last executing test programs: 2m3.763222376s ago: executing program 0 (id=195): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@dots}, {@nodots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@dots}]}, 0x4, 0x157, &(0x7f00000004c0)="$eJzs2z+LE0EcBuBfzB+jNqnFYsHGKqifQJEI4oIipLFSiDaJBEyz2piP4hcUJFW6EV1J7nLJkRzs7ZE8T5MX3hmYKbLDLOyHB1/Go+ns8/TtIrqNRrSeRRbLRvTiVjSjNA8A4JgsU4rfKaV0ex53fkZK6cKQH7UsDACozB7nPwBwZJz/AHB6nP8AcHo68f718zwfvMuybsSveTEshuVv2b98lQ8eZ//01rMWRTFsrvonZZ+d79tx93//dGvfiUcPy/5v9+JNvtHfi1H12wcAAICT0M9Wtt7v+/1dfZnOvB/YuL+34n7r2rYBABxg9u37+ONk8unrQSHiKrOOIrQj4gYsQxCqDXU/mYCqrf/0da8EAAAAAAAAAAAAAADYZe/vgbqXD16m3dPr3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs+hMAAP//P3BOpw==") syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r3, 0x0, 0x60) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpriority(0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) 2m3.551004813s ago: executing program 0 (id=196): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="add50e3e9a10ed602049917979194bb53a673ce8765382eff5ae40fc95b3f036ece49f4d6926b5c21ef0aff862d576165026658e3f75de5dfe465e17d0b4ccb081b83d9c82f1f35711b96e870ed48b1f5dba49c34a014769a16866a6801397eafe1e2c45e8ed8d1ef6a4efefc192235b21198c0d796701e7fb1e1ed64b9fed7b5d908f1b7e259ead78a230a8a24dbf2c424cc35f5a8328dc54738a0f4196f1e0c76a9cafdd3b54bc6d3880754ed696c406854394f381b82d9de8f4fc8b8ac772e2090621ae6cf052682339d3e2c52aa05560c5dc36d926a4178beeeff781c9"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='netfs_rreq_ref\x00', r2, 0x0, 0x1}, 0x18) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000480)={0x10, 0x0, 0x25dfdbfb, 0x808b9027}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x80, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x929) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0xa}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r9, 0x25, &(0x7f0000002380)) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001240)=ANY=[@ANYRESHEX=r3, @ANYRES32=r0, @ANYBLOB="c90ca5975d7ce4fd0c88ae57348260811ada244b0e5547873f17f1abac0924c0c3d5e7f46141266f2acbf076229148f85c6765930c1e1b9c27c7082757671fe57744a9eb189af3987cf30d0c3f649454360f6f48162fe163c7ebe20100a9b3bfaf7ea38ed98973ee1fcc13dae94b2ebae61b6b0fa9b6e52cfe102e951b8124180a87866ae0b2a9d4b715f21b3c7d88d8f0e41ac25787dd24dca748e7a634ed741e4cf328dc8ca8f61c135bcc95378b70ecc0361d3ddf948c665d6c0a6b0b96a507d2ab3e4d580e4f3533c7086156c3e27fe8ab85f68014448e2b1f08fad447588f7034d4fd", @ANYRESOCT=r1, @ANYRES16=0x0, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x20000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000280)="32780f64398323756224d03a", 0xc, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r4, 0x1) 2m3.511504836s ago: executing program 0 (id=197): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000900)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "90c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae199", "11da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e"}}}}}}, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) ioctl$BLKSECDISCARD(r2, 0x127d, &(0x7f00000000c0)=0x101) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x94b6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r4, &(0x7f0000000140)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x400, @loopback={0xff00000000000000}, 0xff}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000001"], 0x18}}], 0x1, 0x844) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000001000000850000000c000000b700000000000000950000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000003c0)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000340), &(0x7f0000000580)=r6}, 0x20) fallocate(r2, 0x8, 0x4000, 0x4000) brk(0x689d80000000) openat(0xffffffffffffff9c, 0x0, 0x1c3a42, 0x84) 2m3.166642454s ago: executing program 0 (id=202): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_robust_list(0x0, 0x0, &(0x7f0000000580)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5, 0x0, 0x8}, 0x18) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xffa8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) truncate(&(0x7f0000000080)='./file1\x00', 0xfff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r8 = syz_open_pts(0xffffffffffffffff, 0x28101) r9 = dup3(r8, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r9, 0x0, 0x0) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) 2m2.793567874s ago: executing program 0 (id=211): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x28, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0xfff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) getpeername$packet(r1, &(0x7f0000001380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000013c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001500)={0x6, 0x1b, &(0x7f00000011c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x6, 0x1, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x4}, @generic={0x10, 0xa, 0x8, 0x3, 0x401}, @alu={0x4, 0x0, 0x0, 0x4, 0xb, 0x50, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000012c0)='GPL\x00', 0xfffffbff, 0x27, &(0x7f0000001340)=""/39, 0x41100, 0x10, '\x00', r3, 0x25, r1, 0x8, &(0x7f0000001400)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000001440)={0x5, 0x2, 0x6, 0xffffff6a}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001480)=[{0x4, 0x4, 0x0, 0x5}, {0x3, 0x5, 0xb, 0x7}, {0x3, 0x4, 0x9, 0x4}, {0x0, 0x1, 0xa, 0xa}, {0x5, 0x5, 0x5, 0xc}, {0x5, 0x3, 0xe, 0x4}, {0x4, 0x4, 0x4, 0x3}, {0x0, 0x3, 0x3, 0x3}], 0x10, 0x401}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 2m1.689843933s ago: executing program 0 (id=224): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00e1ffffff0000000000deffffffffffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) getitimer(0x1, &(0x7f0000000000)) 2m1.689545163s ago: executing program 32 (id=224): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00e1ffffff0000000000deffffffffffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) getitimer(0x1, &(0x7f0000000000)) 1m11.979987141s ago: executing program 1 (id=1116): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000100), 0x1, 0x599, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) write$selinux_load(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xffa8) truncate(&(0x7f0000000080)='./file1\x00', 0xfff) getpid() 1m11.885829389s ago: executing program 1 (id=1118): socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @ipv4, @local, {[@routing={0x29}]}}}}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002700)=""/4096, 0x1a00}], 0x0, 0x11a}, 0x20) 1m11.841639632s ago: executing program 1 (id=1119): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000008000]}}) 1m11.826134724s ago: executing program 1 (id=1120): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x6}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@remote, @in6=@private0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000080000001b00000018000180140002007465616d5f736c6176655f30"], 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x3) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) 1m10.967609393s ago: executing program 1 (id=1137): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa66a6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@private1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x95f, 0x9, 0x1, 0x500, 0x9}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1ffffffffffffe06, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 1m10.681651276s ago: executing program 1 (id=1142): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000008000]}}) 1m10.681528436s ago: executing program 33 (id=1142): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000008000]}}) 2.705651682s ago: executing program 2 (id=2651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x6}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000380)) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000080000001b00000018000180140002007465616d5f736c6176655f30"], 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x3) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") r9 = socket$pptp(0x18, 0x1, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) 2.632072408s ago: executing program 2 (id=2657): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@dots}, {@nodots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@dots}]}, 0x4, 0x157, &(0x7f00000004c0)="$eJzs2z+LE0EcBuBfzB+jNqnFYsHGKqifQJEI4oIipLFSiDaJBEyz2piP4hcUJFW6EV1J7nLJkRzs7ZE8T5MX3hmYKbLDLOyHB1/Go+ns8/TtIrqNRrSeRRbLRvTiVjSjNA8A4JgsU4rfKaV0ex53fkZK6cKQH7UsDACozB7nPwBwZJz/AHB6nP8AcHo68f718zwfvMuybsSveTEshuVv2b98lQ8eZ//01rMWRTFsrvonZZ+d79tx93//dGvfiUcPy/5v9+JNvtHfi1H12wcAAICT0M9Wtt7v+/1dfZnOvB/YuL+34n7r2rYBABxg9u37+ONk8unrQSHiKrOOIrQj4gYsQxCqDXU/mYCqrf/0da8EAAAAAAAAAAAAAADYZe/vgbqXD16m3dPr3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs+hMAAP//P3BOpw==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 2.384813108s ago: executing program 2 (id=2664): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa66a6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@private1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x95f, 0x9, 0x1, 0x500, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1ffffffffffffe06, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 2.260581908s ago: executing program 2 (id=2672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) set_robust_list(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) creat(&(0x7f0000000240)='./file1\x00', 