3246c03cd3b715f0c533d718e13f00171b5a9046093ee316b559f8fd3e678ff47c29d0a9a53908e03d797aa02547b5b5a382eedb57257cd61641e5c0201ab4bc6757bebfc1089c97dc173658fc0020251319bcc8d8c1474158f7cdec92e4fc0db8a9e21db34503de961cabb3d997173bf36d3e1243771b9"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\\@#@%:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ae}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '.(%\xbd\a*$.*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ']@\xc2^)&\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xfa%\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "1fa3883e21cd9fe5caae18544a9131d14c91cf0d35507989", "6e447a58f2e6a0893330bdb477ae5aa6740446707740eb6dcb6c5545363eff42"}}}}}}, 0x0) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0x2, 0x0, r7}, 0x50) r9 = gettid() rt_sigqueueinfo(r9, 0x21, &(0x7f0000001500)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.379637032s ago: executing program 3 (id=922): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) (async) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000040)={0x0, 0xdddd1000, 0xe38092e, 0x0, 0xb}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60645d0100000000fe0000000000007bae020000c0bd0000000000000000060000000000000000001f00c2049a"], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.378676992s ago: executing program 0 (id=923): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap$KVM_VCPU(&(0x7f0000f31000/0x3000)=nil, 0x930, 0x100000a, 0x213011, r2, 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1a3240, 0x5ca7fd8adae1ec9f) fchown(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1c, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffff80, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000040)=0x45d2, 0x4) sendmmsg(r7, &(0x7f00000092c0), 0x4ff, 0x0) 5.378124162s ago: executing program 2 (id=924): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0x50000) r1 = creat(0x0, 0x0) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000dc0)=ANY=[], 0xfe44, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0xf) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/70, 0x46}], 0x1}, 0x4c2003a0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000e40)={0x798, 0x0, [{0x8000000, 0x0, 0x0}]}) 5.182166418s ago: executing program 3 (id=925): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00'], 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 4.484072815s ago: executing program 2 (id=926): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="400f30f20f38f1c8f3450faee2f23667440f356766470f38811966bad104b800000000efc4a3a169d25966b8e2000f00d0c463e96d2c0a0066baf80cb8b4385382ef66bafc0c66b80c0066ef", 0x4c}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000040)=0x6, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180), 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}]}, 0xfd, 0x573, &(0x7f0000001240)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='timer_start\x00', r6}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) setuid(0xee01) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000cc0)={0x2, 0x0, @pic={0x66, 0xc4, 0x3, 0x20, 0x0, 0x2, 0xb1, 0x8, 0x9, 0x0, 0x80, 0x31, 0x54, 0xd0, 0x2, 0x9}}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x1366439, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x1, 0x0, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0185879, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc3}}) lsetxattr$security_evm(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000180), &(0x7f0000000280)=@md5={0x1, "17a7521349cc2edf984c3814193e7e5c"}, 0x11, 0x1) 4.142725093s ago: executing program 3 (id=927): r0 = syz_pidfd_open(0x0, 0x0) fsetxattr$security_selinux(r0, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:system_dbusd_var_lib_t:s0\x00', 0x2c, 0x2) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x1200020, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,nfs,dots,dots,check=strict,check=r\x00laxed,discard,dots,dots,uid=', @ANYRESDEC=0x0, @ANYRES64], 0x1, 0x239, &(0x7f0000004400)="$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") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x100}, 0x1c) 3.925309921s ago: executing program 1 (id=928): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000440)={0x41, 0x0}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000000540)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) msync(&(0x7f00008d1000/0x1000)=nil, 0x1000, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0xffff, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000280), &(0x7f0000000340)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000f00000085000000f2f09523281eab00000095000000dd0115cddb188db658023571ba20b9d8eed81eb09b684e36afd833b45926e2bf6e086817ab04679014accefce099b72c6a348bc430967c7536b5cf8ce3a374a39152fef6a13e7d3a422b5be3db77bd08eb1df3e990dc16d5dbbde2f161966fe0d90b820ec9f70f7d446317d48aded70d606caa2d7f8bb983cfbe82a82785f765b813a3eed9cad17fc06e9ec83a1b52b2a1efa2974b3246318d8ed0d0"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x4048001) write$char_usb(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.866547066s ago: executing program 3 (id=929): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000200000000dfff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800001100000000009b83996b000000181100009d726571fe4d6db4b24af2177d2ff75e0ce0197ac9065a69915075d114d0c0a72d951afed2c0317737baed43fbb056be4d522f00f9c0d42ff9b2a6889823d5c40c7cc009665b22a1994260ada3cb10cf0000495939b4f6824d20f0e538f33316e3cdaadbe5411ed8c7ed7bd5d9c99c00c4c251c0a33696017fe174e3a244e34650326d22141cd9ad4b72a661896b0aea841be43829ac969e78519bf3c0a1d1d65bbcdf3fcadf69493bdcff868b5cfb3c7ea0ec", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x8) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 3.846006257s ago: executing program 4 (id=930): r0 = timerfd_create(0x0, 0x0) read(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x380201c, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000004c0)=0x200002) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) setrlimit(0xb, &(0x7f00000003c0)={0xd5, 0x1}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00', r5}, 0x18) linkat(r1, &(0x7f0000000300)='./file0\x00', r2, &(0x7f0000000380)='./file0/file1\x00', 0x400) socket(0x80000000000000a, 0x2, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x3, 0x0, @mcast1={0xff, 0x7}, 0x8a}}, {{0xa, 0x0, 0x10001, @local}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x1, @empty}}, {{0xa, 0x0, 0x4, @private1, 0x3}}}, 0x108) 3.771201834s ago: executing program 0 (id=931): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x368, &(0x7f0000000180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f00000005c0)={[{@errors_remount}, {@acl}]}, 0x1, 0x7bc, &(0x7f0000001740)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x1) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = fsmount(r1, 0x0, 0x0) fchdir(r3) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lchown(&(0x7f0000000000)='.\x00', 0x0, 0x0) 3.625214315s ago: executing program 4 (id=932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2100) mount_setattr(r2, 0x0, 0x100, &(0x7f0000000740)={0x2, 0x100000, 0x180000, {r3}}, 0x20) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x1000, 0x8, 0xa1, 0x6, 0x4, "12af25915f170e67"}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/prev\x00') write$FUSE_INTERRUPT(r4, 0x0, 0x0) syz_emit_ethernet(0x70, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x62, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x6071, 0x0, 0xe6}, {"99ac0358c62725c3cb930831a244f48423853738bb54577508e381954e0e4e2620aea69eccf7fa7226dbef3d52cfaa9f921a6c4879bd4a5f0bea"}}}}}}, 0x0) 3.603168207s ago: executing program 3 (id=933): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x20008000) 3.468636498s ago: executing program 2 (id=934): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0500000000bbd10d0bc11fc00000000040000000aef028c89c34dcb05408427474e1cb5e689c593e7a16dd0af4f5be2f038bc9faf7"], 0x80}}, 0x20008000) 430.837846ms ago: executing program 1 (id=935): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioperm(0x2, 0x1, 0x9) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0x50000) r2 = creat(0x0, 0x0) fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000dc0)=ANY=[], 0xfe44, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0xf) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/70, 0x46}], 0x1}, 0x4c2003a0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x798, 0x0, [{0x8000000, 0x0, 0x0}]}) 2.70026ms ago: executing program 3 (id=936): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0x50000) r1 = creat(0x0, 0x0) fsetxattr$system_posix_acl(r1, 0x0, &(0x7f0000000dc0)=ANY=[], 0xfe44, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0xf) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/70, 0x46}], 0x1}, 0x4c2003a0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000e40)={0x798, 0x0, [{0x8000000, 0x0, 0x0}]}) 2.21267ms ago: executing program 4 (id=937): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) ioperm(0x2, 0x1, 0x9) gettid() seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0x50000) r2 = creat(0x0, 0x0) fsetxattr$system_posix_acl(r2, 0x0, &(0x7f0000000dc0)=ANY=[], 0xfe44, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0xf) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/70, 0x46}], 0x1}, 0x4c2003a0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)={0x798, 0x0, [{0x8000000, 0x0, 0x0}]}) 1.336111ms ago: executing program 0 (id=938): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x6) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0xe) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001ac0)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfffb}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x1c, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x76}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./file1\x00', 0x1000811, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRES16, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRES32, @ANYRES64=0x0], 0x2, 0x1da, &(0x7f00000011c0)="$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") 413.831µs ago: executing program 1 (id=939): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x384, &(0x7f0000000b40)="$eJzs3T+IHFUYAPBvb/Z27yThrhCCgjDaCXokURFtvBAuENwmyuKfQlxMonJ7BnK4mBTZnI1YCpYKgpUWWlikE0RQxM7C1gghKhaaLmDIyOzM/rvdvYhy+YO/X7H58t73vfdm78HODey7l1dj/fh8nLxy5XIsLFSiunp4Na5WYjmS6Dsfk2rFPx9N6QIAbnNXsyz+zAoRX/6TksrurwoA2E29z/9X9460vP3NTvmZT38AuOOVv/8vjrYl23IWZhWf2rVlAQC7aPz5f0Q8MJFSG4bViXsDAODO8+wLLz59qBHxTJouRGy802l2mvHksP/QyXg92nEi9sdSXIsobhTyl0rv9cjRxtr+NE278ctyNPOKTjNio9tpFncKh5JefT0OxFIsl/Xl3UaWZcmRLxprB9KeiDjf7c0fG5VOcz4Wy/l/uitOxMFI4+6J+oijjbWDaTlAc6NfPx+xNXxuka9/JZbih1fiVLTjeOS1/duaxtq5A2l6OGvsqQzru51mvZdXmPkEBAAAAAAAAAAAAAAAAAAAAAAA/pWVdGB5cH5ONjy/Z2VlSn/vfJyivjwfaKs4HyirZ5Flf7z1cPPdJMbOB9p2Pk+306zG3K29dAAAAAAAAAAAAAAAAAAAALhtbJ6pRavdPnF688zZ9dGge3rzzFxE5C1vfPfZ14sxnrNYDjBeNRZUy5SRrnRYlSX95CwZyymDJJ+8Ui1aPr0wWPFoTn1wFVOXUZ/aVS3WvPf+Sx8Mu+5L+iNfHyYnMfW6zibbllEEC2Nv7Oy3ZYfg4A1yLmZZNqv83EuTVVGJqE5Z6n8Ksjz49vJr9zyyue+xXstXWeHBh5aeu/j+x7+tt9r5zLl2u3Z681q23ir/P32zzQ6S/v755NJgs1VGd0K19ej1Y3tmjLw13tJKfvz9+Xvf+75smdv5x5SNtrw50lUpq5Ji0s+3l9eKIF/moOupPMjfo8m55qds/mnB47Fzzg0uZ9+Hq60L537+dWr53OQmGdnLDuoAAAAAAAAAAAAAAAAAAICbYuS74qXyy77zO1U9cWz3VwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN8/w7/8Pgpjb2tYyO6iWw+Qtf3VjMqeeDxi1kRmXb9GVAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwf/Z3AAAA//8HNl2q") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10138, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003900)={0x2020}, 0x2020) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0)={0x7fff, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0xa1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 0s ago: executing program 2 (id=940): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): [ 121.329039][ T1660] EXT4-fs: Ignoring removed mblk_io_submit option [ 121.359475][ T1660] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 121.383550][ T1660] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 121.393198][ T1660] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 121.401320][ T1660] System zones: 0-2, 18-18, 34-34 [ 121.407240][ T1660] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.387: iget: bad i_size value: 360287970189639680 [ 121.420513][ T1660] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.387: couldn't read orphan inode 15 (err -117) [ 121.432618][ T1660] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 121.505686][ T1660] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.387: iget: bad i_size value: 360287970189639680 [ 121.521714][ T1660] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.387: iget: bad i_size value: 360287970189639680 [ 121.902205][ T285] EXT4-fs (loop0): unmounting filesystem. [ 122.068985][ T287] EXT4-fs (loop4): unmounting filesystem. [ 123.043413][ T1675] xt_hashlimit: size too large, truncated to 1048576 [ 126.464961][ T1682] loop2: detected capacity change from 0 to 256 [ 126.476554][ T1680] loop3: detected capacity change from 0 to 8192 [ 126.496012][ T1684] loop1: detected capacity change from 0 to 512 [ 126.511517][ T1682] FAT-fs (loop2): Directory bread(block 64) failed [ 126.532206][ T1684] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.542159][ T1682] FAT-fs (loop2): Directory bread(block 65) failed [ 126.548923][ T1682] FAT-fs (loop2): Directory bread(block 66) failed [ 126.555571][ T1682] FAT-fs (loop2): Directory bread(block 67) failed [ 126.562206][ T1682] FAT-fs (loop2): Directory bread(block 68) failed [ 126.568791][ T1682] FAT-fs (loop2): Directory bread(block 69) failed [ 126.576110][ T1684] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 126.585443][ T1682] FAT-fs (loop2): Directory bread(block 70) failed [ 126.592440][ T1682] FAT-fs (loop2): Directory bread(block 71) failed [ 126.599185][ T1682] FAT-fs (loop2): Directory bread(block 72) failed [ 126.606362][ T1682] FAT-fs (loop2): Directory bread(block 73) failed [ 126.609206][ T1684] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 126.655307][ T1688] loop2: detected capacity change from 0 to 512 [ 126.682425][ T1684] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 126.717616][ T1684] System zones: 0-2, 18-18, 34-34 [ 126.726603][ T1688] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 126.743733][ T1684] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.394: iget: bad i_size value: 360287970189639680 [ 126.751902][ T1688] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.776668][ T1697] 9pnet_fd: Insufficient options for proto=fd [ 126.784171][ T1684] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.394: couldn't read orphan inode 15 (err -117) [ 126.803985][ T1684] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 126.814256][ T286] EXT4-fs (loop2): unmounting filesystem. [ 126.843951][ T1700] 9pnet_fd: Insufficient options for proto=fd [ 126.913592][ T1684] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.394: iget: bad i_size value: 360287970189639680 [ 126.927465][ T1684] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.394: iget: bad i_size value: 360287970189639680 [ 127.062958][ T284] EXT4-fs (loop1): unmounting filesystem. [ 127.408322][ T1709] xt_hashlimit: size too large, truncated to 1048576 [ 130.566109][ T1730] loop4: detected capacity change from 0 to 256 [ 130.580016][ T1730] FAT-fs (loop4): Directory bread(block 64) failed [ 130.586766][ T1730] FAT-fs (loop4): Directory bread(block 65) failed [ 130.593500][ T1730] FAT-fs (loop4): Directory bread(block 66) failed [ 130.600180][ T1730] FAT-fs (loop4): Directory bread(block 67) failed [ 130.607077][ T1730] FAT-fs (loop4): Directory bread(block 68) failed [ 130.613846][ T1730] FAT-fs (loop4): Directory bread(block 69) failed [ 130.620456][ T1730] FAT-fs (loop4): Directory bread(block 70) failed [ 130.634138][ T1730] FAT-fs (loop4): Directory bread(block 71) failed [ 130.648410][ T1730] FAT-fs (loop4): Directory bread(block 72) failed [ 130.661548][ T1730] FAT-fs (loop4): Directory bread(block 73) failed [ 130.976906][ T1741] xt_hashlimit: size too large, truncated to 1048576 [ 132.352896][ T1743] 9pnet_fd: Insufficient options for proto=fd [ 132.420381][ T1747] loop1: detected capacity change from 0 to 256 [ 132.456562][ T1747] FAT-fs (loop1): Directory bread(block 64) failed [ 132.471888][ T1747] FAT-fs (loop1): Directory bread(block 65) failed [ 132.494758][ T1751] loop4: detected capacity change from 0 to 256 [ 132.502125][ T1747] FAT-fs (loop1): Directory bread(block 66) failed [ 132.510595][ T1747] FAT-fs (loop1): Directory bread(block 67) failed [ 132.523259][ T1751] FAT-fs (loop4): Directory bread(block 64) failed [ 132.529074][ T1747] FAT-fs (loop1): Directory bread(block 68) failed [ 132.534008][ T1751] FAT-fs (loop4): Directory bread(block 65) failed [ 132.543231][ T1747] FAT-fs (loop1): Directory bread(block 69) failed [ 132.549245][ T1751] FAT-fs (loop4): Directory bread(block 66) failed [ 132.559991][ T1747] FAT-fs (loop1): Directory bread(block 70) failed [ 132.561533][ T1751] FAT-fs (loop4): Directory bread(block 67) failed [ 132.571588][ T1747] FAT-fs (loop1): Directory bread(block 71) failed [ 132.574984][ T1749] loop0: detected capacity change from 0 to 8192 [ 132.580042][ T1747] FAT-fs (loop1): Directory bread(block 72) failed [ 132.586220][ T1751] FAT-fs (loop4): Directory bread(block 68) failed [ 132.592965][ T1747] FAT-fs (loop1): Directory bread(block 73) failed [ 132.601343][ T1751] FAT-fs (loop4): Directory bread(block 69) failed [ 132.612551][ T1751] FAT-fs (loop4): Directory bread(block 70) failed [ 132.619143][ T1751] FAT-fs (loop4): Directory bread(block 71) failed [ 132.625843][ T1751] FAT-fs (loop4): Directory bread(block 72) failed [ 132.632513][ T1751] FAT-fs (loop4): Directory bread(block 73) failed [ 132.836405][ T1755] bridge0: port 3(vlan2) entered blocking state [ 132.857221][ T1755] bridge0: port 3(vlan2) entered disabled state [ 133.336223][ T1677] kworker/u4:8: attempt to access beyond end of device [ 133.336223][ T1677] loop4: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 133.372226][ T1677] kworker/u4:8: attempt to access beyond end of device [ 133.372226][ T1677] loop4: rw=1, sector=1864, nr_sectors = 5864 limit=256 [ 133.415584][ T1677] kworker/u4:8: attempt to access beyond end of device [ 133.415584][ T1677] loop4: rw=1, sector=7728, nr_sectors = 3936 limit=256 [ 133.451710][ T1677] kworker/u4:8: attempt to access beyond end of device [ 133.451710][ T1677] loop4: rw=1, sector=11664, nr_sectors = 3528 limit=256 [ 133.489465][ T1677] kworker/u4:8: attempt to access beyond end of device [ 133.489465][ T1677] loop4: rw=1, sector=15192, nr_sectors = 5960 limit=256 [ 133.532104][ T1677] kworker/u4:8: attempt to access beyond end of device [ 133.532104][ T1677] loop4: rw=1, sector=21152, nr_sectors = 3872 limit=256 [ 133.575113][ T1677] kworker/u4:8: attempt to access beyond end of device [ 133.575113][ T1677] loop4: rw=1, sector=25024, nr_sectors = 3824 limit=256 [ 133.605386][ T1677] kworker/u4:8: attempt to access beyond end of device [ 133.605386][ T1677] loop4: rw=1, sector=28848, nr_sectors = 4368 limit=256 [ 133.643436][ T1677] kworker/u4:8: attempt to access beyond end of device [ 133.643436][ T1677] loop4: rw=1, sector=33216, nr_sectors = 584 limit=256 [ 133.927267][ T1771] device bridge0 entered promiscuous mode [ 133.946895][ T1771] bridge0: port 3(macsec1) entered blocking state [ 133.964817][ T1771] bridge0: port 3(macsec1) entered disabled state [ 133.984840][ T1771] device bridge0 left promiscuous mode [ 134.203875][ T1776] loop3: detected capacity change from 0 to 40427 [ 134.211759][ T1776] F2FS-fs (loop3): fault_injection options not supported [ 134.219568][ T1776] F2FS-fs (loop3): invalid crc value [ 134.226280][ T1776] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.260439][ T1776] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 135.180036][ T1789] loop1: detected capacity change from 0 to 40427 [ 135.187426][ T1789] F2FS-fs (loop1): fault_injection options not supported [ 135.195607][ T1789] F2FS-fs (loop1): invalid crc value [ 135.238278][ T1789] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.282916][ T1798] 9pnet_fd: Insufficient options for proto=fd [ 135.289186][ T1789] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.661244][ T1807] xt_hashlimit: size too large, truncated to 1048576 [ 135.944968][ T1809] cgroup: Invalid name [ 138.715913][ T1812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=1812 comm=syz.1.422 [ 139.591565][ T28] audit: type=1400 audit(1754025491.721:271): avc: denied { mounton } for pid=1803 comm="syz.3.425" path="/86/file0" dev="tmpfs" ino=521 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 139.637943][ T1808] tty tty4: ldisc open failed (-12), clearing slot 3 [ 140.112778][ T1820] loop3: detected capacity change from 0 to 8192 [ 142.097708][ T1839] xt_hashlimit: size too large, truncated to 1048576 [ 143.836702][ T1852] loop4: detected capacity change from 0 to 256 [ 143.857729][ T1852] FAT-fs (loop4): Directory bread(block 64) failed [ 143.864413][ T1852] FAT-fs (loop4): Directory bread(block 65) failed [ 143.871058][ T1852] FAT-fs (loop4): Directory bread(block 66) failed [ 143.877940][ T1852] FAT-fs (loop4): Directory bread(block 67) failed [ 143.884758][ T1852] FAT-fs (loop4): Directory bread(block 68) failed [ 143.891362][ T1852] FAT-fs (loop4): Directory bread(block 69) failed [ 143.898869][ T1852] FAT-fs (loop4): Directory bread(block 70) failed [ 143.905624][ T1852] FAT-fs (loop4): Directory bread(block 71) failed [ 143.912392][ T1852] FAT-fs (loop4): Directory bread(block 72) failed [ 143.918987][ T1852] FAT-fs (loop4): Directory bread(block 73) failed [ 144.185575][ T1857] bridge0: port 4(vlan3) entered blocking state [ 144.204505][ T1857] bridge0: port 4(vlan3) entered disabled state [ 144.354651][ T1859] loop0: detected capacity change from 0 to 40427 [ 144.404718][ T1859] F2FS-fs (loop0): fault_injection options not supported [ 144.417817][ T1859] F2FS-fs (loop0): invalid crc value [ 144.554450][ T1859] F2FS-fs (loop0): Found nat_bits in checkpoint [ 144.617904][ T1859] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 146.650122][ T1871] loop2: detected capacity change from 0 to 512 [ 146.659570][ T1875] loop3: detected capacity change from 0 to 256 [ 146.802234][ T1871] EXT4-fs: Ignoring removed mblk_io_submit option [ 147.184985][ T1871] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 147.201918][ T1875] FAT-fs (loop3): Directory bread(block 64) failed [ 147.219425][ T1875] FAT-fs (loop3): Directory bread(block 65) failed [ 147.226192][ T1871] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 147.239334][ T1875] FAT-fs (loop3): Directory bread(block 66) failed [ 147.249150][ T1875] FAT-fs (loop3): Directory bread(block 67) failed [ 147.256144][ T1875] FAT-fs (loop3): Directory bread(block 68) failed [ 147.257117][ T1871] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 147.263515][ T1875] FAT-fs (loop3): Directory bread(block 69) failed [ 147.277633][ T1875] FAT-fs (loop3): Directory bread(block 70) failed [ 147.284384][ T1875] FAT-fs (loop3): Directory bread(block 71) failed [ 147.291040][ T1875] FAT-fs (loop3): Directory bread(block 72) failed [ 147.291121][ T1871] System zones: [ 147.297842][ T1875] FAT-fs (loop3): Directory bread(block 73) failed [ 147.308150][ T1871] 0-2, 18-18, 34-34 [ 147.330857][ T1871] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.441: iget: bad i_size value: 360287970189639680 [ 147.362020][ T1871] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.441: couldn't read orphan inode 15 (err -117) [ 147.412126][ T1871] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 147.553233][ T28] audit: type=1326 audit(1754025503.131:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1886 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ff98eb69 code=0x7ffc0000 [ 148.243989][ T1871] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.441: iget: bad i_size value: 360287970189639680 [ 148.278799][ T28] audit: type=1326 audit(1754025503.131:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1886 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ff98eb69 code=0x7ffc0000 [ 148.307475][ T1897] loop4: detected capacity change from 0 to 256 [ 148.664160][ T1899] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.441: iget: bad i_size value: 360287970189639680 [ 148.715141][ T1895] bridge0: port 3(vlan2) entered blocking state [ 148.726801][ T1897] FAT-fs (loop4): Directory bread(block 64) failed [ 148.786515][ T1897] FAT-fs (loop4): Directory bread(block 65) failed [ 148.820250][ T28] audit: type=1326 audit(1754025503.131:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1886 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f25ff98eb69 code=0x7ffc0000 [ 148.902336][ T1897] FAT-fs (loop4): Directory bread(block 66) failed [ 148.979101][ T1895] bridge0: port 3(vlan2) entered disabled state [ 148.995194][ T1897] FAT-fs (loop4): Directory bread(block 67) failed [ 149.077399][ T1897] FAT-fs (loop4): Directory bread(block 68) failed [ 149.119402][ T28] audit: type=1326 audit(1754025503.131:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1886 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ff98eb69 code=0x7ffc0000 [ 149.150420][ T1902] loop1: detected capacity change from 0 to 256 [ 149.150640][ T1897] FAT-fs (loop4): Directory bread(block 69) failed [ 149.165949][ T1897] FAT-fs (loop4): Directory bread(block 70) failed [ 149.172629][ T1897] FAT-fs (loop4): Directory bread(block 71) failed [ 149.179330][ T1897] FAT-fs (loop4): Directory bread(block 72) failed [ 149.187129][ T1897] FAT-fs (loop4): Directory bread(block 73) failed [ 149.196983][ T28] audit: type=1326 audit(1754025503.131:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1886 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ff98eb69 code=0x7ffc0000 [ 149.216357][ T1902] FAT-fs (loop1): Directory bread(block 64) failed [ 149.237514][ T1902] FAT-fs (loop1): Directory bread(block 65) failed [ 149.246615][ T28] audit: type=1326 audit(1754025503.131:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1886 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25ff98eb69 code=0x7ffc0000 [ 149.250604][ T1902] FAT-fs (loop1): Directory bread(block 66) failed [ 149.303932][ T1902] FAT-fs (loop1): Directory bread(block 67) failed [ 149.317114][ T1902] FAT-fs (loop1): Directory bread(block 68) failed [ 149.330220][ T1902] FAT-fs (loop1): Directory bread(block 69) failed [ 149.349513][ T286] EXT4-fs (loop2): unmounting filesystem. [ 149.359263][ T1902] FAT-fs (loop1): Directory bread(block 70) failed [ 149.370651][ T28] audit: type=1326 audit(1754025503.131:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1886 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ff98eb69 code=0x7ffc0000 [ 149.393941][ T1902] FAT-fs (loop1): Directory bread(block 71) failed [ 149.394010][ T1902] FAT-fs (loop1): Directory bread(block 72) failed [ 149.400973][ T28] audit: type=1326 audit(1754025503.131:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1886 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ff98eb69 code=0x7ffc0000 [ 149.425171][ T1902] FAT-fs (loop1): Directory bread(block 73) failed [ 149.488535][ T1906] bridge0: port 4(vlan3) entered blocking state [ 149.491590][ T28] audit: type=1326 audit(1754025503.131:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1886 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f25ff98eb69 code=0x7ffc0000 [ 149.551659][ T28] audit: type=1326 audit(1754025503.131:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1886 comm="syz.4.445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25ff98eb69 code=0x7ffc0000 [ 149.556173][ T1906] bridge0: port 4(vlan3) entered disabled state [ 150.102244][ T43] kworker/u4:2: attempt to access beyond end of device [ 150.102244][ T43] loop1: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 150.147884][ T43] kworker/u4:2: attempt to access beyond end of device [ 150.147884][ T43] loop1: rw=1, sector=1864, nr_sectors = 11592 limit=256 [ 150.199487][ T43] kworker/u4:2: attempt to access beyond end of device [ 150.199487][ T43] loop1: rw=1, sector=13456, nr_sectors = 9448 limit=256 [ 150.433508][ T1918] device bridge0 entered promiscuous mode [ 150.440871][ T1920] loop0: detected capacity change from 0 to 256 [ 150.452450][ T1918] bridge0: port 4(macsec1) entered blocking state [ 150.458980][ T1918] bridge0: port 4(macsec1) entered disabled state [ 150.484983][ T1918] device bridge0 left promiscuous mode [ 150.556539][ T1920] FAT-fs (loop0): Directory bread(block 64) failed [ 150.568734][ T1920] FAT-fs (loop0): Directory bread(block 65) failed [ 150.583043][ T1920] FAT-fs (loop0): Directory bread(block 66) failed [ 150.597405][ T1920] FAT-fs (loop0): Directory bread(block 67) failed [ 150.635160][ T1920] FAT-fs (loop0): Directory bread(block 68) failed [ 150.636887][ T1922] loop1: detected capacity change from 0 to 40427 [ 150.652235][ T1922] F2FS-fs (loop1): fault_injection options not supported [ 150.660037][ T1922] F2FS-fs (loop1): invalid crc value [ 150.669539][ T1920] FAT-fs (loop0): Directory bread(block 69) failed [ 150.676246][ T1920] FAT-fs (loop0): Directory bread(block 70) failed [ 150.683428][ T1920] FAT-fs (loop0): Directory bread(block 71) failed [ 150.690156][ T1920] FAT-fs (loop0): Directory bread(block 72) failed [ 150.697326][ T1920] FAT-fs (loop0): Directory bread(block 73) failed [ 150.697354][ T1922] F2FS-fs (loop1): Found nat_bits in checkpoint [ 150.741886][ T1922] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 152.008461][ T1939] bridge0: port 3(vlan2) entered blocking state [ 152.025597][ T1939] bridge0: port 3(vlan2) entered disabled state [ 152.331094][ T1952] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 154.722789][ T1972] device bridge0 entered promiscuous mode [ 154.782944][ T1972] bridge0: port 3(macsec1) entered blocking state [ 154.845135][ T1972] bridge0: port 3(macsec1) entered disabled state [ 155.429699][ T1962] xt_hashlimit: size too large, truncated to 1048576 [ 155.503911][ T1972] device bridge0 left promiscuous mode [ 156.223476][ T1979] loop3: detected capacity change from 0 to 512 [ 156.334144][ T1979] EXT4-fs: Ignoring removed mblk_io_submit option [ 156.661964][ T1979] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 156.703438][ T1979] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 156.713057][ T1979] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 156.724433][ T1979] System zones: 0-2, 18-18, 34-34 [ 156.730861][ T1979] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.472: iget: bad i_size value: 360287970189639680 [ 156.744326][ T1979] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.472: couldn't read orphan inode 15 (err -117) [ 156.756790][ T1979] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 156.794155][ T1979] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.472: iget: bad i_size value: 360287970189639680 [ 156.808255][ T1979] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.472: iget: bad i_size value: 360287970189639680 [ 157.265430][ T283] EXT4-fs (loop3): unmounting filesystem. [ 157.634917][ T2001] device veth1_macvtap left promiscuous mode [ 158.537729][ T2007] device bridge0 entered promiscuous mode [ 158.557162][ T2007] bridge0: port 3(macsec1) entered blocking state [ 158.586959][ T2007] bridge0: port 3(macsec1) entered disabled state [ 158.602772][ T2007] device bridge0 left promiscuous mode [ 158.748999][ T2016] loop3: detected capacity change from 0 to 256 [ 158.815520][ T2016] FAT-fs (loop3): Directory bread(block 64) failed [ 158.831882][ T2016] FAT-fs (loop3): Directory bread(block 65) failed [ 158.838478][ T2016] FAT-fs (loop3): Directory bread(block 66) failed [ 158.861885][ T2016] FAT-fs (loop3): Directory bread(block 67) failed [ 158.874141][ T2016] FAT-fs (loop3): Directory bread(block 68) failed [ 158.891606][ T2016] FAT-fs (loop3): Directory bread(block 69) failed [ 158.909100][ T2016] FAT-fs (loop3): Directory bread(block 70) failed [ 158.925517][ T2016] FAT-fs (loop3): Directory bread(block 71) failed [ 158.940697][ T2016] FAT-fs (loop3): Directory bread(block 72) failed [ 158.954862][ T2016] FAT-fs (loop3): Directory bread(block 73) failed [ 159.531292][ T2025] loop0: detected capacity change from 0 to 512 [ 159.562723][ T2025] EXT4-fs: Ignoring removed mblk_io_submit option [ 159.586164][ T384] kworker/u4:6: attempt to access beyond end of device [ 159.586164][ T384] loop3: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 159.592217][ T2025] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.634159][ T384] kworker/u4:6: attempt to access beyond end of device [ 159.634159][ T384] loop3: rw=1, sector=1864, nr_sectors = 4952 limit=256 [ 159.680117][ T384] kworker/u4:6: attempt to access beyond end of device [ 159.680117][ T384] loop3: rw=1, sector=6816, nr_sectors = 13352 limit=256 [ 159.750184][ T2025] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 159.761114][ T384] kworker/u4:6: attempt to access beyond end of device [ 159.761114][ T384] loop3: rw=1, sector=20168, nr_sectors = 8688 limit=256 [ 159.791677][ T2025] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 159.818781][ T384] kworker/u4:6: attempt to access beyond end of device [ 159.818781][ T384] loop3: rw=1, sector=28856, nr_sectors = 2304 limit=256 [ 159.845739][ T384] kworker/u4:6: attempt to access beyond end of device [ 159.845739][ T384] loop3: rw=1, sector=31160, nr_sectors = 2640 limit=256 [ 160.113638][ T2025] System zones: 0-2, 18-18, 34-34 [ 160.126152][ T2025] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.485: iget: bad i_size value: 360287970189639680 [ 160.149495][ T2025] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.485: couldn't read orphan inode 15 (err -117) [ 160.176630][ T2025] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 160.286867][ T2025] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.485: iget: bad i_size value: 360287970189639680 [ 160.301565][ T2025] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.485: iget: bad i_size value: 360287970189639680 [ 160.441403][ T285] EXT4-fs (loop0): unmounting filesystem. [ 160.520125][ T2047] loop3: detected capacity change from 0 to 8192 [ 160.796553][ T2055] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 161.388514][ T2065] loop4: detected capacity change from 0 to 256 [ 161.442157][ T2065] FAT-fs (loop4): Directory bread(block 64) failed [ 161.459258][ T2065] FAT-fs (loop4): Directory bread(block 65) failed [ 161.471908][ T2065] FAT-fs (loop4): Directory bread(block 66) failed [ 161.497550][ T2065] FAT-fs (loop4): Directory bread(block 67) failed [ 161.531916][ T2065] FAT-fs (loop4): Directory