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffffffc}]}}]}, 0x3c}}, 0x800) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 1.657753107s ago: executing program 2 (id=2686): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@dots}, {@nodots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@dots}]}, 0x4, 0x157, &(0x7f00000004c0)="$eJzs2z+LE0EcBuBfzB+jNqnFYsHGKqifQJEI4oIipLFSiDaJBEyz2piP4hcUJFW6EV1J7nLJkRzs7ZE8T5MX3hmYKbLDLOyHB1/Go+ns8/TtIrqNRrSeRRbLRvTiVjSjNA8A4JgsU4rfKaV0ex53fkZK6cKQH7UsDACozB7nPwBwZJz/AHB6nP8AcHo68f718zwfvMuybsSveTEshuVv2b98lQ8eZ//01rMWRTFsrvonZZ+d79tx93//dGvfiUcPy/5v9+JNvtHfi1H12wcAAICT0M9Wtt7v+/1dfZnOvB/YuL+34n7r2rYBABxg9u37+ONk8unrQSHiKrOOIrQj4gYsQxCqDXU/mYCqrf/0da8EAAAAAAAAAAAAAADYZe/vgbqXD16m3dPr3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs+hMAAP//P3BOpw==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 1.444459523s ago: executing program 2 (id=2689): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa66a6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1ffffffffffffe06, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 1.393100758s ago: executing program 4 (id=2691): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x0, 0x4, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) 1.338431422s ago: executing program 4 (id=2694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x6}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000000) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in=@remote, @in6=@private0}}, {{}, 0x0, @in6=@loopback}}, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000080000001b00000018000180140002007465616d5f736c6176655f30"], 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x3) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") r9 = socket$pptp(0x18, 0x1, 0x2) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r10 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) write$binfmt_register(r10, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) 1.295059836s ago: executing program 3 (id=2697): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tee(r2, r1, 0x7, 0x8) sigaltstack(0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000001c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x2040, 0x0) pause() fcntl$setlease(r8, 0x400, 0x0) fremovexattr(r8, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bind$unix(r3, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) 1.288998856s ago: executing program 5 (id=2698): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@dots}, {@nodots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@dots}]}, 0x4, 0x157, &(0x7f00000004c0)="$eJzs2z+LE0EcBuBfzB+jNqnFYsHGKqifQJEI4oIipLFSiDaJBEyz2piP4hcUJFW6EV1J7nLJkRzs7ZE8T5MX3hmYKbLDLOyHB1/Go+ns8/TtIrqNRrSeRRbLRvTiVjSjNA8A4JgsU4rfKaV0ex53fkZK6cKQH7UsDACozB7nPwBwZJz/AHB6nP8AcHo68f718zwfvMuybsSveTEshuVv2b98lQ8eZ//01rMWRTFsrvonZZ+d79tx93//dGvfiUcPy/5v9+JNvtHfi1H12wcAAICT0M9Wtt7v+/1dfZnOvB/YuL+34n7r2rYBABxg9u37+ONk8unrQSHiKrOOIrQj4gYsQxCqDXU/mYCqrf/0da8EAAAAAAAAAAAAAADYZe/vgbqXD16m3dPr3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs+hMAAP//P3BOpw==") syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) write$selinux_validatetrans(0xffffffffffffffff, 0x0, 0x60) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getpriority(0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 1.230133201s ago: executing program 4 (id=2699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 1.12415672s ago: executing program 4 (id=2700): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280080002400000000e080001400000001405000300630000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tee(r2, r1, 0x7, 0x8) sigaltstack(0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000001c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x2040, 0x0) pause() fcntl$setlease(r8, 0x400, 0x0) fremovexattr(r8, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bind$unix(r3, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) 888.597838ms ago: executing program 5 (id=2701): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000400)='rxrpc_peer\x00', r0, 0x0, 0xfffffffffffffff9}, 0x18) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 790.326986ms ago: executing program 5 (id=2704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5fbc163"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfd, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x50) 714.418752ms ago: executing program 5 (id=2705): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @v={0x9, 0x2, 0x5, 0x6, 0x6, 0x5, 0xbe, {0xd8, 0xff, "66f8878f34dfbd2a"}, 0x33, 0x8, 0x4, 0x6, 0x4, "e46e3441"}}, 0x1d) 619.48278ms ago: executing program 5 (id=2707): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 592.771302ms ago: executing program 6 (id=2708): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa66a6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@private1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x95f, 0x9, 0x1, 0x500, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1ffffffffffffe06, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 525.733968ms ago: executing program 5 (id=2709): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280080002400000000e080001400000001405000300630000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tee(r2, r1, 0x7, 0x8) sigaltstack(0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$eJzs3MtvG8UfAPDv+pG+m/yq/oA+gCBAlAJJk5bSAxcQSBxAQoJDOYYkrUrdBjVBIlUFBaFyRJU4cUEckfgLOMEFASckLhzgjipVqJcWTkYb76a2a+dVP0j9+UjrzuyuO/P1ztizM7EDGFij6UMSsTMifo+I4Vq28YTR2j+3blya/vvGpekkqtU3/kpK6eGbNy5N56fmz9uRZ0oRhU+SONCi3PnFi2enKpXZC1l+fOHcu+PzixefOXNu6vTs6dnzkydOHDs68dzxyWc7Emca1839H8wd3PfKW1dfmz559e2fvkny+Jvi6JDRlQ4+Xq12uLj+2lWXrrUMNoNirZtGean/D0cxbl+84Xj5475WDuiqarVava/94ctV4B6WRL9rAPRH/kGf3v/mW4+GHv8J11+o3QClcd/KttqRUhSyc8pN97edNBoRJy//82W6RXfmIQAAGnyXjn+ebjX+K0T9vNDubA1lJCL+FxF7IuJ4ROyNiP9HLJ17f0Q8sM7ymxdJ7hz/FK5tKLA1Ssd/z2drW43jv3z0FyPFLLdrKf5ycupMZfZI9pocivKWND+xQhnfv/TrZ+2O1Y//0i0tPx8LZvW4VtrS+JyZqYWpu4m53vWPIvaXWsWfLK8EJBGxLyL2b7CMM4e/Ptju2Orxr6AD60zVryKeqF3/y9EUfy5ZeX1yfGtUZo+M563iTj//cuX1duXfVfwdkF7/7S3b/3L8I0n9eu38ev73L55MH6/88Wnbe5qNtv+h5M2Gfe9PLSxcmIgYSl6tVbp+/2TTeZO3z0/jP/Ro6/6/J26/EgciIm3ED0bEQxHxcFb3R37bveqr8OOLj72z8fi7K41/Zu3XvzockTeExaHIEst7WieKZ3/4tqHQkdbx7257/Y8tpQ5le9by/reWeq23NQMAAMBmVYiInZEUxpbThcLYWO1v+PfG9kJlbn7hqVNz752fqX1HYCTKhXyma7huPnQiu63P85NN+aPZvPHnxW1L+bHpucpMv4OHAbejTf9P/Vnsd+2ArvN9LRhc+j8MLv0fBted/X9rX+oB9F6Lz/9t/agH0Hutxv8fruWJOztfF6C3mvq/ZT8YIOb/YHBtpP97z4B7Q2mln2we6mlVgN6Z3xarf0leYjMl8l+u6UYR5bS1HI6IxYtR6HukEl1M9PudCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+DQAA//+CSeFs") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000001c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x2040, 0x0) pause() fcntl$setlease(r8, 0x400, 0x0) fremovexattr(r8, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bind$unix(r3, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) 482.366491ms ago: executing program 6 (id=2710): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 360.507941ms ago: executing program 3 (id=2711): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa66a6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 346.320342ms ago: executing program 6 (id=2712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 320.062784ms ago: executing program 6 (id=2713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) recvfrom(0xffffffffffffffff, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0) 287.209377ms ago: executing program 6 (id=2714): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa66a6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000009180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x1ffffffffffffe06, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000440)={@random="871000bb00", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x2, 0x7, 0x24, 0x65, 0x0, 0x9, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e20, 0x4, 0x1, 0xb, 0x0, 0x0, 0x6, 0x1, "196b36", 0x2, "3571a4"}}}}}}, 0x0) 286.900367ms ago: executing program 3 (id=2715): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) 254.98644ms ago: executing program 4 (id=2716): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@dots}, {@nodots}, {@fat=@discard}, {@dots}, {@dots}, {@fat=@flush}, {@nodots}, {@fat=@dmask={'dmask', 0x3d, 0x4}}, {@dots}]}, 0x4, 0x157, &(0x7f00000004c0)="$eJzs2z+LE0EcBuBfzB+jNqnFYsHGKqifQJEI4oIipLFSiDaJBEyz2piP4hcUJFW6EV1J7nLJkRzs7ZE8T5MX3hmYKbLDLOyHB1/Go+ns8/TtIrqNRrSeRRbLRvTiVjSjNA8A4JgsU4rfKaV0ex53fkZK6cKQH7UsDACozB7nPwBwZJz/AHB6nP8AcHo68f718zwfvMuybsSveTEshuVv2b98lQ8eZ//01rMWRTFsrvonZZ+d79tx93//dGvfiUcPy/5v9+JNvtHfi1H12wcAAICT0M9Wtt7v+/1dfZnOvB/YuL+34n7r2rYBABxg9u37+ONk8unrQSHiKrOOIrQj4gYsQxCqDXU/mYCqrf/0da8EAAAAAAAAAAAAAADYZe/vgbqXD16m3dPr3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs+hMAAP//P3BOpw==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) 241.801091ms ago: executing program 3 (id=2717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000040000009900"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x400007}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x1, 0x80, 0x8000000, 0x8000021e}, &(0x7f0000000940)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) 167.837436ms ago: executing program 6 (id=2718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) set_robust_list(0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) creat(&(0x7f0000000240)='./file1\x00', 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0xfffffffc}]}}]}, 0x3c}}, 0x800) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r8, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 103.505372ms ago: executing program 3 (id=2719): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/13], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) write$nci(r0, &(0x7f0000000280)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @v={0x9, 0x2, 0x5, 0x6, 0x6, 0x5, 0xbe, {0xd8, 0xff, "66f8878f34dfbd2a"}, 0x33, 0x8, 0x4, 0x6, 0x4, "e46e3441"}}, 0x1d) 86.573643ms ago: executing program 4 (id=2720): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tee(r2, r1, 0x7, 0x8) sigaltstack(0x0, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000001c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0/file0\x00', 0x2040, 0x0) pause() fcntl$setlease(r8, 0x400, 0x0) fremovexattr(r8, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bind$unix(r3, &(0x7f00000003c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) 0s ago: executing program 3 (id=2721): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x200000000006, 0xbc, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r8, 0x2) r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r9, 0x2) pread64(r7, &(0x7f0000001100)=""/213, 0xd5, 0x405) munlockall() ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, 0x0, 0x0) kernel console output (not intermixed with test programs): 0][ T8651] random: crng reseeded on system resumption [ 128.048540][ T8660] lo speed is unknown, defaulting to 1000 [ 128.055902][ T8658] lo speed is unknown, defaulting to 1000 [ 128.118581][ T8664] loop5: detected capacity change from 0 to 128 [ 128.239167][ T8669] FAULT_INJECTION: forcing a failure. [ 128.239167][ T8669] name failslab, interval 1, probability 0, space 0, times 0 [ 128.251929][ T8669] CPU: 1 UID: 0 PID: 8669 Comm: syz.6.1628 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 128.251971][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.251984][ T8669] Call Trace: [ 128.251991][ T8669] [ 128.251999][ T8669] __dump_stack+0x1d/0x30 [ 128.252020][ T8669] dump_stack_lvl+0xe8/0x140 [ 128.252043][ T8669] dump_stack+0x15/0x1b [ 128.252057][ T8669] should_fail_ex+0x265/0x280 [ 128.252092][ T8669] should_failslab+0x8c/0xb0 [ 128.252118][ T8669] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 128.252189][ T8669] ? __d_alloc+0x3d/0x340 [ 128.252222][ T8669] __d_alloc+0x3d/0x340 [ 128.252259][ T8669] d_alloc_pseudo+0x1e/0x80 [ 128.252286][ T8669] alloc_file_pseudo+0x71/0x160 [ 128.252399][ T8669] ? __list_add_valid_or_report+0x38/0xe0 [ 128.252429][ T8669] anon_inode_getfile+0xa0/0x120 [ 128.252620][ T8669] __se_sys_perf_event_open+0xb69/0x11c0 [ 128.252661][ T8669] __x64_sys_perf_event_open+0x67/0x80 [ 128.252763][ T8669] x64_sys_call+0x7bd/0x2ff0 [ 128.252783][ T8669] do_syscall_64+0xd2/0x200 [ 128.252825][ T8669] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.252847][ T8669] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.252867][ T8669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.252890][ T8669] RIP: 0033:0x7fcec2eaebe9 [ 128.252973][ T8669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.252992][ T8669] RSP: 002b:00007fcec1517038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 128.253011][ T8669] RAX: ffffffffffffffda RBX: 00007fcec30d5fa0 RCX: 00007fcec2eaebe9 [ 128.253024][ T8669] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000300 [ 128.253116][ T8669] RBP: 00007fcec1517090 R08: 0000000000000000 R09: 0000000000000000 [ 128.253131][ T8669] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 128.253145][ T8669] R13: 00007fcec30d6038 R14: 00007fcec30d5fa0 R15: 00007fff71a6db08 [ 128.253163][ T8669] [ 128.498177][ T8678] random: crng reseeded on system resumption [ 128.557456][ T8686] loop9: detected capacity change from 0 to 7 [ 128.565533][ T8686] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.573678][ T8686] Buffer I/O error on dev loop9, logical block 0, async page read [ 128.581514][ T8686] loop9: unable to read partition table [ 128.588120][ T8686] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 128.588120][ T8686] ) failed (rc=-5) [ 128.628490][ T8688] lo speed is unknown, defaulting to 1000 [ 128.649969][ T8690] loop6: detected capacity change from 0 to 128 [ 128.745967][ T8696] loop4: detected capacity change from 0 to 1024 [ 128.754961][ T8696] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 128.785317][ T8696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.820543][ T8704] loop6: detected capacity change from 0 to 128 [ 128.828429][ T8696] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 129.182083][ T8714] netlink: 'syz.6.1642': attribute type 4 has an invalid length. [ 129.189953][ T8714] netlink: 17 bytes leftover after parsing attributes in process `syz.6.1642'. [ 129.356313][ T8716] loop5: detected capacity change from 0 to 512 [ 129.365019][ T8716] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 129.380027][ T8716] EXT4-fs (loop5): 1 truncate cleaned up [ 129.422472][ T8716] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.431250][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.472873][ T8716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.510391][ T8719] loop4: detected capacity change from 0 to 1024 [ 129.518155][ T8719] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 129.535423][ T8719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.549745][ T8719] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 129.969765][ T8744] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 130.136873][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.224046][ T8755] loop5: detected capacity change from 0 to 1024 [ 130.231686][ T8755] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 130.303777][ T8755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.390931][ T8755] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 130.408449][ T8762] loop9: detected capacity change from 0 to 7 [ 130.414828][ T8762] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.422813][ T8762] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.430638][ T8762] loop9: unable to read partition table [ 130.436608][ T8762] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 130.436608][ T8762] ) failed (rc=-5) [ 130.935126][ T8782] loop9: detected capacity change from 0 to 7 [ 130.960283][ T8782] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.980556][ T8782] Buffer I/O error on dev loop9, logical block 0, async page read [ 130.988438][ T8782] loop9: unable to read partition table [ 131.000969][ T8788] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 131.012451][ T8782] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 131.012451][ T8782] ) failed (rc=-5) [ 131.114642][ T4232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.134547][ T8797] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 131.171625][ T8801] FAULT_INJECTION: forcing a failure. [ 131.171625][ T8801] name failslab, interval 1, probability 0, space 0, times 0 [ 131.184317][ T8801] CPU: 0 UID: 0 PID: 8801 Comm: syz.5.1674 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 131.184343][ T8801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 131.184355][ T8801] Call Trace: [ 131.184363][ T8801] [ 131.184372][ T8801] __dump_stack+0x1d/0x30 [ 131.184407][ T8801] dump_stack_lvl+0xe8/0x140 [ 131.184429][ T8801] dump_stack+0x15/0x1b [ 131.184448][ T8801] should_fail_ex+0x265/0x280 [ 131.184484][ T8801] ? genl_start+0x117/0x390 [ 131.184505][ T8801] should_failslab+0x8c/0xb0 [ 131.184573][ T8801] __kmalloc_cache_noprof+0x4c/0x320 [ 131.184603][ T8801] genl_start+0x117/0x390 [ 131.184624][ T8801] __netlink_dump_start+0x331/0x520 [ 131.184653][ T8801] genl_family_rcv_msg_dumpit+0x115/0x180 [ 131.184683][ T8801] ? __pfx_genl_start+0x10/0x10 [ 131.184723][ T8801] ? __pfx_genl_dumpit+0x10/0x10 [ 131.184742][ T8801] ? __pfx_genl_done+0x10/0x10 [ 131.184769][ T8801] genl_rcv_msg+0x3f0/0x460 [ 131.184826][ T8801] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 131.184851][ T8801] netlink_rcv_skb+0x120/0x220 [ 131.184898][ T8801] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.184929][ T8801] genl_rcv+0x28/0x40 [ 131.184951][ T8801] netlink_unicast+0x5c0/0x690 [ 131.185053][ T8801] netlink_sendmsg+0x58b/0x6b0 [ 131.185204][ T8801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.185237][ T8801] __sock_sendmsg+0x145/0x180 [ 131.185336][ T8801] ____sys_sendmsg+0x31e/0x4e0 [ 131.185430][ T8801] ___sys_sendmsg+0x17b/0x1d0 [ 131.185478][ T8801] __x64_sys_sendmsg+0xd4/0x160 [ 131.185519][ T8801] x64_sys_call+0x191e/0x2ff0 [ 131.185560][ T8801] do_syscall_64+0xd2/0x200 [ 131.185583][ T8801] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.185645][ T8801] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 131.185666][ T8801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.185686][ T8801] RIP: 0033:0x7f468ce3ebe9 [ 131.185702][ T8801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.185721][ T8801] RSP: 002b:00007f468b49f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.185791][ T8801] RAX: ffffffffffffffda RBX: 00007f468d065fa0 RCX: 00007f468ce3ebe9 [ 131.185865][ T8801] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005 [ 131.185880][ T8801] RBP: 00007f468b49f090 R08: 0000000000000000 R09: 