bread(block 68) failed [ 161.551886][ T2065] FAT-fs (loop4): Directory bread(block 69) failed [ 161.558478][ T2065] FAT-fs (loop4): Directory bread(block 70) failed [ 161.591829][ T2065] FAT-fs (loop4): Directory bread(block 71) failed [ 161.599492][ T2065] FAT-fs (loop4): Directory bread(block 72) failed [ 161.621833][ T2065] FAT-fs (loop4): Directory bread(block 73) failed [ 163.277553][ T758] kworker/u4:7: attempt to access beyond end of device [ 163.277553][ T758] loop4: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 163.357781][ T758] kworker/u4:7: attempt to access beyond end of device [ 163.357781][ T758] loop4: rw=1, sector=1864, nr_sectors = 2968 limit=256 [ 163.374398][ T758] kworker/u4:7: attempt to access beyond end of device [ 163.374398][ T758] loop4: rw=1, sector=4832, nr_sectors = 2096 limit=256 [ 163.390059][ T758] kworker/u4:7: attempt to access beyond end of device [ 163.390059][ T758] loop4: rw=1, sector=6928, nr_sectors = 2200 limit=256 [ 163.705758][ T2102] loop3: detected capacity change from 0 to 512 [ 163.813741][ T2102] EXT4-fs: Ignoring removed mblk_io_submit option [ 163.831192][ T2102] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 163.900945][ T2102] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 164.003018][ T2102] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 164.014798][ T2102] System zones: 0-2, 18-18, 34-34 [ 164.021258][ T2102] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.511: iget: bad i_size value: 360287970189639680 [ 164.036707][ T2102] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.511: couldn't read orphan inode 15 (err -117) [ 164.050492][ T2102] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 164.074073][ T2102] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.511: iget: bad i_size value: 360287970189639680 [ 164.087240][ T2102] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.511: iget: bad i_size value: 360287970189639680 [ 164.108058][ T283] EXT4-fs (loop3): unmounting filesystem. [ 164.167122][ T2113] loop3: detected capacity change from 0 to 8192 [ 164.237013][ T2119] loop1: detected capacity change from 0 to 8192 [ 165.867294][ T2144] loop3: detected capacity change from 0 to 256 [ 165.868908][ T2142] loop1: detected capacity change from 0 to 512 [ 165.932424][ T2142] EXT4-fs: Ignoring removed mblk_io_submit option [ 165.932599][ T2144] FAT-fs (loop3): Directory bread(block 64) failed [ 165.970074][ T2142] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 165.987252][ T2144] FAT-fs (loop3): Directory bread(block 65) failed [ 166.005422][ T2144] FAT-fs (loop3): Directory bread(block 66) failed [ 166.024239][ T2144] FAT-fs (loop3): Directory bread(block 67) failed [ 166.032433][ T2142] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 166.038723][ T2144] FAT-fs (loop3): Directory bread(block 68) failed [ 166.049002][ T2142] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 166.057900][ T2144] FAT-fs (loop3): Directory bread(block 69) failed [ 166.071890][ T2142] System zones: 0-2, 18-18, 34-34 [ 166.077565][ T2144] FAT-fs (loop3): Directory bread(block 70) failed [ 166.084473][ T2144] FAT-fs (loop3): Directory bread(block 71) failed [ 166.091715][ T2142] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.524: iget: bad i_size value: 360287970189639680 [ 166.105610][ T2144] FAT-fs (loop3): Directory bread(block 72) failed [ 166.112404][ T2142] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.524: couldn't read orphan inode 15 (err -117) [ 166.124358][ T2144] FAT-fs (loop3): Directory bread(block 73) failed [ 166.132159][ T2142] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 166.205694][ T2142] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.524: iget: bad i_size value: 360287970189639680 [ 166.251101][ T2149] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.524: iget: bad i_size value: 360287970189639680 [ 166.319985][ T284] EXT4-fs (loop1): unmounting filesystem. [ 166.483224][ T2157] bridge0: port 3(vlan2) entered blocking state [ 166.512241][ T2157] bridge0: port 3(vlan2) entered disabled state [ 166.738841][ T2163] loop4: detected capacity change from 0 to 40427 [ 166.746068][ T2163] F2FS-fs (loop4): fault_injection options not supported [ 166.753916][ T2163] F2FS-fs (loop4): invalid crc value [ 166.793329][ T2163] F2FS-fs (loop4): Found nat_bits in checkpoint [ 166.841863][ T2163] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 166.975699][ T2178] device bridge0 entered promiscuous mode [ 166.983461][ T2176] loop2: detected capacity change from 0 to 8192 [ 167.103276][ T2178] bridge0: port 3(macsec1) entered blocking state [ 167.166322][ T2178] bridge0: port 3(macsec1) entered disabled state [ 167.297680][ T2178] device bridge0 left promiscuous mode [ 167.695689][ T2182] xt_hashlimit: size too large, truncated to 1048576 [ 169.173153][ T2202] loop3: detected capacity change from 0 to 8192 [ 169.387476][ T2205] xt_hashlimit: size too large, truncated to 1048576 [ 170.576477][ T2211] loop4: detected capacity change from 0 to 256 [ 170.597606][ T2211] FAT-fs (loop4): Directory bread(block 64) failed [ 170.646440][ T2211] FAT-fs (loop4): Directory bread(block 65) failed [ 170.660397][ T2211] FAT-fs (loop4): Directory bread(block 66) failed [ 170.670303][ T2211] FAT-fs (loop4): Directory bread(block 67) failed [ 170.677065][ T2211] FAT-fs (loop4): Directory bread(block 68) failed [ 170.684172][ T2211] FAT-fs (loop4): Directory bread(block 69) failed [ 170.690778][ T2211] FAT-fs (loop4): Directory bread(block 70) failed [ 170.697774][ T2211] FAT-fs (loop4): Directory bread(block 71) failed [ 170.704603][ T2211] FAT-fs (loop4): Directory bread(block 72) failed [ 170.711355][ T2211] FAT-fs (loop4): Directory bread(block 73) failed [ 170.763644][ T2218] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 171.481663][ T2228] loop2: detected capacity change from 0 to 8192 [ 171.498074][ T758] bio_check_eod: 3 callbacks suppressed [ 171.498087][ T758] kworker/u4:7: attempt to access beyond end of device [ 171.498087][ T758] loop4: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 171.521392][ T758] kworker/u4:7: attempt to access beyond end of device [ 171.521392][ T758] loop4: rw=1, sector=1864, nr_sectors = 6264 limit=256 [ 171.541036][ T758] kworker/u4:7: attempt to access beyond end of device [ 171.541036][ T758] loop4: rw=1, sector=8128, nr_sectors = 6424 limit=256 [ 171.587422][ T758] kworker/u4:7: attempt to access beyond end of device [ 171.587422][ T758] loop4: rw=1, sector=14552, nr_sectors = 18448 limit=256 [ 171.617449][ T758] kworker/u4:7: attempt to access beyond end of device [ 171.617449][ T758] loop4: rw=1, sector=33000, nr_sectors = 800 limit=256 [ 172.205161][ T2237] loop4: detected capacity change from 0 to 40427 [ 172.213126][ T2237] F2FS-fs (loop4): fault_injection options not supported [ 172.221014][ T2237] F2FS-fs (loop4): invalid crc value [ 172.300135][ T2237] F2FS-fs (loop4): Found nat_bits in checkpoint [ 172.352244][ T2237] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 174.012656][ T2262] loop2: detected capacity change from 0 to 256 [ 174.037838][ T2262] FAT-fs (loop2): Directory bread(block 64) failed [ 174.360948][ T2262] FAT-fs (loop2): Directory bread(block 65) failed [ 174.389516][ T2262] FAT-fs (loop2): Directory bread(block 66) failed [ 174.425324][ T2262] FAT-fs (loop2): Directory bread(block 67) failed [ 174.433910][ T2262] FAT-fs (loop2): Directory bread(block 68) failed [ 174.440525][ T2262] FAT-fs (loop2): Directory bread(block 69) failed [ 174.450525][ T2265] loop4: detected capacity change from 0 to 256 [ 174.456952][ T2262] FAT-fs (loop2): Directory bread(block 70) failed [ 174.480264][ T2262] FAT-fs (loop2): Directory bread(block 71) failed [ 174.492940][ T2265] FAT-fs (loop4): Directory bread(block 64) failed [ 174.499665][ T2262] FAT-fs (loop2): Directory bread(block 72) failed [ 174.507159][ T2265] FAT-fs (loop4): Directory bread(block 65) failed [ 174.514108][ T2262] FAT-fs (loop2): Directory bread(block 73) failed [ 174.522546][ T2265] FAT-fs (loop4): Directory bread(block 66) failed [ 174.549944][ T2265] FAT-fs (loop4): Directory bread(block 67) failed [ 174.556765][ T2265] FAT-fs (loop4): Directory bread(block 68) failed [ 174.563619][ T2265] FAT-fs (loop4): Directory bread(block 69) failed [ 174.570198][ T2265] FAT-fs (loop4): Directory bread(block 70) failed [ 174.577607][ T2265] FAT-fs (loop4): Directory bread(block 71) failed [ 174.584370][ T2265] FAT-fs (loop4): Directory bread(block 72) failed [ 174.591366][ T2265] FAT-fs (loop4): Directory bread(block 73) failed [ 174.934095][ T2271] bridge0: port 4(vlan3) entered blocking state [ 174.940397][ T2271] bridge0: port 4(vlan3) entered disabled state [ 175.036050][ T2273] bridge0: port 3(vlan2) entered blocking state [ 175.070592][ T2273] bridge0: port 3(vlan2) entered disabled state [ 175.728259][ T2279] device bridge0 entered promiscuous mode [ 175.742103][ T2279] bridge0: port 4(macsec1) entered blocking state [ 175.756290][ T2279] bridge0: port 4(macsec1) entered disabled state [ 175.771556][ T2279] device bridge0 left promiscuous mode [ 175.903221][ T2282] device bridge0 entered promiscuous mode [ 175.919430][ T2282] bridge0: port 4(macsec1) entered blocking state [ 175.949303][ T2282] bridge0: port 4(macsec1) entered disabled state [ 175.957673][ T2282] device bridge0 left promiscuous mode [ 175.997112][ T2286] loop3: detected capacity change from 0 to 256 [ 176.026319][ T2286] FAT-fs (loop3): Directory bread(block 64) failed [ 176.034949][ T2286] FAT-fs (loop3): Directory bread(block 65) failed [ 176.041572][ T2286] FAT-fs (loop3): Directory bread(block 66) failed [ 176.060663][ T2286] FAT-fs (loop3): Directory bread(block 67) failed [ 176.067553][ T2286] FAT-fs (loop3): Directory bread(block 68) failed [ 176.074742][ T2286] FAT-fs (loop3): Directory bread(block 69) failed [ 176.083198][ T2286] FAT-fs (loop3): Directory bread(block 70) failed [ 176.090068][ T2286] FAT-fs (loop3): Directory bread(block 71) failed [ 176.099382][ T2288] loop4: detected capacity change from 0 to 512 [ 176.116982][ T2286] FAT-fs (loop3): Directory bread(block 72) failed [ 176.140847][ T2288] EXT4-fs: Ignoring removed mblk_io_submit option [ 176.154111][ T2286] FAT-fs (loop3): Directory bread(block 73) failed [ 176.161300][ T2288] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 176.202645][ T2288] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 176.216026][ T2288] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 176.229690][ T2288] System zones: 0-2, 18-18, 34-34 [ 176.245759][ T2288] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.565: iget: bad i_size value: 360287970189639680 [ 176.272173][ T2288] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.565: couldn't read orphan inode 15 (err -117) [ 176.292069][ T2288] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 176.393272][ T2288] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.565: iget: bad i_size value: 360287970189639680 [ 176.417023][ T2288] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.565: iget: bad i_size value: 360287970189639680 [ 176.524658][ T2299] bridge0: port 3(vlan2) entered blocking state [ 176.608019][ T2299] bridge0: port 3(vlan2) entered disabled state [ 177.022752][ T287] EXT4-fs (loop4): unmounting filesystem. [ 180.401169][ T2340] xt_hashlimit: size too large, truncated to 1048576 [ 181.507882][ T2343] overlayfs: overlapping lowerdir path [ 181.733008][ T2360] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 188.117441][ T2388] xt_hashlimit: size too large, truncated to 1048576 [ 190.455025][ T2396] 9pnet_fd: Insufficient options for proto=fd [ 190.484764][ T2395] loop1: detected capacity change from 0 to 256 [ 190.708377][ T2395] FAT-fs (loop1): Directory bread(block 64) failed [ 190.793320][ T2395] FAT-fs (loop1): Directory bread(block 65) failed [ 190.861237][ T2395] FAT-fs (loop1): Directory bread(block 66) failed [ 190.928971][ T2395] FAT-fs (loop1): Directory bread(block 67) failed [ 190.935669][ T2395] FAT-fs (loop1): Directory bread(block 68) failed [ 190.942291][ T2395] FAT-fs (loop1): Directory bread(block 69) failed [ 190.948923][ T2395] FAT-fs (loop1): Directory bread(block 70) failed [ 190.955521][ T2395] FAT-fs (loop1): Directory bread(block 71) failed [ 190.962240][ T2395] FAT-fs (loop1): Directory bread(block 72) failed [ 190.968838][ T2395] FAT-fs (loop1): Directory bread(block 73) failed [ 193.965195][ T2425] device bridge0 entered promiscuous mode [ 194.020045][ T2425] bridge0: port 3(macsec1) entered blocking state [ 194.050617][ T369] kworker/u4:5: attempt to access beyond end of device [ 194.050617][ T369] loop1: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 194.193545][ T2425] bridge0: port 3(macsec1) entered disabled state [ 194.236482][ T369] kworker/u4:5: attempt to access beyond end of device [ 194.236482][ T369] loop1: rw=1, sector=1864, nr_sectors = 9896 limit=256 [ 194.250548][ T2425] device bridge0 left promiscuous mode [ 194.291117][ T2432] loop2: detected capacity change from 0 to 256 [ 194.299172][ T369] kworker/u4:5: attempt to access beyond end of device [ 194.299172][ T369] loop1: rw=1, sector=11760, nr_sectors = 664 limit=256 [ 194.348196][ T2432] FAT-fs (loop2): Directory bread(block 64) failed [ 194.360021][ T2432] FAT-fs (loop2): Directory bread(block 65) failed [ 194.370734][ T2432] FAT-fs (loop2): Directory bread(block 66) failed [ 194.377406][ T2432] FAT-fs (loop2): Directory bread(block 67) failed [ 194.384073][ T2432] FAT-fs (loop2): Directory bread(block 68) failed [ 194.393254][ T2432] FAT-fs (loop2): Directory bread(block 69) failed [ 194.399857][ T2432] FAT-fs (loop2): Directory bread(block 70) failed [ 194.407174][ T2432] FAT-fs (loop2): Directory bread(block 71) failed [ 194.413847][ T2432] FAT-fs (loop2): Directory bread(block 72) failed [ 194.420438][ T2432] FAT-fs (loop2): Directory bread(block 73) failed [ 194.498893][ T2440] loop3: detected capacity change from 0 to 8192 [ 194.505807][ T2434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'. [ 194.522189][ T2441] bridge0: port 3(vlan2) entered blocking state [ 194.535100][ T2441] bridge0: port 3(vlan2) entered disabled state [ 194.609391][ T2445] loop4: detected capacity change from 0 to 256 [ 194.667968][ T2445] FAT-fs (loop4): Directory bread(block 64) failed [ 194.681975][ T2445] FAT-fs (loop4): Directory bread(block 65) failed [ 194.694062][ T2445] FAT-fs (loop4): Directory bread(block 66) failed [ 194.719347][ T2445] FAT-fs (loop4): Directory bread(block 67) failed [ 194.738157][ T2445] FAT-fs (loop4): Directory bread(block 68) failed [ 194.756294][ T2445] FAT-fs (loop4): Directory bread(block 69) failed [ 194.767390][ T2445] FAT-fs (loop4): Directory bread(block 70) failed [ 194.784738][ T2445] FAT-fs (loop4): Directory bread(block 71) failed [ 194.792676][ T2445] FAT-fs (loop4): Directory bread(block 72) failed [ 194.800934][ T2445] FAT-fs (loop4): Directory bread(block 73) failed [ 194.925201][ T2452] overlayfs: overlapping lowerdir path [ 195.086385][ T2456] loop2: detected capacity change from 0 to 256 [ 195.138530][ T2456] FAT-fs (loop2): Directory bread(block 64) failed [ 195.153815][ T2456] FAT-fs (loop2): Directory bread(block 65) failed [ 195.160507][ T2456] FAT-fs (loop2): Directory bread(block 66) failed [ 195.167580][ T2456] FAT-fs (loop2): Directory bread(block 67) failed [ 195.183346][ T2456] FAT-fs (loop2): Directory bread(block 68) failed [ 195.199322][ T2456] FAT-fs (loop2): Directory bread(block 69) failed [ 195.207682][ T2456] FAT-fs (loop2): Directory bread(block 70) failed [ 195.214625][ T2456] FAT-fs (loop2): Directory bread(block 71) failed [ 195.229348][ T2456] FAT-fs (loop2): Directory bread(block 72) failed [ 195.238706][ T2456] FAT-fs (loop2): Directory bread(block 73) failed [ 196.634372][ T369] kworker/u4:5: attempt to access beyond end of device [ 196.634372][ T369] loop2: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 196.662916][ T369] kworker/u4:5: attempt to access beyond end of device [ 196.662916][ T369] loop2: rw=1, sector=1864, nr_sectors = 4000 limit=256 [ 196.678302][ T369] kworker/u4:5: attempt to access beyond end of device [ 196.678302][ T369] loop2: rw=1, sector=5864, nr_sectors = 288 limit=256 [ 196.758851][ T2468] loop0: detected capacity change from 0 to 512 [ 196.795381][ T758] kworker/u4:7: attempt to access beyond end of device [ 196.795381][ T758] loop4: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 196.814348][ T2468] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.828371][ T2472] 9pnet_fd: Insufficient options for proto=fd [ 196.834830][ T2468] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 196.840906][ T758] kworker/u4:7: attempt to access beyond end of device [ 196.840906][ T758] loop4: rw=1, sector=1864, nr_sectors = 5688 limit=256 [ 196.860052][ T2468] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 196.869282][ T2468] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 196.877537][ T2468] System zones: 0-2, 18-18, 34-34 [ 196.893039][ T2468] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.613: iget: bad i_size value: 360287970189639680 [ 196.928662][ T758] kworker/u4:7: attempt to access beyond end of device [ 196.928662][ T758] loop4: rw=1, sector=7552, nr_sectors = 2072 limit=256 [ 196.944679][ T758] kworker/u4:7: attempt to access beyond end of device [ 196.944679][ T758] loop4: rw=1, sector=9624, nr_sectors = 2696 limit=256 [ 196.955549][ T2477] loop1: detected capacity change from 0 to 256 [ 196.979751][ T2468] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.613: couldn't read orphan inode 15 (err -117) [ 196.991921][ T2468] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 197.038826][ T2477] FAT-fs (loop1): Directory bread(block 64) failed [ 197.058349][ T2477] FAT-fs (loop1): Directory bread(block 65) failed [ 197.078860][ T2477] FAT-fs (loop1): Directory bread(block 66) failed [ 197.125487][ T2468] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.613: iget: bad i_size value: 360287970189639680 [ 197.142191][ T2477] FAT-fs (loop1): Directory bread(block 67) failed [ 197.148872][ T2477] FAT-fs (loop1): Directory bread(block 68) failed [ 197.156073][ T2477] FAT-fs (loop1): Directory bread(block 69) failed [ 197.163232][ T2477] FAT-fs (loop1): Directory bread(block 70) failed [ 197.169459][ T2482] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.613: iget: bad i_size value: 360287970189639680 [ 197.170090][ T2477] FAT-fs (loop1): Directory bread(block 71) failed [ 197.190448][ T2477] FAT-fs (loop1): Directory bread(block 72) failed [ 197.197409][ T2477] FAT-fs (loop1): Directory bread(block 73) failed [ 197.204670][ T2480] overlayfs: overlapping lowerdir path [ 197.240932][ T285] EXT4-fs (loop0): unmounting filesystem. [ 197.405670][ T2489] loop0: detected capacity change from 0 to 40427 [ 197.414614][ T2489] F2FS-fs (loop0): fault_injection options not supported [ 197.424808][ T2489] F2FS-fs (loop0): invalid crc value [ 197.435333][ T2489] F2FS-fs (loop0): Found nat_bits in checkpoint [ 197.473758][ T2489] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 198.293434][ T2500] loop4: detected capacity change from 0 to 256 [ 198.314335][ T2498] overlayfs: overlapping lowerdir path [ 198.355660][ T2500] FAT-fs (loop4): Directory bread(block 64) failed [ 198.382528][ T2500] FAT-fs (loop4): Directory bread(block 65) failed [ 198.389199][ T2500] FAT-fs (loop4): Directory bread(block 66) failed [ 198.421885][ T2500] FAT-fs (loop4): Directory bread(block 67) failed [ 198.438639][ T2500] FAT-fs (loop4): Directory bread(block 68) failed [ 198.464447][ T2500] FAT-fs (loop4): Directory bread(block 69) failed [ 198.491330][ T2500] FAT-fs (loop4): Directory bread(block 70) failed [ 198.525322][ T2500] FAT-fs (loop4): Directory bread(block 71) failed [ 198.539163][ T2500] FAT-fs (loop4): Directory bread(block 72) failed [ 198.548065][ T2500] FAT-fs (loop4): Directory bread(block 73) failed [ 198.568117][ T2502] loop3: detected capacity change from 0 to 8192 [ 198.689245][ T2509] loop0: detected capacity change from 0 to 256 [ 198.920212][ T2509] FAT-fs (loop0): Directory bread(block 64) failed [ 198.967367][ T2509] FAT-fs (loop0): Directory bread(block 65) failed [ 198.974156][ T2509] FAT-fs (loop0): Directory bread(block 66) failed [ 198.980684][ T2509] FAT-fs (loop0): Directory bread(block 67) failed [ 198.987267][ T2509] FAT-fs (loop0): Directory bread(block 68) failed [ 198.993851][ T2509] FAT-fs (loop0): Directory bread(block 69) failed [ 199.000405][ T2509] FAT-fs (loop0): Directory bread(block 70) failed [ 199.006990][ T2509] FAT-fs (loop0): Directory bread(block 71) failed [ 199.013689][ T2509] FAT-fs (loop0): Directory bread(block 72) failed [ 199.022543][ T2509] FAT-fs (loop0): Directory bread(block 73) failed [ 199.145187][ T43] bio_check_eod: 12 callbacks suppressed [ 199.145204][ T43] kworker/u4:2: attempt to access beyond end of device [ 199.145204][ T43] loop4: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 199.167063][ T43] kworker/u4:2: attempt to access beyond end of device [ 199.167063][ T43] loop4: rw=1, sector=1864, nr_sectors = 3112 limit=256 [ 199.184550][ T43] kworker/u4:2: attempt to access beyond end of device [ 199.184550][ T43] loop4: rw=1, sector=4976, nr_sectors = 4392 limit=256 [ 199.202020][ T43] kworker/u4:2: attempt to access beyond end of device [ 199.202020][ T43] loop4: rw=1, sector=9368, nr_sectors = 3192 limit=256 [ 199.219397][ T43] kworker/u4:2: attempt to access beyond end of device [ 199.219397][ T43] loop4: rw=1, sector=12560, nr_sectors = 2056 limit=256 [ 199.235754][ T43] kworker/u4:2: attempt to access beyond end of device [ 199.235754][ T43] loop4: rw=1, sector=14616, nr_sectors = 2776 limit=256 [ 199.366471][ T2520] loop3: detected capacity change from 0 to 8192 [ 199.419527][ T2522] bridge0: port 3(vlan2) entered blocking state [ 199.425852][ T2522] bridge0: port 3(vlan2) entered disabled state [ 199.545698][ T2529] loop1: detected capacity change from 0 to 512 [ 199.553727][ T2529] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.562533][ T2529] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.581502][ T2529] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 199.590910][ T2529] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 199.601070][ T2529] System zones: 0-2, 18-18, 34-34 [ 199.607104][ T2529] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.630: iget: bad i_size value: 360287970189639680 [ 199.620533][ T2529] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.630: couldn't read orphan inode 15 (err -117) [ 199.632888][ T2529] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 199.703679][ T2533] device bridge0 entered promiscuous mode [ 199.716928][ T2533] bridge0: port 3(macsec1) entered blocking state [ 199.724391][ T2533] bridge0: port 3(macsec1) entered disabled state [ 199.724522][ T2529] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.630: iget: bad i_size value: 360287970189639680 [ 199.744064][ T2533] device bridge0 left promiscuous mode [ 199.770608][ T2529] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.630: iget: bad i_size value: 360287970189639680 [ 199.889295][ T284] EXT4-fs (loop1): unmounting filesystem. [ 199.968191][ T2541] overlayfs: overlapping lowerdir path [ 200.129036][ T2547] loop3: detected capacity change from 0 to 256 [ 200.161062][ T2544] loop1: detected capacity change from 0 to 40427 [ 200.168883][ T2544] F2FS-fs (loop1): fault_injection options not supported [ 200.176689][ T2544] F2FS-fs (loop1): invalid crc value [ 200.197094][ T2547] FAT-fs (loop3): Directory bread(block 64) failed [ 200.205947][ T2550] 9pnet_fd: Insufficient options for proto=fd [ 200.212842][ T2544] F2FS-fs (loop1): Found nat_bits in checkpoint [ 200.228427][ T2547] FAT-fs (loop3): Directory bread(block 65) failed [ 200.242294][ T2547] FAT-fs (loop3): Directory bread(block 66) failed [ 200.256700][ T2544] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 200.259071][ T2547] FAT-fs (loop3): Directory bread(block 67) failed [ 200.321034][ T2547] FAT-fs (loop3): Directory bread(block 68) failed [ 200.335290][ T2547] FAT-fs (loop3): Directory bread(block 69) failed [ 200.375793][ T2547] FAT-fs (loop3): Directory bread(block 70) failed [ 200.383599][ T2547] FAT-fs (loop3): Directory bread(block 71) failed [ 200.390283][ T2547] FAT-fs (loop3): Directory bread(block 72) failed [ 200.392129][ T2557] loop2: detected capacity change from 0 to 512 [ 200.397138][ T2547] FAT-fs (loop3): Directory bread(block 73) failed [ 200.494394][ T2557] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.579733][ T2557] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 200.810879][ T2557] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 201.008615][ T2557] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 201.101386][ T2557] System zones: 0-2, 18-18, 34-34 [ 201.130908][ T2557] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.639: iget: bad i_size value: 360287970189639680 [ 201.476083][ T2557] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.639: couldn't read orphan inode 15 (err -117) [ 201.511909][ T2557] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 201.638060][ T2557] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.639: iget: bad i_size value: 360287970189639680 [ 201.667465][ T2557] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.639: iget: bad i_size value: 360287970189639680 [ 201.728262][ T2569] 9pnet_fd: Insufficient options for proto=fd [ 201.875776][ T286] EXT4-fs (loop2): unmounting filesystem. [ 204.988900][ T2593] 9pnet_fd: Insufficient options for proto=fd [ 205.191863][ T2590] overlayfs: overlapping lowerdir path [ 207.346845][ T2616] 9pnet_fd: Insufficient options for proto=fd [ 207.354144][ T2618] loop0: detected capacity change from 0 to 256 [ 207.464233][ T2618] FAT-fs (loop0): Directory bread(block 64) failed [ 207.471060][ T2618] FAT-fs (loop0): Directory bread(block 65) failed [ 207.477852][ T2618] FAT-fs (loop0): Directory bread(block 66) failed [ 207.513293][ T2618] FAT-fs (loop0): Directory bread(block 67) failed [ 207.520207][ T2618] FAT-fs (loop0): Directory bread(block 68) failed [ 208.157108][ T2618] FAT-fs (loop0): Directory bread(block 69) failed [ 208.227655][ T2618] FAT-fs (loop0): Directory bread(block 70) failed [ 208.320582][ T2618] FAT-fs (loop0): Directory bread(block 71) failed [ 208.330071][ T2618] FAT-fs (loop0): Directory bread(block 72) failed [ 208.336771][ T2618] FAT-fs (loop0): Directory bread(block 73) failed [ 209.952413][ T2638] 9pnet_fd: Insufficient options for proto=fd [ 210.162581][ T2643] xt_hashlimit: size too large, truncated to 1048576 [ 211.366400][ T2644] overlayfs: overlapping lowerdir path [ 211.401916][ T2654] loop4: detected capacity change from 0 to 256 [ 211.484405][ T2654] FAT-fs (loop4): Directory bread(block 64) failed [ 211.517667][ T2654] FAT-fs (loop4): Directory bread(block 65) failed [ 211.637126][ T2654] FAT-fs (loop4): Directory bread(block 66) failed [ 211.648363][ T2654] FAT-fs (loop4): Directory bread(block 67) failed [ 211.655197][ T2654] FAT-fs (loop4): Directory bread(block 68) failed [ 211.662036][ T2654] FAT-fs (loop4): Directory bread(block 69) failed [ 211.668675][ T2654] FAT-fs (loop4): Directory bread(block 70) failed [ 211.675283][ T2654] FAT-fs (loop4): Directory bread(block 71) failed [ 211.687047][ T2654] FAT-fs (loop4): Directory bread(block 72) failed [ 211.762059][ T2654] FAT-fs (loop4): Directory bread(block 73) failed [ 212.212916][ T2665] bridge0: port 4(vlan3) entered blocking state [ 212.226450][ T2665] bridge0: port 4(vlan3) entered disabled state [ 212.581457][ T2673] loop4: detected capacity change from 0 to 8192 [ 212.712502][ T2678] 9pnet_fd: Insufficient options for proto=fd [ 212.914121][ T2680] loop1: detected capacity change from 0 to 256 [ 212.925571][ T2680] FAT-fs (loop1): Directory bread(block 64) failed [ 212.939543][ T2680] FAT-fs (loop1): Directory bread(block 65) failed [ 212.954012][ T2680] FAT-fs (loop1): Directory bread(block 66) failed [ 212.960726][ T2680] FAT-fs (loop1): Directory bread(block 67) failed [ 212.968053][ T2680] FAT-fs (loop1): Directory bread(block 68) failed [ 212.975307][ T2680] FAT-fs (loop1): Directory bread(block 69) failed [ 212.981984][ T2680] FAT-fs (loop1): Directory bread(block 70) failed [ 212.989032][ T2680] FAT-fs (loop1): Directory bread(block 71) failed [ 213.037216][ T2680] FAT-fs (loop1): Directory bread(block 72) failed [ 213.044499][ T2680] FAT-fs (loop1): Directory bread(block 73) failed [ 213.048026][ T2683] device bridge0 entered promiscuous mode [ 213.075176][ T2683] bridge0: port 3(macsec1) entered blocking state [ 213.089092][ T2683] bridge0: port 3(macsec1) entered disabled state [ 213.105034][ T2683] device bridge0 left promiscuous mode [ 213.401930][ T2695] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 213.659621][ T2694] overlayfs: overlapping lowerdir path [ 214.366532][ T2708] loop3: detected capacity change from 0 to 256 [ 214.392588][ T2708] FAT-fs (loop3): Directory bread(block 64) failed [ 214.399289][ T2708] FAT-fs (loop3): Directory bread(block 65) failed [ 214.405950][ T2708] FAT-fs (loop3): Directory bread(block 66) failed [ 214.412959][ T2708] FAT-fs (loop3): Directory bread(block 67) failed [ 214.425326][ T2708] FAT-fs (loop3): Directory bread(block 68) failed [ 214.437177][ T2708] FAT-fs (loop3): Directory bread(block 69) failed [ 214.452473][ T2708] FAT-fs (loop3): Directory bread(block 70) failed [ 214.459071][ T2708] FAT-fs (loop3): Directory bread(block 71) failed [ 214.465930][ T2708] FAT-fs (loop3): Directory bread(block 72) failed [ 214.472860][ T2708] FAT-fs (loop3): Directory bread(block 73) failed [ 214.487274][ T2712] 9pnet_fd: Insufficient options for proto=fd [ 214.657389][ T2721] device bridge0 entered promiscuous mode [ 214.665630][ T2721] bridge0: port 3(macsec1) entered blocking state [ 214.672280][ T2721] bridge0: port 3(macsec1) entered disabled state [ 214.684180][ T2721] device bridge0 left promiscuous mode [ 214.757330][ T2722] xt_hashlimit: size too large, truncated to 1048576 [ 217.195982][ T2724] bridge0: port 3(vlan2) entered blocking state [ 217.435213][ T2724] bridge0: port 3(vlan2) entered disabled state [ 217.612344][ T2727] device bridge0 entered promiscuous mode [ 217.680326][ T2727] bridge0: port 3(macsec1) entered blocking state [ 217.739998][ T2727] bridge0: port 3(macsec1) entered disabled state [ 217.926971][ T2727] device bridge0 left promiscuous mode [ 218.433086][ T2744] bridge0: port 3(vlan2) entered blocking state [ 218.439497][ T2744] bridge0: port 3(vlan2) entered disabled state [ 218.787433][ T2750] device bridge0 entered promiscuous mode [ 218.802663][ T2750] bridge0: port 3(macsec1) entered blocking state [ 218.809131][ T2750] bridge0: port 3(macsec1) entered disabled state [ 218.816561][ T2750] device bridge0 left promiscuous mode [ 218.825946][ T2754] 9pnet_fd: Insufficient options for proto=fd [ 219.139870][ T2760] 9pnet_fd: Insufficient options for proto=fd [ 219.187248][ T2762] device bridge0 entered promiscuous mode [ 219.196128][ T2758] loop4: detected capacity change from 0 to 8192 [ 219.203239][ T2762] bridge0: port 3(macsec1) entered blocking state [ 219.209893][ T2762] bridge0: port 3(macsec1) entered disabled state [ 219.220633][ T2762] device bridge0 left promiscuous mode [ 220.640822][ T2782] loop3: detected capacity change from 0 to 512 [ 220.667864][ T2782] EXT4-fs: Ignoring removed mblk_io_submit option [ 220.690206][ T2782] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 220.706599][ T2782] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 220.762013][ T2782] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 220.791979][ T2782] System zones: 0-2, 18-18, 34-34 [ 220.965710][ T2782] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.709: iget: bad i_size value: 360287970189639680 [ 221.047717][ T2782] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.709: couldn't read orphan inode 15 (err -117) [ 221.070209][ T2782] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 221.083944][ T2782] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.709: iget: bad i_size value: 360287970189639680 [ 221.098221][ T2782] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.709: iget: bad i_size value: 360287970189639680 [ 221.258723][ T283] EXT4-fs (loop3): unmounting filesystem. [ 221.275502][ T2794] loop3: detected capacity change from 0 to 256 [ 221.299315][ T2794] FAT-fs (loop3): Directory bread(block 64) failed [ 221.309417][ T2794] FAT-fs (loop3): Directory bread(block 65) failed [ 221.400057][ T2796] xt_hashlimit: size too large, truncated to 1048576 [ 222.248254][ T2794] FAT-fs (loop3): Directory bread(block 66) failed [ 222.255843][ T2794] FAT-fs (loop3): Directory bread(block 67) failed [ 222.324076][ T2794] FAT-fs (loop3): Directory bread(block 68) failed [ 222.331879][ T2794] FAT-fs (loop3): Directory bread(block 69) failed [ 222.338499][ T2794] FAT-fs (loop3): Directory bread(block 70) failed [ 222.347055][ T2794] FAT-fs (loop3): Directory bread(block 71) failed [ 222.353261][ T2799] 9pnet_fd: Insufficient options for proto=fd [ 222.353700][ T2794] FAT-fs (loop3): Directory bread(block 72) failed [ 222.551939][ T2794] FAT-fs (loop3): Directory bread(block 73) failed [ 222.630361][ T2801] loop2: detected capacity change from 0 to 256 [ 222.668478][ T2801] FAT-fs (loop2): Directory bread(block 64) failed [ 222.682231][ T2801] FAT-fs (loop2): Directory bread(block 65) failed [ 222.694816][ T2801] FAT-fs (loop2): Directory bread(block 66) failed [ 222.706500][ T2801] FAT-fs (loop2): Directory bread(block 67) failed [ 222.713258][ T2801] FAT-fs (loop2): Directory bread(block 68) failed [ 222.741833][ T2801] FAT-fs (loop2): Directory bread(block 69) failed [ 222.758655][ T2801] FAT-fs (loop2): Directory bread(block 70) failed [ 222.772217][ T2801] FAT-fs (loop2): Directory bread(block 71) failed [ 222.788388][ T2801] FAT-fs (loop2): Directory bread(block 72) failed [ 222.803209][ T2801] FAT-fs (loop2): Directory bread(block 73) failed [ 223.252060][ T2812] bridge0: port 3(vlan2) entered blocking state [ 223.281050][ T2812] bridge0: port 3(vlan2) entered disabled state [ 223.441640][ T758] kworker/u4:7: attempt to access beyond end of device [ 223.441640][ T758] loop2: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 223.476346][ T758] kworker/u4:7: attempt to access beyond end of device [ 223.476346][ T758] loop2: rw=1, sector=1864, nr_sectors = 31936 limit=256 [ 223.689366][ T2817] xt_hashlimit: size too large, truncated to 1048576 [ 226.805391][ T2831] loop0: detected capacity change from 0 to 512 [ 226.814737][ T2831] EXT4-fs: Ignoring removed mblk_io_submit option [ 226.828351][ T2831] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 226.838978][ T2831] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 226.848169][ T2831] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 226.856362][ T2831] System zones: 0-2, 18-18, 34-34 [ 226.862481][ T2831] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.722: iget: bad i_size value: 360287970189639680 [ 226.875692][ T2831] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.722: couldn't read orphan inode 15 (err -117) [ 227.284360][ T2831] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 227.321693][ T2831] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.722: iget: bad i_size value: 360287970189639680 [ 227.335092][ T2831] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.722: iget: bad i_size value: 360287970189639680 [ 228.677810][ T2846] xt_hashlimit: size too large, truncated to 1048576 [ 229.816497][ T285] EXT4-fs (loop0): unmounting filesystem. [ 229.871090][ T2856] loop0: detected capacity change from 0 to 256 [ 229.898288][ T2856] FAT-fs (loop0): Directory bread(block 64) failed [ 229.991389][ T2859] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 230.948202][ T2856] FAT-fs (loop0): Directory bread(block 65) failed [ 230.969308][ T2856] FAT-fs (loop0): Directory bread(block 66) failed [ 231.110693][ T2856] FAT-fs (loop0): Directory bread(block 67) failed [ 231.282222][ T2856] FAT-fs (loop0): Directory bread(block 68) failed [ 231.288812][ T2856] FAT-fs (loop0): Directory bread(block 69) failed [ 231.295432][ T2856] FAT-fs (loop0): Directory bread(block 70) failed [ 231.302024][ T2856] FAT-fs (loop0): Directory bread(block 71) failed [ 231.308608][ T2856] FAT-fs (loop0): Directory bread(block 72) failed [ 231.327813][ T2856] FAT-fs (loop0): Directory bread(block 73) failed [ 231.341117][ T2864] loop1: detected capacity change from 0 to 512 [ 231.349240][ T2864] EXT4-fs: Ignoring removed mblk_io_submit option [ 231.379744][ T2865] loop2: detected capacity change from 0 to 8192 [ 231.382757][ T2864] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 231.437379][ T2864] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 231.452602][ T2864] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 231.460669][ T2864] System zones: 0-2, 18-18, 34-34 [ 231.492009][ T2864] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.730: iget: bad i_size value: 360287970189639680 [ 231.565188][ T2864] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.730: couldn't read orphan inode 15 (err -117) [ 231.577335][ T2864] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 231.620308][ T2864] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.730: iget: bad i_size value: 360287970189639680 [ 231.641180][ T2864] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.730: iget: bad i_size value: 360287970189639680 [ 231.916502][ T2885] bridge0: port 3(vlan2) entered blocking state [ 231.931956][ T2885] bridge0: port 3(vlan2) entered disabled state [ 232.049642][ T284] EXT4-fs (loop1): unmounting filesystem. [ 232.595650][ T2899] loop3: detected capacity change from 0 to 512 [ 232.607535][ T2899] EXT4-fs: Ignoring removed mblk_io_submit option [ 232.691425][ T2899] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 232.858754][ T2907] loop2: detected capacity change from 0 to 40427 [ 232.872231][ T2907] F2FS-fs (loop2): fault_injection options not supported [ 232.890714][ T2907] F2FS-fs (loop2): invalid crc value [ 232.923057][ T2899] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 233.173301][ T2899] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 233.181711][ T2907] F2FS-fs (loop2): Found nat_bits in checkpoint [ 233.191989][ T2899] System zones: 0-2, 18-18, 34-34 [ 233.220966][ T2899] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.739: iget: bad i_size value: 360287970189639680 [ 233.242112][ T2899] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.739: couldn't read orphan inode 15 (err -117) [ 233.254011][ T2907] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 233.361995][ T2899] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 233.485308][ T2899] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.739: iget: bad i_size value: 360287970189639680 [ 233.559542][ T2922] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.739: iget: bad i_size value: 360287970189639680 [ 234.234666][ T283] EXT4-fs (loop3): unmounting filesystem. [ 234.536020][ T2928] loop4: detected capacity change from 0 to 256 [ 234.587654][ T2928] FAT-fs (loop4): Directory bread(block 64) failed [ 234.606853][ T2928] FAT-fs (loop4): Directory bread(block 65) failed [ 234.642140][ T2928] FAT-fs (loop4): Directory bread(block 66) failed [ 234.650864][ T2928] FAT-fs (loop4): Directory bread(block 67) failed [ 234.665361][ T2928] FAT-fs (loop4): Directory bread(block 68) failed [ 234.673780][ T2933] loop2: detected capacity change from 0 to 256 [ 234.680124][ T2928] FAT-fs (loop4): Directory bread(block 69) failed [ 234.695481][ T2928] FAT-fs (loop4): Directory bread(block 70) failed [ 234.702444][ T2928] FAT-fs (loop4): Directory bread(block 71) failed [ 234.709440][ T2928] FAT-fs (loop4): Directory bread(block 72) failed [ 234.718185][ T2928] FAT-fs (loop4): Directory bread(block 73) failed [ 234.791935][ T2933] FAT-fs (loop2): Directory bread(block 64) failed [ 234.907064][ T2933] FAT-fs (loop2): Directory bread(block 65) failed [ 235.017241][ T2933] FAT-fs (loop2): Directory bread(block 66) failed [ 235.024046][ T2933] FAT-fs (loop2): Directory bread(block 67) failed [ 235.030675][ T2933] FAT-fs (loop2): Directory bread(block 68) failed [ 235.037330][ T2933] FAT-fs (loop2): Directory bread(block 69) failed [ 235.043960][ T2933] FAT-fs (loop2): Directory bread(block 70) failed [ 235.050544][ T2933] FAT-fs (loop2): Directory bread(block 71) failed [ 235.057210][ T2933] FAT-fs (loop2): Directory bread(block 72) failed [ 235.068112][ T2933] FAT-fs (loop2): Directory bread(block 73) failed [ 235.444427][ T2945] loop0: detected capacity change from 0 to 256 [ 235.489849][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 235.489864][ T28] audit: type=1400 audit(1754025591.031:288): avc: denied { bind } for pid=2944 comm="syz.0.754" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 235.526448][ T28] audit: type=1400 audit(1754025591.031:289): avc: denied { name_bind } for pid=2944 comm="syz.0.754" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 235.548353][ T28] audit: type=1400 audit(1754025591.031:290): avc: denied { node_bind } for pid=2944 comm="syz.0.754" saddr=fe80::aa src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 236.338301][ T2956] 9pnet_fd: Insufficient options for proto=fd [ 236.346590][ T2958] loop4: detected capacity change from 0 to 256 [ 236.482835][ T2959] loop3: detected capacity change from 0 to 8192 [ 236.523884][ T2958] FAT-fs (loop4): Directory bread(block 64) failed [ 236.530451][ T2958] FAT-fs (loop4): Directory bread(block 65) failed [ 236.545814][ T2958] FAT-fs (loop4): Directory bread(block 66) failed [ 236.552568][ T2958] FAT-fs (loop4): Directory bread(block 67) failed [ 236.561883][ T2958] FAT-fs (loop4): Directory bread(block 68) failed [ 236.569699][ T2958] FAT-fs (loop4): Directory bread(block 69) failed [ 237.598073][ T2974] loop1: detected capacity change from 0 to 512 [ 238.037712][ T28] audit: type=1400 audit(1754025593.611:291): avc: denied { write } for pid=2976 comm="syz.0.765" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 238.405208][ T2958] FAT-fs (loop4): Directory bread(block 70) failed [ 238.430933][ T2974] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 238.440303][ T2974] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.477713][ T2973] overlayfs: missing 'lowerdir' [ 238.561428][ T2958] FAT-fs (loop4): Directory bread(block 71) failed [ 238.699414][ T28] audit: type=1400 audit(1754025593.931:292): avc: denied { create } for pid=2976 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 238.723987][ T2958] FAT-fs (loop4): Directory bread(block 72) failed [ 238.748168][ T2958] FAT-fs (loop4): Directory bread(block 73) failed [ 238.793743][ T28] audit: type=1400 audit(1754025594.131:293): avc: denied { set_context_mgr } for pid=2976 comm="syz.0.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 238.882036][ T284] EXT4-fs (loop1): unmounting filesystem. [ 238.926398][ T2958] bridge0: port 4(vlan3) entered blocking state [ 238.933107][ T2958] bridge0: port 4(vlan3) entered disabled state [ 239.640584][ T3006] 9pnet_fd: Insufficient options for proto=fd [ 240.591874][ T335] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 241.111499][ T335] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 241.122007][ T335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.133923][ T335] usb 4-1: config 0 descriptor?? [ 241.594461][ T3033] loop0: detected capacity change from 0 to 512 [ 241.616896][ T3033] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.655676][ T3034] xt_hashlimit: size too large, truncated to 1048576 [ 242.165943][ T3033] EXT4-fs (loop0): orphan cleanup on readonly fs [ 242.194560][ T3033] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.780: bg 0: block 248: padding at end of block bitmap is not set [ 242.213522][ T3033] Quota error (device loop0): write_blk: dquota write failed [ 242.221360][ T3033] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 242.231681][ T3033] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.780: Failed to acquire dquot type 1 [ 242.254281][ T3033] EXT4-fs (loop0): 1 truncate cleaned up [ 242.351742][ T335] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 242.468359][ T335] asix: probe of 4-1:0.0 failed with error -71 [ 242.833456][ T335] usb 4-1: USB disconnect, device number 4 [ 243.214105][ T3033] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 245.902190][ T28] audit: type=1400 audit(1754025601.481:294): avc: denied { connect } for pid=3039 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 245.923299][ T3040] netlink: 104 bytes leftover after parsing attributes in process `syz.1.785'. [ 245.961922][ T3044] device bridge0 entered promiscuous mode [ 245.995032][ T28] audit: type=1400 audit(1754025601.501:295): avc: denied { nlmsg_read } for pid=3039 comm="syz.1.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 246.016705][ T3044] bridge0: port 4(macsec1) entered blocking state [ 246.023600][ T3044] bridge0: port 4(macsec1) entered disabled state [ 246.030948][ T3044] device bridge0 left promiscuous mode [ 246.058937][ T3043] loop2: detected capacity change from 0 to 8192 [ 246.139494][ T285] EXT4-fs (loop0): unmounting filesystem. [ 246.146259][ T3047] capability: warning: `syz.1.785' uses deprecated v2 capabilities in a way that may be insecure [ 246.157017][ T28] audit: type=1400 audit(1754025601.721:296): avc: denied { write } for pid=3039 comm="syz.1.785" laddr=fe80::a lport=1 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 246.176266][ T3040] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 246.225187][ T3047] loop1: detected capacity change from 0 to 512 [ 246.464999][ T3047] EXT4-fs: Ignoring removed orlov option [ 246.475869][ T3047] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 246.695194][ T3047] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 246.911327][ T3047] EXT4-fs (loop1): 1 orphan inode deleted [ 246.919294][ T3047] EXT4-fs (loop1): 1 truncate cleaned up [ 246.926107][ T3047] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 246.984032][ T3059] loop4: detected capacity change from 0 to 256 [ 246.990863][ T3040] EXT4-fs error (device loop1): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.1.785: path /166/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 247.014367][ T3040] EXT4-fs (loop1): Remounting filesystem read-only [ 247.048699][ T3059] FAT-fs (loop4): Directory bread(block 64) failed [ 247.061850][ T3059] FAT-fs (loop4): Directory bread(block 65) failed [ 247.068449][ T3059] FAT-fs (loop4): Directory bread(block 66) failed [ 247.083410][ T3059] FAT-fs (loop4): Directory bread(block 67) failed [ 247.090055][ T3059] FAT-fs (loop4): Directory bread(block 68) failed [ 247.109734][ T3059] FAT-fs (loop4): Directory bread(block 69) failed [ 247.117125][ T3059] FAT-fs (loop4): Directory bread(block 70) failed [ 247.117511][ T284] EXT4-fs (loop1): unmounting filesystem. [ 247.124501][ T3059] FAT-fs (loop4): Directory bread(block 71) failed [ 247.136441][ T3059] FAT-fs (loop4): Directory bread(block 72) failed [ 247.143223][ T3059] FAT-fs (loop4): Directory bread(block 73) failed [ 247.317271][ T3066] loop0: detected capacity change from 0 to 2048 [ 247.441018][ T3066] Alternate GPT is invalid, using primary GPT. [ 247.447613][ T3066] loop0: p1 p2 p3 [ 247.574943][ T2586] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 247.602767][ T3066] loop0: detected capacity change from 0 to 512 [ 247.614319][ T3066] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.650673][ T3066] EXT4-fs (loop0): orphan cleanup on readonly fs [ 247.660304][ T3066] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.790: bg 0: block 248: padding at end of block bitmap is not set [ 247.676249][ T3066] Quota error (device loop0): write_blk: dquota write failed [ 247.683909][ T3066] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 247.694139][ T3066] EXT4-fs error (device loop0): ext4_acquire_dquot:6801: comm syz.0.790: Failed to acquire dquot type 1 [ 247.708765][ T3066] EXT4-fs (loop0): 1 truncate cleaned up [ 247.715501][ T3066] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 247.767145][ T3066] EXT4-fs error (device loop0): ext4_lookup:1862: inode #2: comm syz.0.790: deleted inode referenced: 12 [ 249.053221][ T2393] udevd[2393]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 249.099755][ T285] EXT4-fs (loop0): unmounting filesystem. [ 249.112010][ T2586] udevd[2586]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 249.169937][ T2585] udevd[2585]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 250.349987][ T3091] xt_hashlimit: size too large, truncated to 1048576 [ 253.967539][ T3096] loop2: detected capacity change from 0 to 512 [ 254.137646][ T3096] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.263221][ T3096] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 254.617223][ T3096] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 254.681172][ T3113] device bridge0 entered promiscuous mode [ 254.687384][ T3096] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 254.696381][ T3113] bridge0: port 3(macsec1) entered blocking state [ 254.703530][ T3096] System zones: 0-2, 18-18, 34-34 [ 254.709076][ T3113] bridge0: port 3(macsec1) entered disabled state [ 254.716542][ T3096] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.798: iget: bad i_size value: 360287970189639680 [ 254.730994][ T3113] device bridge0 left promiscuous mode [ 254.738959][ T3096] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.798: couldn't read orphan inode 15 (err -117) [ 254.753675][ T3096] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 254.910615][ T3119] loop4: detected capacity change from 0 to 256 [ 254.931178][ T3116] device bridge0 entered promiscuous mode [ 254.945965][ T3119] FAT-fs (loop4): Directory bread(block 64) failed [ 254.959334][ T3119] FAT-fs (loop4): Directory bread(block 65) failed [ 254.966158][ T3119] FAT-fs (loop4): Directory bread(block 66) failed [ 254.973091][ T3119] FAT-fs (loop4): Directory bread(block 67) failed [ 254.979656][ T3119] FAT-fs (loop4): Directory bread(block 68) failed [ 254.986253][ T3119] FAT-fs (loop4): Directory bread(block 69) failed [ 254.992858][ T3119] FAT-fs (loop4): Directory bread(block 70) failed [ 254.999393][ T3119] FAT-fs (loop4): Directory bread(block 71) failed [ 255.006658][ T3116] bridge0: port 3(macsec1) entered blocking state [ 255.016913][ T3096] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.798: iget: bad i_size value: 360287970189639680 [ 255.029637][ T3119] FAT-fs (loop4): Directory bread(block 72) failed [ 255.037055][ T3116] bridge0: port 3(macsec1) entered disabled state [ 255.037782][ T3119] FAT-fs (loop4): Directory bread(block 73) failed [ 255.046817][ T3096] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.798: iget: bad i_size value: 360287970189639680 [ 255.096491][ T3116] device bridge0 left promiscuous mode [ 255.118683][ T286] EXT4-fs (loop2): unmounting filesystem. [ 255.209483][ T3130] 9pnet_fd: Insufficient options for proto=fd [ 255.263363][ T3136] loop3: detected capacity change from 0 to 256 [ 255.291128][ T3136] FAT-fs (loop3): Directory bread(block 64) failed [ 255.297829][ T3136] FAT-fs (loop3): Directory bread(block 65) failed [ 255.304646][ T3136] FAT-fs (loop3): Directory bread(block 66) failed [ 255.311664][ T3136] FAT-fs (loop3): Directory bread(block 67) failed [ 255.318401][ T3136] FAT-fs (loop3): Directory bread(block 68) failed [ 255.326318][ T3136] FAT-fs (loop3): Directory bread(block 69) failed [ 255.333138][ T3136] FAT-fs (loop3): Directory bread(block 70) failed [ 255.339895][ T3136] FAT-fs (loop3): Directory bread(block 71) failed [ 255.344032][ T3137] bridge0: port 4(vlan3) entered blocking state [ 255.346904][ T3136] FAT-fs (loop3): Directory bread(block 72) failed [ 255.359629][ T3136] FAT-fs (loop3): Directory bread(block 73) failed [ 255.366888][ T3137] bridge0: port 4(vlan3) entered disabled state [ 255.539774][ T28] audit: type=1400 audit(1754025611.111:297): avc: denied { search } for pid=3135 comm="syz.3.811" name="/" dev="configfs" ino=14441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 