0000000000000000 [ 131.185894][ T8801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.185970][ T8801] R13: 00007f468d066038 R14: 00007f468d065fa0 R15: 00007ffe12075018 [ 131.185987][ T8801] [ 131.555238][ T29] kauditd_printk_skb: 368 callbacks suppressed [ 131.555255][ T29] audit: type=1400 audit(1754456155.374:10254): avc: denied { ioctl } for pid=8807 comm="syz.5.1679" path="socket:[25804]" dev="sockfs" ino=25804 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.557663][ T8808] futex_wake_op: syz.5.1679 tries to shift op by 144; fix this program [ 131.661882][ T29] audit: type=1326 audit(1754456155.474:10255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 131.685420][ T29] audit: type=1326 audit(1754456155.474:10256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 131.756532][ T29] audit: type=1326 audit(1754456155.484:10257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 131.780082][ T29] audit: type=1326 audit(1754456155.484:10258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 131.803626][ T29] audit: type=1326 audit(1754456155.484:10259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 131.965213][ T29] audit: type=1326 audit(1754456155.584:10260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 131.988761][ T29] audit: type=1326 audit(1754456155.584:10261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 132.012311][ T29] audit: type=1326 audit(1754456155.584:10262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 132.035869][ T29] audit: type=1326 audit(1754456155.684:10263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.5.1680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 132.100205][ T8822] loop6: detected capacity change from 0 to 512 [ 132.110283][ T8822] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 132.130355][ T8822] EXT4-fs (loop6): 1 truncate cleaned up [ 132.137458][ T8822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.137828][ T8827] FAULT_INJECTION: forcing a failure. [ 132.137828][ T8827] name failslab, interval 1, probability 0, space 0, times 0 [ 132.162356][ T8827] CPU: 1 UID: 0 PID: 8827 Comm: syz.2.1685 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 132.162439][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.162453][ T8827] Call Trace: [ 132.162459][ T8827] [ 132.162467][ T8827] __dump_stack+0x1d/0x30 [ 132.162490][ T8827] dump_stack_lvl+0xe8/0x140 [ 132.162512][ T8827] dump_stack+0x15/0x1b [ 132.162530][ T8827] should_fail_ex+0x265/0x280 [ 132.162614][ T8827] should_failslab+0x8c/0xb0 [ 132.162641][ T8827] kmem_cache_alloc_noprof+0x50/0x310 [ 132.162671][ T8827] ? skb_clone+0x151/0x1f0 [ 132.162705][ T8827] skb_clone+0x151/0x1f0 [ 132.162799][ T8827] pfkey_sendmsg+0x2cc/0x900 [ 132.162856][ T8827] ? avc_has_perm+0xf7/0x180 [ 132.162913][ T8827] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 132.162935][ T8827] __sock_sendmsg+0x145/0x180 [ 132.162977][ T8827] ____sys_sendmsg+0x31e/0x4e0 [ 132.163009][ T8827] ___sys_sendmsg+0x17b/0x1d0 [ 132.163051][ T8827] __x64_sys_sendmsg+0xd4/0x160 [ 132.163127][ T8827] x64_sys_call+0x191e/0x2ff0 [ 132.163154][ T8827] do_syscall_64+0xd2/0x200 [ 132.163179][ T8827] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 132.163212][ T8827] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.163234][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.163257][ T8827] RIP: 0033:0x7f81bdd5ebe9 [ 132.163274][ T8827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.163293][ T8827] RSP: 002b:00007f81bc3bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.163397][ T8827] RAX: ffffffffffffffda RBX: 00007f81bdf85fa0 RCX: 00007f81bdd5ebe9 [ 132.163409][ T8827] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000006 [ 132.163422][ T8827] RBP: 00007f81bc3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 132.163436][ T8827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.163450][ T8827] R13: 00007f81bdf86038 R14: 00007f81bdf85fa0 R15: 00007fffba95c458 [ 132.163470][ T8827] [ 132.168417][ T8822] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.188681][ T8832] loop5: detected capacity change from 0 to 128 [ 132.427780][ T8837] can0: slcan on ttyS3. [ 132.475845][ T8837] can0 (unregistered): slcan off ttyS3. [ 132.487757][ T8837] can0: slcan on ttyS3. [ 132.692544][ T8868] can0 (unregistered): slcan off ttyS3. [ 132.708379][ T8871] can0: slcan on ttyS3. [ 132.747387][ T8878] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1708'. [ 132.786503][ T8878] loop4: detected capacity change from 0 to 512 [ 132.808293][ T8878] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 132.816264][ T8878] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 132.827554][ T8878] EXT4-fs (loop4): orphan cleanup on readonly fs [ 132.837446][ T8878] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #13: comm syz.4.1708: iget: bad i_size value: 12154761577498 [ 132.856742][ T8878] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1708: couldn't read orphan inode 13 (err -117) [ 132.879158][ T8878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 132.896266][ T8878] netlink: 348 bytes leftover after parsing attributes in process `syz.4.1708'. [ 132.955087][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.014099][ T8893] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 133.032642][ T8865] can0 (unregistered): slcan off ttyS3. [ 133.074684][ T8899] loop9: detected capacity change from 0 to 7 [ 133.080945][ T8899] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.090746][ T8899] Buffer I/O error on dev loop9, logical block 0, async page read [ 133.098646][ T8899] loop9: unable to read partition table [ 133.114904][ T8904] SELinux: Context :syz0:M:18446744073709551614:{ jᴒw@+K2 -~(D@(L eD0XVlw{IڏF &t}AE$zוEUsp%KW=Q#HԩsFUg`"0q [ 134.874345][ T9048] __dump_stack+0x1d/0x30 [ 134.874368][ T9048] dump_stack_lvl+0xe8/0x140 [ 134.874431][ T9048] dump_stack+0x15/0x1b [ 134.874449][ T9048] should_fail_ex+0x265/0x280 [ 134.874540][ T9048] should_fail+0xb/0x20 [ 134.874571][ T9048] should_fail_usercopy+0x1a/0x20 [ 134.874593][ T9048] _copy_from_user+0x1c/0xb0 [ 134.874689][ T9048] __se_sys_rt_sigqueueinfo+0x5a/0x3b0 [ 134.874768][ T9048] ? __bpf_trace_sys_enter+0x10/0x30 [ 134.874792][ T9048] ? trace_sys_enter+0xd0/0xf0 [ 134.874815][ T9048] __x64_sys_rt_sigqueueinfo+0x43/0x50 [ 134.874872][ T9048] x64_sys_call+0x9f8/0x2ff0 [ 134.874895][ T9048] do_syscall_64+0xd2/0x200 [ 134.874918][ T9048] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 134.874942][ T9048] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.875026][ T9048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.875049][ T9048] RIP: 0033:0x7fcec2eaebe9 [ 134.875078][ T9048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.875097][ T9048] RSP: 002b:00007fcec1517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 134.875119][ T9048] RAX: ffffffffffffffda RBX: 00007fcec30d5fa0 RCX: 00007fcec2eaebe9 [ 134.875191][ T9048] RDX: 0000000000000000 RSI: 0000000000000021 RDI: 0000000000000000 [ 134.875203][ T9048] RBP: 00007fcec1517090 R08: 0000000000000000 R09: 0000000000000000 [ 134.875214][ T9048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.875227][ T9048] R13: 00007fcec30d6038 R14: 00007fcec30d5fa0 R15: 00007fff71a6db08 [ 134.875248][ T9048] [ 135.062729][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 135.071759][ T9039] IPVS: Error joining to the multicast group [ 135.113654][ T9062] FAULT_INJECTION: forcing a failure. [ 135.113654][ T9062] name failslab, interval 1, probability 0, space 0, times 0 [ 135.126516][ T9062] CPU: 0 UID: 0 PID: 9062 Comm: syz.6.1779 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 135.126548][ T9062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.126560][ T9062] Call Trace: [ 135.126565][ T9062] [ 135.126627][ T9062] __dump_stack+0x1d/0x30 [ 135.126650][ T9062] dump_stack_lvl+0xe8/0x140 [ 135.126676][ T9062] dump_stack+0x15/0x1b [ 135.126720][ T9062] should_fail_ex+0x265/0x280 [ 135.126750][ T9062] should_failslab+0x8c/0xb0 [ 135.126773][ T9062] kmem_cache_alloc_noprof+0x50/0x310 [ 135.126805][ T9062] ? security_file_alloc+0x32/0x100 [ 135.126912][ T9062] security_file_alloc+0x32/0x100 [ 135.127004][ T9062] init_file+0x5c/0x1d0 [ 135.127035][ T9062] alloc_empty_file+0x8b/0x200 [ 135.127117][ T9062] path_openat+0x68/0x2170 [ 135.127136][ T9062] ? __rcu_read_unlock+0x34/0x70 [ 135.127159][ T9062] ? filemap_map_pages+0x86b/0xab0 [ 135.127184][ T9062] ? css_rstat_updated+0xb7/0x240 [ 135.127257][ T9062] do_filp_open+0x109/0x230 [ 135.127289][ T9062] do_sys_openat2+0xa6/0x110 [ 135.127405][ T9062] __x64_sys_openat+0xf2/0x120 [ 135.127441][ T9062] x64_sys_call+0x2e9c/0x2ff0 [ 135.127463][ T9062] do_syscall_64+0xd2/0x200 [ 135.127489][ T9062] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.127550][ T9062] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.127571][ T9062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.127601][ T9062] RIP: 0033:0x7fcec2ead550 [ 135.127618][ T9062] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 135.127712][ T9062] RSP: 002b:00007fcec1516b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 135.127733][ T9062] RAX: ffffffffffffffda RBX: 0000000000008401 RCX: 00007fcec2ead550 [ 135.127746][ T9062] RDX: 0000000000008401 RSI: 00007fcec1516c10 RDI: 00000000ffffff9c [ 135.127757][ T9062] RBP: 00007fcec1516c10 R08: 0000000000000000 R09: 0000000000000000 [ 135.127769][ T9062] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 135.127783][ T9062] R13: 00007fcec30d6038 R14: 00007fcec30d5fa0 R15: 00007fff71a6db08 [ 135.127865][ T9062] [ 135.131013][ T9064] loop9: detected capacity change from 0 to 7 [ 135.351168][ T9064] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.359213][ T9064] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.367052][ T9064] loop9: unable to read partition table [ 135.389720][ T9071] loop6: detected capacity change from 0 to 128 [ 135.396920][ T9064] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 135.396920][ T9064] ) failed (rc=-5) [ 135.403721][ T9073] loop4: detected capacity change from 0 to 1024 [ 135.417120][ T9073] EXT4-fs: Ignoring removed orlov option [ 135.450170][ T9073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.464365][ T9077] loop5: detected capacity change from 0 to 512 [ 135.471493][ T9077] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 135.482983][ T9077] EXT4-fs (loop5): 1 truncate cleaned up [ 135.488995][ T9077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.502218][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.514833][ T9077] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.584187][ T9093] loop6: detected capacity change from 0 to 512 [ 135.591220][ T9093] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 135.616060][ T9097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1793'. [ 135.621819][ T9093] EXT4-fs (loop6): 1 truncate cleaned up [ 135.631374][ T9093] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.632305][ T9093] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.682769][ T9104] loop4: detected capacity change from 0 to 1024 [ 135.702314][ T9107] FAULT_INJECTION: forcing a failure. [ 135.702314][ T9107] name failslab, interval 1, probability 0, space 0, times 0 [ 135.715065][ T9107] CPU: 1 UID: 0 PID: 9107 Comm: +}[@ Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 135.715093][ T9107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.715125][ T9107] Call Trace: [ 135.715133][ T9107] [ 135.715140][ T9107] __dump_stack+0x1d/0x30 [ 135.715163][ T9107] dump_stack_lvl+0xe8/0x140 [ 135.715255][ T9107] dump_stack+0x15/0x1b [ 135.715271][ T9107] should_fail_ex+0x265/0x280 [ 135.715333][ T9107] should_failslab+0x8c/0xb0 [ 135.715358][ T9107] __kmalloc_node_noprof+0xa9/0x410 [ 135.715389][ T9107] ? allocate_slab+0x144/0x3a0 [ 135.715410][ T9107] allocate_slab+0x144/0x3a0 [ 135.715505][ T9107] ___slab_alloc+0x3c9/0x900 [ 135.715537][ T9107] ? pidfs_xattr_set+0xa2/0x150 [ 135.715568][ T9107] ? should_fail_ex+0xdb/0x280 [ 135.715628][ T9107] kmem_cache_alloc_noprof+0x1f0/0x310 [ 135.715652][ T9107] ? pidfs_xattr_set+0xa2/0x150 [ 135.715681][ T9107] pidfs_xattr_set+0xa2/0x150 [ 135.715752][ T9107] ? __pfx_pidfs_xattr_set+0x10/0x10 [ 135.715804][ T9107] __vfs_setxattr+0x2e6/0x310 [ 135.715830][ T9107] __vfs_setxattr_noperm+0xe8/0x410 [ 135.715855][ T9107] __vfs_setxattr_locked+0x1af/0x1d0 [ 135.715901][ T9107] vfs_setxattr+0x132/0x270 [ 135.715927][ T9107] file_setxattr+0x139/0x1b0 [ 135.715953][ T9107] path_setxattrat+0x290/0x310 [ 135.715995][ T9107] __x64_sys_fsetxattr+0x6b/0x80 [ 135.716021][ T9107] x64_sys_call+0x1ced/0x2ff0 [ 135.716043][ T9107] do_syscall_64+0xd2/0x200 [ 135.716115][ T9107] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.716141][ T9107] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.716159][ T9107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.716180][ T9107] RIP: 0033:0x7f81bdd5ebe9 [ 135.716259][ T9107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.716305][ T9107] RSP: 002b:00007f81bc3bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 135.716332][ T9107] RAX: ffffffffffffffda RBX: 00007f81bdf85fa0 RCX: 00007f81bdd5ebe9 [ 135.716404][ T9107] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 135.716417][ T9107] RBP: 00007f81bc3bf090 R08: 0000000000000002 R09: 0000000000000000 [ 135.716428][ T9107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.716440][ T9107] R13: 00007f81bdf86038 R14: 00007f81bdf85fa0 R15: 00007fffba95c458 [ 135.716458][ T9107] [ 135.965278][ T9104] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.427970][ T9122] loop6: detected capacity change from 0 to 1024 [ 136.445606][ T9122] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 136.470109][ T9122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.558762][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.568557][ T9122] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 136.607916][ T9134] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 136.625264][ T9137] loop4: detected capacity change from 0 to 1024 [ 136.647850][ T9137] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 136.676469][ T9137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.847973][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1805'. [ 136.858334][ T9139] IPVS: Error joining to the multicast group [ 136.942909][ T9150] lo speed is unknown, defaulting to 1000 [ 136.998435][ T9150] lo speed is unknown, defaulting to 1000 [ 137.070778][ T9148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1808'. [ 137.080349][ T9148] IPVS: Error joining to the multicast group [ 137.315072][ T7206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.385655][ T9152] loop6: detected capacity change from 0 to 1024 [ 137.392793][ T9152] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 137.414109][ T9152] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.436995][ T9152] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 137.508697][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.577616][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 137.577632][ T29] audit: type=1326 audit(1754456161.384:10830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bdd5ebe9 code=0x7ffc0000 [ 137.607472][ T29] audit: type=1326 audit(1754456161.384:10831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f81bdd5ebe9 code=0x7ffc0000 [ 137.631070][ T29] audit: type=1326 audit(1754456161.384:10832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bdd5ebe9 code=0x7ffc0000 [ 137.654649][ T29] audit: type=1326 audit(1754456161.384:10833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f81bdd5ebe9 code=0x7ffc0000 [ 137.678338][ T29] audit: type=1326 audit(1754456161.384:10834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bdd5ebe9 code=0x7ffc0000 [ 137.701931][ T29] audit: type=1326 audit(1754456161.384:10835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81bdd5ebe9 code=0x7ffc0000 [ 137.725459][ T29] audit: type=1326 audit(1754456161.384:10836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bdd5ebe9 code=0x7ffc0000 [ 137.727029][ T9163] loop4: detected capacity change from 0 to 1024 [ 137.748924][ T29] audit: type=1326 audit(1754456161.384:10837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f81bdd5ebe9 code=0x7ffc0000 [ 137.748968][ T29] audit: type=1326 audit(1754456161.384:10838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81bdd5ebe9 code=0x7ffc0000 [ 137.766005][ T9163] EXT4-fs: Ignoring removed orlov option [ 137.779053][ T29] audit: type=1326 audit(1754456161.384:10839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9158 comm="syz.2.1811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f81bdd5ebe9 code=0x7ffc0000 [ 137.846228][ T9163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.898349][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.911583][ T7206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.941333][ T9171] loop4: detected capacity change from 0 to 128 [ 137.954941][ T9173] loop6: detected capacity change from 0 to 1024 [ 137.963838][ T9173] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.039326][ T9179] loop9: detected capacity change from 0 to 7 [ 138.045692][ T9179] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.054735][ T9179] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.062597][ T9179] loop9: unable to read partition table [ 138.072454][ T9179] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 138.072454][ T9179] ) failed (rc=-5) [ 138.124789][ T9187] can0: slcan on ttyS3. [ 138.172518][ T9187] can0 (unregistered): slcan off ttyS3. [ 138.187635][ T9187] can0: slcan on ttyS3. [ 138.232513][ T9189] can0 (unregistered): slcan off ttyS3. [ 138.253870][ T9189] can0: slcan on ttyS3. [ 138.362590][ T9188] can0 (unregistered): slcan off ttyS3. [ 138.387652][ T9198] FAULT_INJECTION: forcing a failure. [ 138.387652][ T9198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.400924][ T9198] CPU: 0 UID: 0 PID: 9198 Comm: syz.5.1826 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 138.400964][ T9198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.400976][ T9198] Call Trace: [ 138.400982][ T9198] [ 138.400989][ T9198] __dump_stack+0x1d/0x30 [ 138.401009][ T9198] dump_stack_lvl+0xe8/0x140 [ 138.401028][ T9198] dump_stack+0x15/0x1b [ 138.401055][ T9198] should_fail_ex+0x265/0x280 [ 138.401133][ T9198] should_fail+0xb/0x20 [ 138.401159][ T9198] should_fail_usercopy+0x1a/0x20 [ 138.401179][ T9198] fpu__restore_sig+0x12d/0xaa0 [ 138.401211][ T9198] ? should_fail_ex+0xdb/0x280 [ 138.401267][ T9198] __ia32_sys_rt_sigreturn+0x29f/0x350 [ 138.401305][ T9198] x64_sys_call+0x2d3c/0x2ff0 [ 138.401327][ T9198] do_syscall_64+0xd2/0x200 [ 138.401349][ T9198] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.401374][ T9198] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.401398][ T9198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.401502][ T9198] RIP: 0033:0x7f468ce3ebe9 [ 138.401518][ T9198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.401538][ T9198] RSP: 002b:00007f468b49f038 EFLAGS: 00000246 [ 138.401557][ T9198] RAX: fffffffffffffff2 RBX: 00007f468d065fa0 RCX: 00007f468ce3ebe9 [ 138.401569][ T9198] RDX: ffffffffffffffff RSI: 0000000000000003 RDI: ffffffffffffffff [ 138.401611][ T9198] RBP: 00007f468b49f090 R08: 0000000000000000 R09: 0000000000000000 [ 138.401623][ T9198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.401634][ T9198] R13: 00007f468d066038 R14: 00007f468d065fa0 R15: 00007ffe12075018 [ 138.401655][ T9198] [ 138.650000][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1827'. [ 138.650673][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 138.650709][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 138.650813][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 138.662703][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 138.662723][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 138.662828][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 138.711858][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 138.738628][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 138.753307][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1827'. [ 138.798348][ T9214] loop9: detected capacity change from 0 to 7 [ 138.805008][ T9214] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.814074][ T9214] Buffer I/O error on dev loop9, logical block 0, async page read [ 138.821936][ T9214] loop9: unable to read partition table [ 138.828975][ T9214] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 138.828975][ T9214] ) failed (rc=-5) [ 138.844225][ T7206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.875056][ T9192] loop4: detected capacity change from 0 to 32768 [ 138.936822][ T9223] can0: slcan on ttyS3. [ 138.982551][ T9223] can0 (unregistered): slcan off ttyS3. [ 138.995417][ T9223] can0: slcan on ttyS3. [ 139.062537][ T9222] can0 (unregistered): slcan off ttyS3. [ 139.090121][ T9230] syz_tun: entered promiscuous mode [ 139.095516][ T9234] loop6: detected capacity change from 0 to 128 [ 139.127238][ T9239] loop4: detected capacity change from 0 to 128 [ 139.257919][ T9241] loop6: detected capacity change from 0 to 1024 [ 139.274855][ T9241] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.982217][ T9252] lo speed is unknown, defaulting to 1000 [ 140.029524][ T9257] siw: device registration error -23 [ 140.057784][ T9257] loop5: detected capacity change from 0 to 1024 [ 140.076585][ T9257] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.090861][ T9257] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.231374][ T7206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.242467][ T9257] binfmt_misc: register: failed to install interpreter file ./file2 [ 140.284607][ T9270] loop4: detected capacity change from 0 to 512 [ 140.291020][ T9275] netlink: 'syz.5.1853': attribute type 29 has an invalid length. [ 140.292084][ T9270] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 140.299872][ T9274] netlink: 'syz.5.1853': attribute type 29 has an invalid length. [ 140.313386][ T9270] EXT4-fs (loop4): 1 truncate cleaned up [ 140.332103][ T9268] lo speed is unknown, defaulting to 1000 [ 140.342976][ T9270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.367106][ T9270] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.386363][ T9268] lo speed is unknown, defaulting to 1000 [ 140.450889][ T9285] loop6: detected capacity change from 0 to 512 [ 140.459157][ T9287] loop5: detected capacity change from 0 to 128 [ 140.459162][ T9285] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 140.461674][ T9285] EXT4-fs (loop6): 1 truncate cleaned up [ 140.482013][ T9285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.496061][ T9285] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.496562][ T9287] lo speed is unknown, defaulting to 1000 [ 140.709804][ T9296] loop5: detected capacity change from 0 to 128 [ 141.140977][ T9313] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 141.200226][ T9317] can0: slcan on ttyS3. [ 141.252510][ T9317] can0 (unregistered): slcan off ttyS3. [ 141.260466][ T9318] can0: slcan on ttyS3. [ 141.260866][ T9305] IPVS: Error joining to the multicast group [ 141.315189][ T9324] loop6: detected capacity change from 0 to 1024 [ 141.321923][ T9324] EXT4-fs: Ignoring removed orlov option [ 141.333993][ T9324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.346147][ T9316] can0 (unregistered): slcan off ttyS3. [ 141.373148][ T9328] loop4: detected capacity change from 0 to 1024 [ 141.380720][ T7206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.395543][ T9328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 141.401330][ T9332] random: crng reseeded on system resumption [ 141.407777][ T9328] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.431123][ T9328] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.1873: lblock 3 mapped to illegal pblock 3 (length 3) [ 141.446607][ T9328] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 141.458943][ T9328] EXT4-fs (loop4): This should not happen!! Data will be lost [ 141.458943][ T9328] [ 141.470764][ T9328] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.1873: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 141.489135][ T9328] EXT4-fs error (device loop4) in ext4_setattr:6071: Corrupt filesystem [ 141.510503][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 141.528867][ T9342] loop4: detected capacity change from 0 to 128 [ 141.569597][ T9348] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 141.664781][ T9354] random: crng reseeded on system resumption [ 141.836074][ T9379] siw: device registration error -23 [ 141.845585][ T9379] loop5: detected capacity change from 0 to 1024 [ 141.855190][ T9379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.888263][ T9384] random: crng reseeded on system resumption [ 141.889853][ T9379] binfmt_misc: register: failed to install interpreter file ./file2 [ 141.996077][ T9404] loop9: detected capacity change from 0 to 7 [ 142.002398][ T9404] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.010268][ T9404] Buffer I/O error on dev loop9, logical block 0, async page read [ 142.018214][ T9404] loop9: unable to read partition table [ 142.024088][ T9404] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 142.024088][ T9404] ) failed (rc=-5) [ 142.039173][ T9402] IPVS: Error joining to the multicast group [ 142.127562][ T363] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 142.150070][ T9416] binfmt_misc: register: failed to install interpreter file ./file2 [ 142.182211][ T9423] loop5: detected capacity change from 0 to 1024 [ 142.197704][ T9423] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 142.219673][ T9423] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 142.306803][ T9441] loop5: detected capacity change from 0 to 1024 [ 142.313543][ T9441] EXT4-fs: Ignoring removed orlov option [ 142.340385][ T9439] IPVS: Error joining to the multicast group [ 142.378712][ T9448] binfmt_misc: register: failed to install interpreter file ./file2 [ 142.441465][ T9461] can0: slcan on ttyS3. [ 142.463659][ T9465] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 142.496362][ T9467] loop6: detected capacity change from 0 to 512 [ 142.502652][ T9461] can0 (unregistered): slcan off ttyS3. [ 142.508593][ T9467] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 142.515366][ T9468] can0: slcan on ttyS3. [ 142.525587][ T9467] EXT4-fs (loop6): 1 truncate cleaned up [ 142.603356][ T9475] loop4: detected capacity change from 0 to 1024 [ 142.615792][ T9475] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.628215][ T9472] IPVS: Error joining to the multicast group [ 142.636515][ T9475] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm syz.4.1934: lblock 3 mapped to illegal pblock 3 (length 3) [ 142.653618][ T9475] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 142.665979][ T9475] EXT4-fs (loop4): This should not happen!! Data will be lost [ 142.665979][ T9475] [ 142.679873][ T9460] can0 (unregistered): slcan off ttyS3. [ 142.708071][ T9482] binfmt_misc: register: failed to install interpreter file ./file2 [ 142.754047][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 142.754126][ T29] audit: type=1400 audit(1754456166.574:11242): avc: denied { setopt } for pid=9492 comm="syz.5.1942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 142.764913][ T51] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 142.802557][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 142.815021][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 142.815021][ T51] [ 142.844282][ T9499] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 142.927633][ T9516] IPVS: Error joining to the multicast group [ 143.156154][ T9540] loop9: detected capacity change from 0 to 7 [ 143.165349][ T9540] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.173391][ T9540] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.181262][ T9540] loop9: unable to read partition table [ 143.188232][ T9540] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 143.188232][ T9540] ) failed (rc=-5) [ 143.222030][ T9543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=9543 comm=syz.3.1963 [ 143.224938][ T9541] lo speed is