255.563224][ T28] audit: type=1400 audit(1754025611.141:298): avc: denied { read } for pid=3135 comm="syz.3.811" name="/" dev="configfs" ino=14441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 255.585252][ T28] audit: type=1400 audit(1754025611.141:299): avc: denied { open } for pid=3135 comm="syz.3.811" path="/" dev="configfs" ino=14441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 255.607692][ T28] audit: type=1400 audit(1754025611.141:300): avc: denied { setattr } for pid=3135 comm="syz.3.811" name="/" dev="configfs" ino=14441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 255.795721][ T28] audit: type=1400 audit(1754025611.371:301): avc: denied { associate } for pid=3143 comm="syz.0.813" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 255.826271][ T28] audit: type=1400 audit(1754025611.401:302): avc: denied { read } for pid=3145 comm="syz.0.814" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 255.826771][ T3146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'. [ 255.877818][ T3146] loop0: detected capacity change from 0 to 16 [ 255.889126][ T3146] erofs: (device loop0): mounted with root inode @ nid 36. [ 255.902271][ T3146] erofs: (device loop0): z_erofs_extent_lookback: invalid lookback distance 0 @ nid 36 [ 255.912037][ T3146] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 256.334648][ T758] kworker/u4:7: attempt to access beyond end of device [ 256.334648][ T758] loop3: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 256.360173][ T758] kworker/u4:7: attempt to access beyond end of device [ 256.360173][ T758] loop3: rw=1, sector=1864, nr_sectors = 6808 limit=256 [ 256.385314][ T758] kworker/u4:7: attempt to access beyond end of device [ 256.385314][ T758] loop3: rw=1, sector=8672, nr_sectors = 4000 limit=256 [ 256.405115][ T758] kworker/u4:7: attempt to access beyond end of device [ 256.405115][ T758] loop3: rw=1, sector=12672, nr_sectors = 4864 limit=256 [ 256.422026][ T758] kworker/u4:7: attempt to access beyond end of device [ 256.422026][ T758] loop3: rw=1, sector=17536, nr_sectors = 2056 limit=256 [ 256.448789][ T758] kworker/u4:7: attempt to access beyond end of device [ 256.448789][ T758] loop3: rw=1, sector=19592, nr_sectors = 14208 limit=256 [ 256.555218][ T3163] loop3: detected capacity change from 0 to 512 [ 256.562103][ T3163] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.569189][ T3163] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 256.580649][ T3163] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 256.590048][ T3163] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 256.598148][ T3163] System zones: 0-2, 18-18, 34-34 [ 256.605429][ T3163] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.818: iget: bad i_size value: 360287970189639680 [ 256.619075][ T3163] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.818: couldn't read orphan inode 15 (err -117) [ 256.653648][ T3163] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 256.714594][ T3163] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.818: iget: bad i_size value: 360287970189639680 [ 256.720032][ T3170] loop4: detected capacity change from 0 to 128 [ 256.729843][ T3168] loop2: detected capacity change from 0 to 256 [ 256.740299][ T3163] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.818: iget: bad i_size value: 360287970189639680 [ 256.922385][ T283] EXT4-fs (loop3): unmounting filesystem. [ 256.943318][ T3174] loop4: detected capacity change from 0 to 256 [ 256.974887][ T3172] loop0: detected capacity change from 0 to 40427 [ 256.982989][ T3172] F2FS-fs (loop0): fault_injection options not supported [ 256.991681][ T3172] F2FS-fs (loop0): invalid crc value [ 257.063315][ T3172] F2FS-fs (loop0): Found nat_bits in checkpoint [ 257.083383][ T3174] FAT-fs (loop4): Directory bread(block 64) failed [ 257.099567][ T3174] FAT-fs (loop4): Directory bread(block 65) failed [ 257.110414][ T3172] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 257.133056][ T3174] FAT-fs (loop4): Directory bread(block 66) failed [ 257.152633][ T3174] FAT-fs (loop4): Directory bread(block 67) failed [ 257.171984][ T3174] FAT-fs (loop4): Directory bread(block 68) failed [ 257.199301][ T3174] FAT-fs (loop4): Directory bread(block 69) failed [ 257.210111][ T3174] FAT-fs (loop4): Directory bread(block 70) failed [ 257.217145][ T3174] FAT-fs (loop4): Directory bread(block 71) failed [ 257.251851][ T3174] FAT-fs (loop4): Directory bread(block 72) failed [ 257.259749][ T3174] FAT-fs (loop4): Directory bread(block 73) failed [ 257.575635][ T3191] bridge0: port 4(vlan3) entered blocking state [ 257.588507][ T3191] bridge0: port 4(vlan3) entered disabled state [ 258.338757][ T3202] loop2: detected capacity change from 0 to 256 [ 258.369763][ T3202] FAT-fs (loop2): Directory bread(block 64) failed [ 258.404341][ T3202] FAT-fs (loop2): Directory bread(block 65) failed [ 258.411904][ T3202] FAT-fs (loop2): Directory bread(block 66) failed [ 258.418489][ T3202] FAT-fs (loop2): Directory bread(block 67) failed [ 258.425145][ T3202] FAT-fs (loop2): Directory bread(block 68) failed [ 258.431713][ T3202] FAT-fs (loop2): Directory bread(block 69) failed [ 258.438402][ T3202] FAT-fs (loop2): Directory bread(block 70) failed [ 258.445122][ T3202] FAT-fs (loop2): Directory bread(block 71) failed [ 258.451736][ T3202] FAT-fs (loop2): Directory bread(block 72) failed [ 258.458324][ T3202] FAT-fs (loop2): Directory bread(block 73) failed [ 258.556526][ T3206] loop3: detected capacity change from 0 to 40427 [ 258.564931][ T3206] F2FS-fs (loop3): fault_injection options not supported [ 258.572966][ T3206] F2FS-fs (loop3): invalid crc value [ 258.585182][ T3206] F2FS-fs (loop3): Found nat_bits in checkpoint [ 258.619923][ T3206] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 258.754625][ T3213] FAULT_INJECTION: forcing a failure. [ 258.754625][ T3213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.771877][ T3213] CPU: 1 PID: 3213 Comm: syz.0.834 Not tainted 6.1.145-syzkaller-00027-g42472e1a4913 #0 [ 258.781652][ T3213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.791800][ T3213] Call Trace: [ 258.795108][ T3213] [ 258.798060][ T3213] __dump_stack+0x21/0x24 [ 258.802448][ T3213] dump_stack_lvl+0xee/0x150 [ 258.807081][ T3213] ? __cfi_dump_stack_lvl+0x8/0x8 [ 258.812147][ T3213] dump_stack+0x15/0x24 [ 258.816339][ T3213] should_fail_ex+0x3d4/0x520 [ 258.821023][ T3213] should_fail+0xb/0x10 [ 258.825213][ T3213] should_fail_usercopy+0x1a/0x20 [ 258.830265][ T3213] _copy_from_user+0x1e/0xc0 [ 258.834857][ T3213] __sys_sendto+0x2c0/0x5e0 [ 258.839790][ T3213] ? slab_free_freelist_hook+0xc2/0x190 [ 258.845345][ T3213] ? __cfi___sys_sendto+0x10/0x10 [ 258.850389][ T3213] ? ksys_write+0x1eb/0x240 [ 258.854924][ T3213] ? __cfi_ksys_write+0x10/0x10 [ 258.859809][ T3213] __x64_sys_sendto+0xe5/0x100 [ 258.864598][ T3213] x64_sys_call+0x83/0x9a0 [ 258.869045][ T3213] do_syscall_64+0x4c/0xa0 [ 258.873480][ T3213] ? clear_bhb_loop+0x30/0x80 [ 258.878179][ T3213] ? clear_bhb_loop+0x30/0x80 [ 258.882877][ T3213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 258.888797][ T3213] RIP: 0033:0x7f690c18eb69 [ 258.893248][ T3213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.912874][ T3213] RSP: 002b:00007f690d01d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 258.921310][ T3213] RAX: ffffffffffffffda RBX: 00007f690c3b5fa0 RCX: 00007f690c18eb69 [ 258.929302][ T3213] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000004 [ 258.937296][ T3213] RBP: 00007f690d01d090 R08: 0000200000000540 R09: 0000000000000014 [ 258.945286][ T3213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.953276][ T3213] R13: 0000000000000000 R14: 00007f690c3b5fa0 R15: 00007fff799aac58 [ 258.961278][ T3213] [ 260.334524][ T3225] 9pnet_fd: Insufficient options for proto=fd [ 260.396185][ T28] audit: type=1400 audit(1754025615.971:303): avc: denied { read write } for pid=3228 comm="syz.3.836" name="uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 260.462307][ T2369] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x1 [ 260.621604][ T3227] loop2: detected capacity change from 0 to 512 [ 260.633194][ T3232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 260.642764][ T2369] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 260.650548][ T2369] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 260.667225][ T3227] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.678544][ T28] audit: type=1400 audit(1754025615.991:304): avc: denied { open } for pid=3228 comm="syz.3.836" path="/dev/uhid" dev="devtmpfs" ino=267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 260.703900][ T3232] syz.3.836[3232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.703983][ T3232] syz.3.836[3232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.722393][ T3227] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 260.743403][ T2369] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 260.751167][ T2369] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 260.777417][ T2369] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x2 [ 260.790897][ T3227] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 260.803419][ T2369] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 260.815695][ T3227] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 260.829482][ T2369] hid-generic 0000:007F:FFFFFFFE.0002: unknown main item tag 0x0 [ 260.840692][ T3227] System zones: 0-2, 18-18, 34-34 [ 260.850247][ T2369] hid-generic 0000:007F:FFFFFFFE.0002: collection stack underflow [ 260.867979][ T3227] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.839: iget: bad i_size value: 360287970189639680 [ 260.886460][ T2369] hid-generic 0000:007F:FFFFFFFE.0002: item 0 0 0 12 parsing failed [ 260.902045][ T3227] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.839: couldn't read orphan inode 15 (err -117) [ 260.916332][ T2369] hid-generic: probe of 0000:007F:FFFFFFFE.0002 failed with error -22 [ 260.951820][ T3227] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 260.987910][ T3227] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.839: iget: bad i_size value: 360287970189639680 [ 261.003007][ T3227] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.839: iget: bad i_size value: 360287970189639680 [ 261.177815][ T286] EXT4-fs (loop2): unmounting filesystem. [ 261.237303][ T3258] overlayfs: unrecognized mount option "/" or missing value [ 261.836165][ T3263] FAULT_INJECTION: forcing a failure. [ 261.836165][ T3263] name failslab, interval 1, probability 0, space 0, times 0 [ 261.979933][ T3263] CPU: 1 PID: 3263 Comm: syz.4.848 Not tainted 6.1.145-syzkaller-00027-g42472e1a4913 #0 [ 261.989802][ T3263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.999880][ T3263] Call Trace: [ 262.003177][ T3263] [ 262.006130][ T3263] __dump_stack+0x21/0x24 [ 262.010503][ T3263] dump_stack_lvl+0xee/0x150 [ 262.015126][ T3263] ? __cfi_dump_stack_lvl+0x8/0x8 [ 262.020189][ T3263] dump_stack+0x15/0x24 [ 262.024383][ T3263] should_fail_ex+0x3d4/0x520 [ 262.029082][ T3263] __should_failslab+0xac/0xf0 [ 262.033863][ T3263] should_failslab+0x9/0x20 [ 262.038390][ T3263] kmem_cache_alloc_node+0x42/0x340 [ 262.043606][ T3263] ? __alloc_skb+0xea/0x4b0 [ 262.048136][ T3263] __alloc_skb+0xea/0x4b0 [ 262.052487][ T3263] ? sysvec_reschedule_ipi+0x78/0x80 [ 262.057795][ T3263] alloc_skb_with_frags+0xa8/0x620 [ 262.062939][ T3263] sock_alloc_send_pskb+0x853/0x980 [ 262.068158][ T3263] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 262.073895][ T3263] ? __switch_to_asm+0x3a/0x60 [ 262.078679][ T3263] ? __kasan_check_read+0x11/0x20 [ 262.083731][ T3263] ? preempt_schedule_irq+0xbb/0x110 [ 262.089032][ T3263] tun_get_user+0x4e5/0x3320 [ 262.093650][ T3263] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 262.099508][ T3263] ? tun_do_read+0x1c20/0x1c20 [ 262.104302][ T3263] ? rcu_read_unlock_special+0xab/0x480 [ 262.109875][ T3263] ? __rcu_read_unlock+0xa0/0xa0 [ 262.114843][ T3263] ? avc_policy_seqno+0x1b/0x70 [ 262.119721][ T3263] tun_chr_write_iter+0x1fb/0x300 [ 262.124800][ T3263] vfs_write+0x5db/0xca0 [ 262.129083][ T3263] ? __this_cpu_preempt_check+0x13/0x20 [ 262.134658][ T3263] ? __cfi_vfs_write+0x10/0x10 [ 262.139443][ T3263] ? finish_task_switch+0x16b/0x7b0 [ 262.144664][ T3263] ? __fget_files+0x2d5/0x330 [ 262.149454][ T3263] ? __fdget_pos+0x1f2/0x380 [ 262.154070][ T3263] ? ksys_write+0x71/0x240 [ 262.158520][ T3263] ksys_write+0x140/0x240 [ 262.162875][ T3263] ? __cfi_ksys_write+0x10/0x10 [ 262.167748][ T3263] ? __kasan_check_write+0x14/0x20 [ 262.172884][ T3263] ? fpregs_restore_userregs+0x128/0x260 [ 262.178540][ T3263] __x64_sys_write+0x7b/0x90 [ 262.183159][ T3263] x64_sys_call+0x27b/0x9a0 [ 262.187712][ T3263] do_syscall_64+0x4c/0xa0 [ 262.192166][ T3263] ? clear_bhb_loop+0x30/0x80 [ 262.196864][ T3263] ? clear_bhb_loop+0x30/0x80 [ 262.201559][ T3263] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.207476][ T3263] RIP: 0033:0x7f25ff98d61f [ 262.211920][ T3263] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 262.231645][ T3263] RSP: 002b:00007f2600814000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 262.240180][ T3263] RAX: ffffffffffffffda RBX: 00007f25ffbb5fa0 RCX: 00007f25ff98d61f [ 262.248178][ T3263] RDX: 000000000000fdef RSI: 0000200000001b80 RDI: 00000000000000c8 [ 262.256181][ T3263] RBP: 00007f2600814090 R08: 0000000000000000 R09: 0000000000000000 [ 262.264185][ T3263] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001 [ 262.272187][ T3263] R13: 0000000000000000 R14: 00007f25ffbb5fa0 R15: 00007fff21f389b8 [ 262.280204][ T3263] [ 262.436501][ T3269] loop0: detected capacity change from 0 to 512 [ 262.444826][ T3273] 9pnet: Could not find request transport: fd0x0000000000000006 [ 262.469217][ T3269] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.487803][ T3269] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 262.500004][ T3269] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 262.509293][ T3269] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 262.517575][ T3269] System zones: 0-2, 18-18, 34-34 [ 262.524037][ T3269] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.851: iget: bad i_size value: 360287970189639680 [ 262.537505][ T3269] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.851: couldn't read orphan inode 15 (err -117) [ 262.549757][ T3269] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 262.572388][ T3269] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.851: iget: bad i_size value: 360287970189639680 [ 262.646490][ T3269] EXT4-fs error (device loop0): ext4_lookup:1858: inode #15: comm syz.0.851: iget: bad i_size value: 360287970189639680 [ 262.854647][ T285] EXT4-fs (loop0): unmounting filesystem. [ 263.653874][ T28] audit: type=1400 audit(1754025619.231:305): avc: denied { create } for pid=3286 comm="syz.4.856" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 263.841871][ T28] audit: type=1400 audit(1754025619.371:306): avc: denied { connect } for pid=3288 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.944715][ T3294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.858'. [ 264.251848][ T28] audit: type=1400 audit(1754025619.801:307): avc: denied { mounton } for pid=3286 comm="syz.4.856" path="/164/file0" dev="tmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 264.455206][ T3294] loop3: detected capacity change from 0 to 16 [ 264.494764][ T3294] erofs: (device loop3): mounted with root inode @ nid 36. [ 264.572215][ T3303] loop4: detected capacity change from 0 to 256 [ 264.621263][ T3303] FAT-fs (loop4): Directory bread(block 64) failed [ 264.636731][ T3303] FAT-fs (loop4): Directory bread(block 65) failed [ 264.644503][ T3303] FAT-fs (loop4): Directory bread(block 66) failed [ 264.651068][ T3303] FAT-fs (loop4): Directory bread(block 67) failed [ 264.657709][ T3303] FAT-fs (loop4): Directory bread(block 68) failed [ 264.673492][ T3303] FAT-fs (loop4): Directory bread(block 69) failed [ 264.680144][ T3303] FAT-fs (loop4): Directory bread(block 70) failed [ 264.686944][ T3303] FAT-fs (loop4): Directory bread(block 71) failed [ 264.694222][ T3303] FAT-fs (loop4): Directory bread(block 72) failed [ 264.700915][ T3303] FAT-fs (loop4): Directory bread(block 73) failed [ 264.709903][ T3306] FAULT_INJECTION: forcing a failure. [ 264.709903][ T3306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.759002][ T3306] CPU: 0 PID: 3306 Comm: syz.2.861 Not tainted 6.1.145-syzkaller-00027-g42472e1a4913 #0 [ 264.768793][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 264.778881][ T3306] Call Trace: [ 264.782191][ T3306] [ 264.785146][ T3306] __dump_stack+0x21/0x24 [ 264.789511][ T3306] dump_stack_lvl+0xee/0x150 [ 264.794134][ T3306] ? __cfi_dump_stack_lvl+0x8/0x8 [ 264.799282][ T3306] dump_stack+0x15/0x24 [ 264.803476][ T3306] should_fail_ex+0x3d4/0x520 [ 264.808184][ T3306] should_fail+0xb/0x10 [ 264.812367][ T3306] should_fail_usercopy+0x1a/0x20 [ 264.817422][ T3306] _copy_to_user+0x1e/0x90 [ 264.821872][ T3306] simple_read_from_buffer+0xe9/0x160 [ 264.827369][ T3306] proc_fail_nth_read+0x19a/0x210 [ 264.832430][ T3306] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 264.838024][ T3306] ? security_file_permission+0x94/0xb0 [ 264.843600][ T3306] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 264.849216][ T3306] vfs_read+0x26e/0x8c0 [ 264.853416][ T3306] ? __cfi_vfs_read+0x10/0x10 [ 264.858134][ T3306] ? __kasan_check_write+0x14/0x20 [ 264.863280][ T3306] ? mutex_lock+0x8d/0x1a0 [ 264.867739][ T3306] ? __cfi_mutex_lock+0x10/0x10 [ 264.872615][ T3306] ? __fdget_pos+0x2cd/0x380 [ 264.877329][ T3306] ? ksys_read+0x71/0x240 [ 264.881696][ T3306] ksys_read+0x140/0x240 [ 264.885977][ T3306] ? __cfi_ksys_read+0x10/0x10 [ 264.890787][ T3306] ? __bpf_trace_sys_enter+0x62/0x70 [ 264.896103][ T3306] __x64_sys_read+0x7b/0x90 [ 264.900647][ T3306] x64_sys_call+0x2f/0x9a0 [ 264.905097][ T3306] do_syscall_64+0x4c/0xa0 [ 264.909543][ T3306] ? clear_bhb_loop+0x30/0x80 [ 264.914257][ T3306] ? clear_bhb_loop+0x30/0x80 [ 264.918966][ T3306] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 264.924902][ T3306] RIP: 0033:0x7f65b338d57c [ 264.929345][ T3306] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 264.948978][ T3306] RSP: 002b:00007f65b4127030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.957441][ T3306] RAX: ffffffffffffffda RBX: 00007f65b35b5fa0 RCX: 00007f65b338d57c [ 264.965536][ T3306] RDX: 000000000000000f RSI: 00007f65b41270a0 RDI: 0000000000000006 [ 264.973532][ T3306] RBP: 00007f65b4127090 R08: 0000000000000000 R09: 0000000000000000 [ 264.981530][ T3306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.989531][ T3306] R13: 0000000000000000 R14: 00007f65b35b5fa0 R15: 00007ffd94b45e38 [ 264.997533][ T3306] [ 265.036896][ T28] audit: type=1400 audit(1754025620.611:308): avc: denied { bpf } for pid=3315 comm="syz.1.863" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 265.089961][ T28] audit: type=1400 audit(1754025620.611:309): avc: denied { read } for pid=3300 comm="syz.3.859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.138896][ T28] audit: type=1400 audit(1754025620.641:310): avc: denied { map_create } for pid=3315 comm="syz.1.