unknown, defaulting to 1000 [ 143.277314][ T9538] lo speed is unknown, defaulting to 1000 [ 143.403816][ T9565] loop6: detected capacity change from 0 to 128 [ 143.443047][ T9571] loop9: detected capacity change from 0 to 7 [ 143.449269][ T9571] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.457495][ T9571] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.460877][ T9570] siw: device registration error -23 [ 143.465396][ T9571] loop9: unable to read partition table [ 143.466452][ T9571] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 143.466452][ T9571] ) failed (rc=-5) [ 143.499162][ T9570] binfmt_misc: register: failed to install interpreter file ./file2 [ 143.557908][ T9580] loop6: detected capacity change from 0 to 128 [ 143.574171][ T29] audit: type=1326 audit(1754456167.394:11243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9581 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d43e8ebe9 code=0x7ffc0000 [ 143.584425][ T9580] lo speed is unknown, defaulting to 1000 [ 143.610234][ T29] audit: type=1326 audit(1754456167.414:11244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9581 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f4d43e8ebe9 code=0x7ffc0000 [ 143.633818][ T29] audit: type=1326 audit(1754456167.414:11245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9581 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d43e8ebe9 code=0x7ffc0000 [ 143.657434][ T29] audit: type=1326 audit(1754456167.414:11246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9581 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f4d43e8ebe9 code=0x7ffc0000 [ 143.681069][ T29] audit: type=1326 audit(1754456167.414:11247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9581 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d43e8ebe9 code=0x7ffc0000 [ 143.704763][ T29] audit: type=1326 audit(1754456167.424:11248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9581 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4d43e8ebe9 code=0x7ffc0000 [ 143.728213][ T29] audit: type=1326 audit(1754456167.424:11249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9581 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d43e8ebe9 code=0x7ffc0000 [ 143.751853][ T29] audit: type=1326 audit(1754456167.424:11250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9581 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d43e8ebe9 code=0x7ffc0000 [ 143.775363][ T29] audit: type=1326 audit(1754456167.424:11251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9581 comm="syz.3.1979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d43e8ebe9 code=0x7ffc0000 [ 143.858151][ T9600] loop5: detected capacity change from 0 to 1024 [ 143.859584][ T9603] binfmt_misc: register: failed to install interpreter file ./file2 [ 143.865445][ T9600] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 143.894985][ T9606] loop9: detected capacity change from 0 to 7 [ 143.901730][ T9606] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.909844][ T9600] lo speed is unknown, defaulting to 1000 [ 143.909955][ T9606] Buffer I/O error on dev loop9, logical block 0, async page read [ 143.923518][ T9606] loop9: unable to read partition table [ 143.934131][ T9606] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 143.934131][ T9606] ) failed (rc=-5) [ 143.956725][ T9600] lo speed is unknown, defaulting to 1000 [ 143.978680][ T9613] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 144.067129][ T9617] __nla_validate_parse: 7 callbacks suppressed [ 144.067141][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1992'. [ 144.082688][ T9617] IPVS: Error joining to the multicast group [ 144.115298][ T9633] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1996'. [ 144.127640][ T9633] siw: device registration error -23 [ 144.138052][ T9633] loop6: detected capacity change from 0 to 1024 [ 144.157258][ T9633] binfmt_misc: register: failed to install interpreter file ./file2 [ 144.202760][ T9638] siw: device registration error -23 [ 144.211780][ T9638] loop6: detected capacity change from 0 to 1024 [ 144.225933][ T9638] binfmt_misc: register: failed to install interpreter file ./file2 [ 144.366505][ T9647] loop6: detected capacity change from 0 to 1024 [ 144.373472][ T9647] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 144.401913][ T9647] lo speed is unknown, defaulting to 1000 [ 144.437265][ T9647] lo speed is unknown, defaulting to 1000 [ 144.449487][ T9654] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 144.499205][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2007'. [ 144.511337][ T9660] siw: device registration error -23 [ 144.520532][ T9660] loop6: detected capacity change from 0 to 1024 [ 144.537010][ T9660] binfmt_misc: register: failed to install interpreter file ./file2 [ 144.581292][ T9666] FAULT_INJECTION: forcing a failure. [ 144.581292][ T9666] name failslab, interval 1, probability 0, space 0, times 0 [ 144.589343][ T9667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 144.594073][ T9666] CPU: 0 UID: 0 PID: 9666 Comm: syz.6.2009 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 144.594120][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.594132][ T9666] Call Trace: [ 144.594137][ T9666] [ 144.594144][ T9666] __dump_stack+0x1d/0x30 [ 144.594167][ T9666] dump_stack_lvl+0xe8/0x140 [ 144.594187][ T9666] dump_stack+0x15/0x1b [ 144.594250][ T9666] should_fail_ex+0x265/0x280 [ 144.594345][ T9666] should_failslab+0x8c/0xb0 [ 144.594372][ T9666] kmem_cache_alloc_noprof+0x50/0x310 [ 144.594412][ T9666] ? audit_log_start+0x365/0x6c0 [ 144.594445][ T9666] audit_log_start+0x365/0x6c0 [ 144.594477][ T9666] ? strncpy_from_user+0x177/0x230 [ 144.594547][ T9666] audit_seccomp+0x48/0x100 [ 144.594574][ T9666] ? __seccomp_filter+0x68c/0x10d0 [ 144.594656][ T9666] __seccomp_filter+0x69d/0x10d0 [ 144.594686][ T9666] __secure_computing+0x82/0x150 [ 144.594709][ T9666] syscall_trace_enter+0xcf/0x1e0 [ 144.594738][ T9666] do_syscall_64+0xac/0x200 [ 144.594832][ T9666] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 144.594857][ T9666] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 144.594880][ T9666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.594903][ T9666] RIP: 0033:0x7fcec2ead5fc [ 144.594919][ T9666] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 144.594939][ T9666] RSP: 002b:00007fcec1517030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.594990][ T9666] RAX: ffffffffffffffda RBX: 00007fcec30d5fa0 RCX: 00007fcec2ead5fc [ 144.595004][ T9666] RDX: 000000000000000f RSI: 00007fcec15170a0 RDI: 0000000000000006 [ 144.595017][ T9666] RBP: 00007fcec1517090 R08: 0000000000000000 R09: 0000000000000000 [ 144.595030][ T9666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.595071][ T9666] R13: 00007fcec30d6038 R14: 00007fcec30d5fa0 R15: 00007fff71a6db08 [ 144.595092][ T9666] [ 144.798549][ T9667] IPVS: Error joining to the multicast group [ 144.807154][ T9682] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 144.815229][ T9677] loop6: detected capacity change from 0 to 512 [ 144.830456][ T9677] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 144.844208][ T9677] EXT4-fs (loop6): 1 truncate cleaned up [ 144.849789][ T9685] loop4: detected capacity change from 0 to 1024 [ 144.857433][ T9685] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 144.887240][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2018'. [ 144.887318][ T9685] lo speed is unknown, defaulting to 1000 [ 144.923933][ T9689] binfmt_misc: register: failed to install interpreter file ./file2 [ 144.940962][ T9685] lo speed is unknown, defaulting to 1000 [ 145.013241][ T9693] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 145.193023][ T9709] loop5: detected capacity change from 0 to 8192 [ 145.201045][ T9709] syz.5.2026: attempt to access beyond end of device [ 145.201045][ T9709] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 145.218561][ T9709] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 145.226412][ T9709] FAT-fs (loop5): Filesystem has been set read-only [ 145.234420][ T9709] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 145.242454][ T9709] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 145.591897][ T9713] loop6: detected capacity change from 0 to 128 [ 145.731086][ T9718] siw: device registration error -23 [ 145.748664][ T9718] loop6: detected capacity change from 0 to 1024 [ 145.764618][ T9718] binfmt_misc: register: failed to install interpreter file ./file2 [ 145.793778][ T9721] loop9: detected capacity change from 0 to 7 [ 145.800114][ T9721] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.809245][ T9721] Buffer I/O error on dev loop9, logical block 0, async page read [ 145.817112][ T9721] loop9: unable to read partition table [ 145.824415][ T9721] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 145.824415][ T9721] ) failed (rc=-5) [ 145.915608][ T9727] loop9: detected capacity change from 0 to 7 [ 145.921957][ T9727] loop9: unable to read partition table [ 145.931952][ T9727] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 145.931952][ T9727] ) failed (rc=-5) [ 145.989015][ T9735] loop6: detected capacity change from 0 to 128 [ 146.006024][ T9739] loop5: detected capacity change from 0 to 1024 [ 146.014310][ T9739] EXT4-fs: Ignoring removed orlov option [ 146.046785][ T9733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2037'. [ 146.055928][ T9733] IPVS: Error joining to the multicast