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 265.158777][ T28] audit: type=1400 audit(1754025620.641:311): avc: denied { prog_load } for pid=3315 comm="syz.1.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 265.268688][ T3323] netlink: 'syz.1.865': attribute type 3 has an invalid length. [ 265.276926][ T3323] netlink: 'syz.1.865': attribute type 3 has an invalid length. [ 265.284717][ T3323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.865'. [ 265.311068][ T28] audit: type=1400 audit(1754025620.651:312): avc: denied { write } for pid=3317 comm="syz.2.864" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 265.419318][ T28] audit: type=1400 audit(1754025620.651:313): avc: denied { open } for pid=3317 comm="syz.2.864" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 265.667615][ T1677] kworker/u4:8: attempt to access beyond end of device [ 265.667615][ T1677] loop4: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 265.709130][ T1677] kworker/u4:8: attempt to access beyond end of device [ 265.709130][ T1677] loop4: rw=1, sector=1864, nr_sectors = 8776 limit=256 [ 265.752220][ T1677] kworker/u4:8: attempt to access beyond end of device [ 265.752220][ T1677] loop4: rw=1, sector=10640, nr_sectors = 7440 limit=256 [ 265.771465][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 265.771479][ T28] audit: type=1400 audit(1754025621.341:333): avc: denied { read write } for pid=3327 comm="syz.3.867" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 265.787298][ T1677] kworker/u4:8: attempt to access beyond end of device [ 265.787298][ T1677] loop4: rw=1, sector=18080, nr_sectors = 3712 limit=256 [ 265.831802][ T28] audit: type=1400 audit(1754025621.391:334): avc: denied { open } for pid=3327 comm="syz.3.867" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 265.846174][ T1677] kworker/u4:8: attempt to access beyond end of device [ 265.846174][ T1677] loop4: rw=1, sector=21792, nr_sectors = 4048 limit=256 [ 265.871096][ T1677] kworker/u4:8: attempt to access beyond end of device [ 265.871096][ T1677] loop4: rw=1, sector=25840, nr_sectors = 752 limit=256 [ 265.884939][ T28] audit: type=1400 audit(1754025621.451:335): avc: denied { map_read map_write } for pid=3327 comm="syz.3.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 265.918586][ T3289] loop0: detected capacity change from 0 to 131072 [ 265.938652][ T28] audit: type=1400 audit(1754025621.511:336): avc: denied { mounton } for pid=3288 comm="syz.0.855" path="/174/file1" dev="tmpfs" ino=981 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 265.968305][ T3289] F2FS-fs (loop0): Unrecognized mount option " " or missing value [ 265.996314][ T28] audit: type=1400 audit(1754025621.561:337): avc: denied { connect } for pid=3288 comm="syz.0.855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 266.125020][ T28] audit: type=1400 audit(1754025621.701:338): avc: denied { prog_run } for pid=3335 comm="syz.0.870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 266.301886][ T28] audit: type=1400 audit(1754025621.861:339): avc: denied { create } for pid=3333 comm="syz.1.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.708177][ T28] audit: type=1400 audit(1754025621.861:340): avc: denied { connect } for pid=3333 comm="syz.1.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 266.741946][ T28] audit: type=1400 audit(1754025621.861:341): avc: denied { write } for pid=3333 comm="syz.1.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 267.284766][ T28] audit: type=1400 audit(1754025622.861:342): avc: denied { create } for pid=3343 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 268.681932][ T506] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 268.872922][ T506] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 268.886501][ T506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.918116][ T506] usb 4-1: config 0 descriptor?? [ 268.947401][ T3365] device bridge0 entered promiscuous mode [ 268.992612][ T3365] bridge0: port 4(macsec1) entered blocking state [ 269.000281][ T3365] bridge0: port 4(macsec1) entered disabled state [ 269.010105][ T3365] device bridge0 left promiscuous mode [ 269.037837][ T3370] loop2: detected capacity change from 0 to 256 [ 269.053422][ T3370] FAT-fs (loop2): Directory bread(block 64) failed [ 269.060929][ T3370] FAT-fs (loop2): Directory bread(block 65) failed [ 269.079215][ T3370] FAT-fs (loop2): Directory bread(block 66) failed [ 269.089445][ T3370] FAT-fs (loop2): Directory bread(block 67) failed [ 269.096166][ T3370] FAT-fs (loop2): Directory bread(block 68) failed [ 269.103577][ T3370] FAT-fs (loop2): Directory bread(block 69) failed [ 269.110192][ T3370] FAT-fs (loop2): Directory bread(block 70) failed [ 269.121732][ T3370] FAT-fs (loop2): Directory bread(block 71) failed [ 269.131852][ T3370] FAT-fs (loop2): Directory bread(block 72) failed [ 269.138447][ T3370] FAT-fs (loop2): Directory bread(block 73) failed [ 269.341376][ T3382] bridge0: port 3(vlan2) entered blocking state [ 269.347848][ T3382] bridge0: port 3(vlan2) entered disabled state [ 269.582505][ T506] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 269.601515][ T506] asix: probe of 4-1:0.0 failed with error -71 [ 269.625713][ T506] usb 4-1: USB disconnect, device number 5 [ 270.149985][ T3397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.888'. [ 270.179286][ T3400] 9pnet_fd: Insufficient options for proto=fd [ 270.520777][ T3416] loop0: detected capacity change from 0 to 1024 [ 270.644950][ T3416] EXT4-fs (loop0): Can't support bigalloc feature without extents feature [ 270.644950][ T3416] [ 270.774378][ T3416] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 270.888100][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 270.888118][ T28] audit: type=1400 audit(1754025626.461:367): avc: denied { create } for pid=3418 comm="syz.4.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 271.587946][ T3430] loop1: detected capacity change from 0 to 1024 [ 271.613514][ T3430] EXT4-fs: Ignoring removed orlov option [ 271.634093][ T3430] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.681840][ T3430] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 271.741577][ T28] audit: type=1400 audit(1754025627.311:368): avc: denied { mount } for pid=3429 comm="syz.1.897" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 272.074039][ T28] audit: type=1400 audit(1754025627.651:369): avc: denied { write } for pid=3429 comm="syz.1.897" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.100717][ T3437] loop4: detected capacity change from 0 to 256 [ 272.134798][ T3437] exfat: Deprecated parameter 'namecase' [ 272.165415][ T28] audit: type=1400 audit(1754025627.651:370): avc: denied { add_name } for pid=3429 comm="syz.1.897" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.175317][ T3437] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 272.209163][ T28] audit: type=1400 audit(1754025627.651:371): avc: denied { create } for pid=3429 comm="syz.1.897" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.233618][ T3439] loop0: detected capacity change from 0 to 256 [ 272.257974][ T3439] exfat: Deprecated parameter 'namecase' [ 272.285882][ T3439] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 272.308360][ T28] audit: type=1400 audit(1754025627.881:372): avc: denied { write } for pid=3436 comm="syz.4.898" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.310762][ T3437] syz.4.898: attempt to access beyond end of device [ 272.310762][ T3437] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 272.350507][ T3439] FAULT_INJECTION: forcing a failure. [ 272.350507][ T3439] name failslab, interval 1, probability 0, space 0, times 0 [ 272.376108][ T28] audit: type=1400 audit(1754025627.881:373): avc: denied { add_name } for pid=3436 comm="syz.4.898" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.405288][ T3439] CPU: 1 PID: 3439 Comm: syz.0.899 Not tainted 6.1.145-syzkaller-00027-g42472e1a4913 #0 [ 272.415048][ T3439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.425128][ T3439] Call Trace: [ 272.428448][ T3439] [ 272.431393][ T3439] __dump_stack+0x21/0x24 [ 272.435760][ T3439] dump_stack_lvl+0xee/0x150 [ 272.440367][ T3439] ? __cfi_dump_stack_lvl+0x8/0x8 [ 272.445425][ T3439] ? unwind_get_return_address+0x4d/0x90 [ 272.451066][ T3439] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 272.457228][ T3439] ? arch_stack_walk+0xfc/0x150 [ 272.462087][ T3439] dump_stack+0x15/0x24 [ 272.466252][ T3439] should_fail_ex+0x3d4/0x520 [ 272.470936][ T3439] __should_failslab+0xac/0xf0 [ 272.475703][ T3439] ? alloc_pipe_info+0xe7/0x4b0 [ 272.480558][ T3439] should_failslab+0x9/0x20 [ 272.485072][ T3439] __kmem_cache_alloc_node+0x3d/0x2c0 [ 272.490457][ T3439] ? alloc_pipe_info+0xe7/0x4b0 [ 272.495333][ T3439] kmalloc_trace+0x29/0xb0 [ 272.499786][ T3439] alloc_pipe_info+0xe7/0x4b0 [ 272.504470][ T3439] splice_direct_to_actor+0x956/0xb10 [ 272.509852][ T3439] ? kstrtouint+0x74/0xe0 [ 272.514190][ T3439] ? selinux_file_permission+0x2a5/0x510 [ 272.519825][ T3439] ? fsnotify_perm+0x67/0x5b0 [ 272.524502][ T3439] ? security_file_permission+0x8a/0xb0 [ 272.530051][ T3439] ? __cfi_direct_splice_actor+0x10/0x10 [ 272.535691][ T3439] ? __cfi_splice_direct_to_actor+0x10/0x10 [ 272.541589][ T3439] ? security_file_permission+0x94/0xb0 [ 272.547143][ T3439] ? rw_verify_area+0xa7/0x1c0 [ 272.551920][ T3439] do_splice_direct+0x1b3/0x2c0 [ 272.556796][ T3439] ? avc_policy_seqno+0x1b/0x70 [ 272.561656][ T3439] ? __cfi_do_splice_direct+0x10/0x10 [ 272.567059][ T3439] ? security_file_permission+0x94/0xb0 [ 272.572608][ T3439] do_sendfile+0x5c6/0xeb0 [ 272.577110][ T3439] ? __cfi_vfs_write+0x10/0x10 [ 272.581884][ T3439] ? do_preadv+0x330/0x330 [ 272.586329][ T3439] ? __kasan_check_write+0x14/0x20 [ 272.591461][ T3439] ? fput+0x154/0x1a0 [ 272.595458][ T3439] __x64_sys_sendfile64+0x18f/0x1f0 [ 272.600657][ T3439] ? __cfi_ksys_write+0x10/0x10 [ 272.605512][ T3439] ? __cfi___x64_sys_sendfile64+0x10/0x10 [ 272.611233][ T3439] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 272.617307][ T3439] x64_sys_call+0x62c/0x9a0 [ 272.621818][ T3439] do_syscall_64+0x4c/0xa0 [ 272.626234][ T3439] ? clear_bhb_loop+0x30/0x80 [ 272.630915][ T3439] ? clear_bhb_loop+0x30/0x80 [ 272.635597][ T3439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.641490][ T3439] RIP: 0033:0x7f690c18eb69 [ 272.645908][ T3439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.665523][ T3439] RSP: 002b:00007f690d01d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 272.673947][ T3439] RAX: ffffffffffffffda RBX: 00007f690c3b5fa0 RCX: 00007f690c18eb69 [ 272.681928][ T3439] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 272.689912][ T3439] RBP: 00007f690d01d090 R08: 0000000000000000 R09: 0000000000000000 [ 272.697894][ T3439] R10: 0100000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 272.705884][ T3439] R13: 0000000000000000 R14: 00007f690c3b5fa0 R15: 00007fff799aac58 [ 272.713871][ T3439] [ 272.761563][ T28] audit: type=1400 audit(1754025627.881:374): avc: denied { associate } for pid=3436 comm="syz.4.898" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 272.793523][ T28] audit: type=1400 audit(1754025627.881:375): avc: denied { read write } for pid=3436 comm="syz.4.898" name="file1" dev="loop4" ino=1048635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 272.841806][ T28] audit: type=1400 audit(1754025627.881:376): avc: denied { open } for pid=3436 comm="syz.4.898" path="/171/file0/file1" dev="loop4" ino=1048635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 272.889198][ T3447] loop2: detected capacity change from 0 to 16 [ 272.915455][ T3447] erofs: (device loop2): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 125300) [ 272.946453][ T3449] 9pnet_fd: Insufficient options for proto=fd [ 273.061857][ T284] EXT4-fs (loop1): unmounting filesystem. [ 273.176977][ T3464] overlayfs: failed to resolve './file0': -2 [ 274.685137][ T3468] overlayfs: failed to resolve './file0': -2 [ 274.950651][ T3470] loop3: detected capacity change from 0 to 256 [ 274.962189][ T3470] FAT-fs (loop3): Directory bread(block 64) failed [ 274.968815][ T3470] FAT-fs (loop3): Directory bread(block 65) failed [ 275.006537][ T3470] FAT-fs (loop3): Directory bread(block 66) failed [ 275.014155][ T3474] loop4: detected capacity change from 0 to 128 [ 275.035434][ T3470] FAT-fs (loop3): Directory bread(block 67) failed [ 275.051893][ T3470] FAT-fs (loop3): Directory bread(block 68) failed [ 275.058461][ T3470] FAT-fs (loop3): Directory bread(block 69) failed [ 275.065503][ T3474] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 275.142060][ T3470] FAT-fs (loop3): Directory bread(block 70) failed [ 275.148636][ T3470] FAT-fs (loop3): Directory bread(block 71) failed [ 275.165629][ T3470] FAT-fs (loop3): Directory bread(block 72) failed [ 275.174044][ T3474] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 275.181856][ T3470] FAT-fs (loop3): Directory bread(block 73) failed [ 275.525493][ T3483] xt_NFQUEUE: number of queues (65534) out of range (got 131068) [ 276.375277][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 276.375294][ T28] audit: type=1400 audit(1754025631.951:383): avc: denied { map } for pid=3484 comm="syz.0.913" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 276.490320][ T28] audit: type=1400 audit(1754025632.001:384): avc: denied { read write } for pid=3484 comm="syz.0.913" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=27206 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 276.567123][ T28] audit: type=1400 audit(1754025632.001:385): avc: denied { bind } for pid=3484 comm="syz.0.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 276.588706][ T28] audit: type=1400 audit(1754025632.011:386): avc: denied { mount } for pid=3469 comm="syz.3.910" name="/" dev="configfs" ino=14441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 276.654682][ T28] audit: type=1400 audit(1754025632.231:387): avc: denied { create } for pid=3488 comm="syz.2.914" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 276.703231][ T3493] 9pnet_fd: Insufficient options for proto=fd [ 276.772503][ T28] audit: type=1400 audit(1754025632.351:388): avc: denied { search } for pid=3469 comm="syz.3.910" name="/" dev="configfs" ino=14441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.104066][ T28] audit: type=1400 audit(1754025632.351:389): avc: denied { read } for pid=3469 comm="syz.3.910" name="/" dev="configfs" ino=14441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.126436][ T28] audit: type=1400 audit(1754025632.351:390): avc: denied { open } for pid=3469 comm="syz.3.910" path="/" dev="configfs" ino=14441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.148923][ T28] audit: type=1400 audit(1754025632.351:391): avc: denied { setattr } for pid=3469 comm="syz.3.910" name="/" dev="configfs" ino=14441 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 277.184425][ T3501] loop0: detected capacity change from 0 to 16 [ 277.207274][ T28] audit: type=1400 audit(1754025632.431:392): avc: denied { mounton } for pid=3488 comm="syz.2.914" path="/176/file0" dev="tmpfs" ino=1006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 277.255331][ T3501] erofs: (device loop0): mounted with root inode @ nid 36. [ 277.616296][ T3508] device bridge0 entered promiscuous mode [ 277.634339][ T3508] bridge0: port 3(macsec1) entered blocking state [ 277.640842][ T3508] bridge0: port 3(macsec1) entered disabled state [ 277.853210][ T3508] device bridge0 left promiscuous mode [ 278.267034][ T758] kworker/u4:7: attempt to access beyond end of device [ 278.267034][ T758] loop3: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 278.442480][ T3514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.921'. [ 278.463197][ T758] kworker/u4:7: attempt to access beyond end of device [ 278.463197][ T758] loop3: rw=1, sector=1864, nr_sectors = 2056 limit=256 [ 278.524474][ T758] kworker/u4:7: attempt to access beyond end of device [ 278.524474][ T758] loop3: rw=1, sector=3920, nr_sectors = 3992 limit=256 [ 278.619228][ T758] kworker/u4:7: attempt to access beyond end of device [ 278.619228][ T758] loop3: rw=1, sector=7912, nr_sectors = 4272 limit=256 [ 278.679076][ T758] kworker/u4:7: attempt to access beyond end of device [ 278.679076][ T758] loop3: rw=1, sector=12184, nr_sectors = 8136 limit=256 [ 279.692387][ T3531] loop2: detected capacity change from 0 to 512 [ 279.764705][ T3531] EXT4-fs: Ignoring removed bh option [ 279.801710][ T3531] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 279.838526][ T3531] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 279.945518][ T3531] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 279.982334][ T3534] loop3: detected capacity change from 0 to 512 [ 279.992626][ T3531] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 280.012284][ T3531] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 280.170547][ T3537] loop1: detected capacity change from 0 to 40427 [ 280.186875][ T3537] F2FS-fs (loop1): fault_injection options not supported [ 280.186972][ T2393] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 280.206649][ T3537] F2FS-fs (loop1): invalid crc value [ 280.222628][ T3537] F2FS-fs (loop1): Found nat_bits in checkpoint [ 280.262692][ T3537] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 280.280878][ T3546] 9pnet_fd: Insufficient options for proto=fd [ 280.348962][ T3548] loop0: detected capacity change from 0 to 256 [ 280.376342][ T3548] FAT-fs (loop0): Directory bread(block 64) failed [ 280.394069][ T3548] FAT-fs (loop0): Directory bread(block 65) failed [ 280.400862][ T3548] FAT-fs (loop0): Directory bread(block 66) failed [ 280.417167][ T3548] FAT-fs (loop0): Directory bread(block 67) failed [ 280.423830][ T3548] FAT-fs (loop0): Directory bread(block 68) failed [ 280.430379][ T3548] FAT-fs (loop0): Directory bread(block 69) failed [ 280.437005][ T3548] FAT-fs (loop0): Directory bread(block 70) failed [ 280.443628][ T3548] FAT-fs (loop0): Directory bread(block 71) failed [ 280.450477][ T3548] FAT-fs (loop0): Directory bread(block 72) failed [ 280.450840][ T3535] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 353: padding at end of block bitmap is not set [ 280.458371][ T3548] FAT-fs (loop0): Directory bread(block 73) failed [ 280.491928][ T3542] fscrypt (loop2, inode 12): Error -61 getting encryption context [ 280.501309][ T3542] fscrypt (loop2, inode 12): Error -61 getting encryption context [ 280.540956][ T3552] loop4: detected capacity change from 0 to 512 [ 280.637546][ T3552] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 280.648092][ T286] EXT4-fs (loop2): unmounting filesystem. [ 280.663257][ T3552] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.738222][ T287] EXT4-fs (loop4): unmounting filesystem. [ 283.796504][ T369] kworker/u4:5: attempt to access beyond end of device [ 283.796504][ T369] loop0: rw=1, sector=1224, nr_sectors = 608 limit=256 [ 283.840727][ T369] kworker/u4:5: attempt to access beyond end of device [ 283.840727][ T369] loop0: rw=1, sector=1864, nr_sectors = 12944 limit=256 [ 283.884595][ T369] kworker/u4:5: attempt to access beyond end of device [ 283.884595][ T369] loop0: rw=1, sector=14808, nr_sectors = 4936 limit=256 [ 283.901615][ T3573] loop1: detected capacity change from 0 to 256 [ 283.927845][ T3573] FAT-fs (loop1): Directory bread(block 64) failed [ 283.941378][ T369] kworker/u4:5: attempt to access beyond end of device [ 283.941378][ T369] loop0: rw=1, sector=19744, nr_sectors = 3552 limit=256 [ 283.955595][ T3573] FAT-fs (loop1): Directory bread(block 65) failed [ 283.963110][ T3573] FAT-fs (loop1): Directory bread(block 66) failed [ 283.971287][ T369] kworker/u4:5: attempt to access beyond end of device [ 283.971287][ T369] loop0: rw=1, sector=23296, nr_sectors = 776 limit=256 [ 283.985325][ T3573] FAT-fs (loop1): Directory bread(block 67) failed [ 283.992589][ T3573] FAT-fs (loop1): Directory bread(block 68) failed [ 283.999257][ T3573] FAT-fs (loop1): Directory bread(block 69) failed [ 284.019039][ T3573] FAT-fs (loop1): Directory bread(block 70) failed [ 284.032244][ T3573] FAT-fs (loop1): Directory bread(block 71) failed [ 284.046454][ T3573] FAT-fs (loop1): Directory bread(block 72) failed [ 284.059712][ T3573] FAT-fs (loop1): Directory bread(block 73) failed [ 284.130066][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 284.130083][ T28] audit: type=1400 audit(1754025639.701:402): avc: denied { read } for pid=3577 comm="syz.0.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 284.156787][ T3578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.938'. [ 284.177276][ T3578] loop0: detected capacity change from 0 to 16 [ 284.184341][ T3578] erofs: Unknown parameter '˙˙˙˙˙˙01777777777777777777777˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙00000000000000000000000184467440737095516150xffffffffffffffff˙˙˙˙' [ 284.201819][ T3579] FAULT_INJECTION: forcing a failure. [ 284.201819][ T3579] name failslab, interval 1, probability 0, space 0, times 0 [ 284.221561][ T3579] CPU: 1 PID: 3579 Comm: syz.2.940 Not tainted 6.1.145-syzkaller-00027-g42472e1a4913 #0 [ 284.231321][ T3579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.241379][ T3579] Call Trace: [ 284.244658][ T3579] [ 284.247613][ T3579] __dump_stack+0x21/0x24 [ 284.251955][ T3579] dump_stack_lvl+0xee/0x150 [ 284.256551][ T3579] ? __cfi_dump_stack_lvl+0x8/0x8 [ 284.261583][ T3579] ? ____fput+0x15/0x20 [ 284.265740][ T3579] ? exit_to_user_mode_loop+0x9b/0xb0 [ 284.271112][ T3579] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 284.276918][ T3579] ? syscall_exit_to_user_mode+0x1a/0x30 [ 284.282645][ T3579] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.288739][ T3579] dump_stack+0x15/0x24 [ 284.292907][ T3579] should_fail_ex+0x3d4/0x520 [ 284.297591][ T3579] __should_failslab+0xac/0xf0 [ 284.302354][ T3579] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 284.308336][ T3579] should_failslab+0x9/0x20 [ 284.312848][ T3579] __kmem_cache_alloc_node+0x3d/0x2c0 [ 284.318223][ T3579] ? __cfi_mutex_lock+0x10/0x10 [ 284.323093][ T3579] ? delete_node+0x2f4/0xa60 [ 284.327684][ T3579] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 284.333665][ T3579] __kmalloc+0xa1/0x1e0 [ 284.337825][ T3579] ? __cfi___bpf_trace_kfree+0x10/0x10 [ 284.343316][ T3579] tracepoint_probe_unregister+0x1e6/0x8b0 [ 284.349128][ T3579] bpf_probe_unregister+0x61/0x70 [ 284.354158][ T3579] bpf_raw_tp_link_release+0x63/0x90 [ 284.359452][ T3579] bpf_link_free+0x13a/0x390 [ 284.364050][ T3579] ? bpf_link_put_deferred+0x20/0x20 [ 284.369340][ T3579] ? security_file_free+0xd8/0xf0 [ 284.374365][ T3579] bpf_link_release+0x15f/0x170 [ 284.379222][ T3579] ? __cfi_bpf_link_release+0x10/0x10 [ 284.384602][ T3579] __fput+0x1fc/0x8f0 [ 284.388590][ T3579] ? _raw_spin_unlock+0x4c/0x70 [ 284.393450][ T3579] ____fput+0x15/0x20 [ 284.397441][ T3579] task_work_run+0x1db/0x240 [ 284.402034][ T3579] ? __cfi_task_work_run+0x10/0x10 [ 284.407148][ T3579] ? __cfi___close_range+0x10/0x10 [ 284.412266][ T3579] ? do_user_addr_fault+0x9ac/0x1050 [ 284.417587][ T3579] exit_to_user_mode_loop+0x9b/0xb0 [ 284.422790][ T3579] exit_to_user_mode_prepare+0x5a/0xa0 [ 284.428248][ T3579] syscall_exit_to_user_mode+0x1a/0x30 [ 284.433711][ T3579] do_syscall_64+0x58/0xa0 [ 284.438123][ T3579] ? clear_bhb_loop+0x30/0x80 [ 284.442800][ T3579] ? clear_bhb_loop+0x30/0x80 [ 284.447479][ T3579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.453372][ T3579] RIP: 0033:0x7f65b338eb69 [ 284.457783][ T3579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.477394][ T3579] RSP: 002b:00007f65b31ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 284.485825][ T3579] RAX: 0000000000000000 RBX: 00007f65b35b6080 RCX: 00007f65b338eb69 [ 284.493797][ T3579] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 284.501769][ T3579] RBP: 00007f65b31ff090 R08: 0000000000000000 R09: 0000000000000000 [ 284.509751][ T3579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.517730][ T3579] R13: 0000000000000001 R14: 00007f65b35b6080 R15: 00007ffd94b45e38 [ 284.525722][ T3579] [ 284.529519][ C1] CFI failure at __traceiter_kfree+0x34/0x50 (target: tp_stub_func+0x0/0x10; expected type: 0x8682d211) [ 284.529715][ T3576] CFI failure at __traceiter_kfree+0x34/0x50 (target: tp_stub_func+0x0/0x10; expected type: 0x8682d211) [ 284.540751][ C1] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 284.540773][ C1] CPU: 1 PID: 3566 Comm: syz.3.936 Not tainted 6.1.145-syzkaller-00027-g42472e1a4913 #0 [ 284.567615][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.577747][ C1] RIP: 0010:__traceiter_kfree+0x34/0x50 [ 284.583288][ C1] Code: 8b 3d 88 3c ca 05 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba ef 2d 7d 79 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f [ 284.602889][ C1] RSP: 0018:ffffc900001b0bb0 EFLAGS: 00010213 [ 284.608957][ C1] RAX: ffffffff81711be0 RBX: ffff8881323fdc58 RCX: ffff88810f86bcc0 [ 284.616938][ C1] RDX: ffff8881323fdc58 RSI: ffffffff81a30f26 RDI: ffffc90000ef3000 [ 284.624899][ C1] RBP: ffffc900001b0bc8 R08: ffff8881f5c00000 R09: 00000000000a6dcf [ 284.632859][ C1] R10: 000000001ebd94fb R11: 0000000000000001 R12: ffffffff81c421b0 [ 284.640818][ C1] R13: ffff88811db2e7a8 R14: ffffffff81a30f26 R15: ffff88810cf0a810 [ 284.648794][ C1] FS: 0000555584f09500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 284.657725][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.664298][ C1] CR2: 0000001b2dc19ff8 CR3: 00000001088c4000 CR4: 00000000003526a0 [ 284.672261][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 284.680226][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 284.688188][ C1] Call Trace: [ 284.691454][ C1] [ 284.694293][ C1] ? shmem_free_in_core_inode+0x76/0xb0 [ 284.699833][ C1] kfree+0xc9/0xf0 [ 284.703551][ C1] shmem_free_in_core_inode+0x76/0xb0 [ 284.708915][ C1] ? __cfi_shmem_free_in_core_inode+0x10/0x10 [ 284.714978][ C1] i_callback+0x5a/0x80 [ 284.719127][ C1] rcu_do_batch+0x515/0xb90 [ 284.723626][ C1] ? rcu_core+0xe70/0xe70 [ 284.727954][ C1] ? swake_up_one_online+0x66/0x110 [ 284.733170][ C1] ? rcu_report_qs_rnp+0x384/0x390 [ 284.738280][ C1] rcu_core+0x5a5/0xe70 [ 284.742435][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 284.747630][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 284.753436][ C1] ? irqtime_account_irq+0x75/0x240 [ 284.758631][ C1] rcu_core_si+0x9/0x10 [ 284.762780][ C1] handle_softirqs+0x1d7/0x600 [ 284.767535][ C1] __do_softirq+0xb/0xd [ 284.771697][ C1] do_softirq+0xc6/0x120 [ 284.775930][ C1] [ 284.778851][ C1] [ 284.781771][ C1] ? __cfi_do_softirq+0x10/0x10 [ 284.786612][ C1] ? radix_tree_delete_item+0x2c8/0x410 [ 284.792179][ C1] __local_bh_enable_ip+0x75/0x80 [ 284.797206][ C1] _raw_spin_unlock_bh+0x50/0x60 [ 284.802147][ C1] bpf_link_free+0xc0/0x390 [ 284.806670][ C1] ? __kasan_record_aux_stack+0xb6/0xc0 [ 284.812225][ C1] ? bpf_link_put_deferred+0x20/0x20 [ 284.817512][ C1] ? task_work_add+0x250/0x330 [ 284.822276][ C1] ? __cfi_task_work_add+0x10/0x10 [ 284.827385][ C1] bpf_link_release+0x15f/0x170 [ 284.832236][ C1] ? __cfi_bpf_link_release+0x10/0x10 [ 284.837605][ C1] __fput+0x1fc/0x8f0 [ 284.841578][ C1] ? _raw_spin_unlock+0x4c/0x70 [ 284.846440][ C1] ____fput+0x15/0x20 [ 284.850423][ C1] task_work_run+0x1db/0x240 [ 284.855016][ C1] ? __cfi_task_work_run+0x10/0x10 [ 284.860125][ C1] ? __cfi___close_range+0x10/0x10 [ 284.865238][ C1] exit_to_user_mode_loop+0x9b/0xb0 [ 284.870426][ C1] exit_to_user_mode_prepare+0x5a/0xa0 [ 284.875892][ C1] syscall_exit_to_user_mode+0x1a/0x30 [ 284.881348][ C1] do_syscall_64+0x58/0xa0 [ 284.885751][ C1] ? clear_bhb_loop+0x30/0x80 [ 284.890434][ C1] ? clear_bhb_loop+0x30/0x80 [ 284.895103][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.900985][ C1] RIP: 0033:0x7f0d9178eb69 [ 284.905396][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.925012][ C1] RSP: 002b:00007ffe56892878 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 284.933428][ C1] RAX: 0000000000000000 RBX: 00007f0d919b7ba0 RCX: 00007f0d9178eb69 [ 284.941414][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 284.949381][ C1] RBP: 00007f0d919b7ba0 R08: 00000000000003b4 R09: 0000001456892b6f [ 284.957358][ C1] R10: 00007f0d919b7ac0 R11: 0000000000000246 R12: 000000000004575a [ 284.965329][ C1] R13: 00007f0d919b6080 R14: ffffffffffffffff R15: 00007ffe56892990 [ 284.973319][ C1] [ 284.976334][ C1] Modules linked in: [ 284.980294][ T3576] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 284.980324][ C1] ---[ end trace 0000000000000000 ]--- [ 284.986380][ T3576] CPU: 0 PID: 3576 Comm: syz.4.937 Tainted: G D 6.1.145-syzkaller-00027-g42472e1a4913 #0 [ 284.986404][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.986417][ T3576] RIP: 0010:__traceiter_kfree+0x34/0x50 [ 284.991893][ C1] RIP: 0010:__traceiter_kfree+0x34/0x50 [ 285.003048][ T3576] Code: 8b 3d 88 3c ca 05 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba ef 2d 7d 79 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f [ 285.003070][ T3576] RSP: 0018:ffffc90000d7fc00 EFLAGS: 00010213 [ 285.013191][ C1] Code: 8b 3d 88 3c ca 05 4d 85 ff 74 2e 48 89 d3 49 89 f6 49 8b 07 49 8b 7f 08 4c 89 f6 48 89 da 41 ba ef 2d 7d 79 44 03 50 fc 74 02 <0f> 0b ff d0 49 83 7f 18 00 4d 8d 7f 18 75 d8 31 c0 5b 41 5e 41 5f [ 285.018714][ T3576] [ 285.018722][ T3576] RAX: ffffffff81711be0 RBX: ffff888120f67b00 RCX: ffff88811ea80000 [ 285.024275][ C1] RSP: 0018:ffffc900001b0bb0 EFLAGS: 00010213 [ 285.043859][ T3576] RDX: ffff888120f67b00 RSI: ffffffff8180f545 RDI: ffffc90000ef3000 [ 285.043881][ T3576] RBP: ffffc90000d7fc18 R08: dffffc0000000000 R09: ffffed1023cd6601 [ 285.043898][ T3576] R10: 000000001ebd94fb R11: ffffffff8180f530 R12: 1ffff110241ecf63 [ 285.050047][ C1] [ 285.050056][ C1] RAX: ffffffff81711be0 RBX: ffff8881323fdc58 RCX: ffff88810f86bcc0 [ 285.069650][ T3576] R13: dffffc0000000000 R14: ffffffff8180f545 R15: ffff88810cf0a810 [ 285.069672][ T3576] FS: 000055557d862500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 285.069692][ T3576] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.072032][ C1] RDX: ffff8881323fdc58 RSI: ffffffff81a30f26 RDI: ffffc90000ef3000 [ 285.079975][ T3576] CR2: 0000001b2dc18ff8 CR3: 000000010abd2000 CR4: 00000000003526b0 [ 285.086059][ C1] RBP: ffffc900001b0bc8 R08: ffff8881f5c00000 R09: 00000000000a6dcf [ 285.094098][ T3576] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.094112][ T3576] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 285.094127][ T3576] Call Trace: [ 285.102101][ C1] R10: 000000001ebd94fb R11: 0000000000000001 R12: ffffffff81c421b0 [ 285.110054][ T3576] [ 285.112389][ C1] R13: ffff88811db2e7a8 R14: ffffffff81a30f26 R15: ffff88810cf0a810 [ 285.120343][ T3576] ? bpf_raw_tp_link_dealloc+0x15/0x20 [ 285.128318][ C1] FS: 0000555584f09500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 285.137224][ T3576] kfree+0xc9/0xf0 [ 285.143871][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.151816][ T3576] bpf_raw_tp_link_dealloc+0x15/0x20 [ 285.159800][ C1] CR2: 0000001b2dc19ff8 CR3: 00000001088c4000 CR4: 00000000003526a0 [ 285.167856][ T3576] bpf_link_free+0x321/0x390 [ 285.175858][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 285.183804][ T3576] ? __kasan_record_aux_stack+0xb6/0xc0 [ 285.187096][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 285.195065][ T3576] ? bpf_link_put_deferred+0x20/0x20 [ 285.198020][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 285.205986][ T3576] ? task_work_add+0x250/0x330 [ 285.206013][ T3576] ? __cfi_task_work_add+0x10/0x10 [ 285.206036][ T3576] bpf_link_release+0x15f/0x170 [ 285.206063][ T3576] ? __cfi_bpf_link_release+0x10/0x10 [ 285.206090][ T3576] __fput+0x1fc/0x8f0 [ 285.206111][ T3576] ? _raw_spin_unlock+0x4c/0x70 [ 285.206138][ T3576] ____fput+0x15/0x20 [ 285.206156][ T3576] task_work_run+0x1db/0x240 [ 285.206177][ T3576] ? __cfi_task_work_run+0x10/0x10 [ 285.206199][ T3576] ? __cfi___close_range+0x10/0x10 [ 285.206224][ T3576] ? do_user_addr_fault+0x9ac/0x1050 [ 285.206249][ T3576] exit_to_user_mode_loop+0x9b/0xb0 [ 285.206268][ T3576] exit_to_user_mode_prepare+0x5a/0xa0 [ 285.206288][ T3576] syscall_exit_to_user_mode+0x1a/0x30 [ 285.206316][ T3576] do_syscall_64+0x58/0xa0 [ 285.206332][ T3576] ? clear_bhb_loop+0x30/0x80 [ 285.206351][ T3576] ? clear_bhb_loop+0x30/0x80 [ 285.206371][ T3576] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.206390][ T3576] RIP: 0033:0x7f25ff98eb69 [ 285.206407][ T3576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.206422][ T3576] RSP: 002b:00007fff21f38b18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 285.206441][ T3576] RAX: 0000000000000000 RBX: 0000000000045613 RCX: 00007f25ff98eb69 [ 285.206454][ T3576] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 285.206465][ T3576] RBP: 00007f25ffbb7ba0 R08: 0000000000000001 R09: 0000001421f38e0f [ 285.206477][ T3576] R10: 00007f25ff600000 R11: 0000000000000246 R12: 00007f25ffbb5fac [ 285.206490][ T3576] R13: 00007f25ffbb5fa0 R14: ffffffffffffffff R15: 00007fff21f38c30 [ 285.206508][ T3576] [ 285.206514][ T3576] Modules linked in: [ 285.212204][ C1] Kernel Offset: disabled [ 285.455781][ C1] Rebooting in 86400 seconds..