group [ 146.067449][ T9745] siw: device registration error -23 [ 146.078691][ T9745] loop5: detected capacity change from 0 to 1024 [ 146.096384][ T9745] binfmt_misc: register: failed to install interpreter file ./file2 [ 146.099869][ T9748] can0: slcan on ttyS3. [ 146.152823][ T9748] can0 (unregistered): slcan off ttyS3. [ 146.158631][ T9755] loop5: detected capacity change from 0 to 128 [ 146.162157][ T9748] can0: slcan on ttyS3. [ 146.195448][ T9755] lo speed is unknown, defaulting to 1000 [ 146.366937][ T9765] loop6: detected capacity change from 0 to 512 [ 146.373942][ T9765] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 146.382552][ T9746] can0 (unregistered): slcan off ttyS3. [ 146.384114][ T9765] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2048: iget: bogus i_mode (5) [ 146.399735][ T9765] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2048: couldn't read orphan inode 15 (err -117) [ 146.413472][ T9765] ext2 filesystem being mounted at /175/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.540804][ T9776] loop5: detected capacity change from 0 to 1024 [ 146.561727][ T9776] EXT4-fs: Ignoring removed orlov option [ 146.580262][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2052'. [ 146.592547][ T9774] IPVS: Error joining to the multicast group [ 146.656252][ T9783] siw: device registration error -23 [ 146.666286][ T9783] loop5: detected capacity change from 0 to 1024 [ 146.701441][ T9783] binfmt_misc: register: failed to install interpreter file ./file2 [ 146.796951][ T9798] loop6: detected capacity change from 0 to 256 [ 146.929886][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2068'. [ 146.938946][ T9813] netlink: 'syz.2.2068': attribute type 14 has an invalid length. [ 146.955233][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2068'. [ 146.964341][ T9813] netlink: 'syz.2.2068': attribute type 14 has an invalid length. [ 146.974030][ T363] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.983013][ T363] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 146.992025][ T363] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.010542][ T363] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.057160][ T9817] binfmt_misc: register: failed to install interpreter file ./file2 [ 147.088569][ T9820] loop5: detected capacity change from 0 to 1024 [ 147.110348][ T9820] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 147.162068][ T9820] lo speed is unknown, defaulting to 1000 [ 147.226119][ T9825] lo speed is unknown, defaulting to 1000 [ 147.525769][ T9848] siw: device registration error -23 [ 147.543177][ T9848] loop5: detected capacity change from 0 to 1024 [ 147.558715][ T9848] binfmt_misc: register: failed to install interpreter file ./file2 [ 147.589599][ T9853] loop6: detected capacity change from 0 to 128 [ 147.591598][ T9852] loop5: detected capacity change from 0 to 1024 [ 147.603078][ T9852] EXT4-fs: Ignoring removed orlov option [ 147.629479][ T9857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=9857 comm=syz.4.2085 [ 147.641994][ T9857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=9857 comm=syz.4.2085 [ 147.804963][ T9876] siw: device registration error -23 [ 147.817422][ T9876] loop5: detected capacity change from 0 to 1024 [ 147.839372][ T9876] binfmt_misc: register: failed to install interpreter file ./file2 [ 147.857180][ T9881] loop4: detected capacity change from 0 to 1024 [ 147.864678][ T9881] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 147.882811][ T29] kauditd_printk_skb: 235 callbacks suppressed [ 147.882826][ T29] audit: type=1326 audit(1754456171.704:11485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 147.912569][ T29] audit: type=1326 audit(1754456171.704:11486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 147.918626][ T9881] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 147.936109][ T29] audit: type=1326 audit(1754456171.704:11487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 147.965762][ T29] audit: type=1326 audit(1754456171.704:11488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 147.989251][ T29] audit: type=1326 audit(1754456171.704:11489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 148.012716][ T29] audit: type=1326 audit(1754456171.704:11490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 148.036312][ T29] audit: type=1326 audit(1754456171.704:11491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 148.059945][ T29] audit: type=1326 audit(1754456171.704:11492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 148.083496][ T29] audit: type=1326 audit(1754456171.704:11493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 148.107060][ T29] audit: type=1326 audit(1754456171.704:11494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9884 comm="syz.5.2098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 148.189393][ T9893] can0: slcan on ttyS3. [ 148.272396][ T9893] can0 (unregistered): slcan off ttyS3. [ 148.284391][ T9901] can0: slcan on ttyS3. [ 148.478011][ T9920] loop4: detected capacity change from 0 to 128 [ 148.492668][ T9891] can0 (unregistered): slcan off ttyS3. [ 148.553995][ T9925] siw: device registration error -23 [ 148.563662][ T9925] loop5: detected capacity change from 0 to 1024 [ 148.578068][ T9925] binfmt_misc: register: failed to install interpreter file ./file2 [ 148.803927][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2123'. [ 148.812992][ T9947] IPVS: Error joining to the multicast group [ 148.868468][ T9955] siw: device registration error -23 [ 148.877714][ T9955] loop6: detected capacity change from 0 to 1024 [ 148.891656][ T9955] binfmt_misc: register: failed to install interpreter file ./file2 [ 148.912924][ T9958] loop6: detected capacity change from 0 to 128 [ 149.391689][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2134'. [ 149.400704][ T9974] IPVS: Error joining to the multicast group [ 149.420741][ T9977] loop9: detected capacity change from 0 to 7 [ 149.427288][ T9977] buffer_io_error: 2 callbacks suppressed [ 149.427297][ T9977] Buffer I/O error on dev loop9, logical block 0, async page read [ 149.441132][ T9977] Buffer I/O error on dev loop9, logical block 0, async page read [ 149.449019][ T9977] loop9: unable to read partition table [ 149.454877][ T9977] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 149.454877][ T9977] ) failed (rc=-5) [ 149.505444][ T9985] loop4: detected capacity change from 0 to 128 [ 149.514401][ T9986] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 149.541108][ T9989] loop5: detected capacity change from 0 to 256 [ 149.645803][ T9994] loop4: detected capacity change from 0 to 128 [ 149.663296][ T9994] lo speed is unknown, defaulting to 1000 [ 149.870093][ T9997] siw: device registration error -23 [ 149.879493][ T9997] loop4: detected capacity change from 0 to 1024 [ 149.895005][ T9997] binfmt_misc: register: failed to install interpreter file ./file2 [ 149.936786][T10005] loop9: detected capacity change from 0 to 7 [ 149.943638][T10005] Buffer I/O error on dev loop9, logical block 0, async page read [ 149.951542][T10005] Buffer I/O error on dev loop9, logical block 0, async page read [ 149.959493][T10005] loop9: unable to read partition table [ 149.965981][T10005] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 149.965981][T10005] ) failed (rc=-5) [ 150.025020][T10017] loop6: detected capacity change from 0 to 1024 [ 150.033916][T10017] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 150.044957][T10021] loop4: detected capacity change from 0 to 128 [ 150.068852][T10017] lo speed is unknown, defaulting to 1000 [ 150.098642][T10017] lo speed is unknown, defaulting to 1000 [ 150.141534][T10028] loop6: detected capacity change from 0 to 1024 [ 150.148717][T10028] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 150.169749][T10028] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 150.200415][T10034] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 150.407927][T10043] loop4: detected capacity change from 0 to 8192 [ 150.418875][T10043] syz.4.2160: attempt to access beyond end of device [ 150.418875][T10043] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 150.434141][T10043] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 150.442120][T10043] FAT-fs (loop4): Filesystem has been set read-only [ 150.449697][T10043] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 150.459553][T10043] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 150.514194][T10063] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 150.600361][T10073] loop5: detected capacity change from 0 to 1024 [ 150.607617][T10073] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 150.629746][T10073] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 150.660792][T10078] loop6: detected capacity change from 0 to 512 [ 150.667939][T10078] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 150.678984][T10078] EXT4-fs (loop6): 1 truncate cleaned up [ 150.957499][T10098] loop5: detected capacity change from 0 to 1024 [ 150.965314][T10098] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 150.983602][T10102] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 150.987621][T10098] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 151.236451][T10130] loop4: detected capacity change from 0 to 512 [ 151.254403][T10130] ext4 filesystem being mounted at /420/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.267206][T10130] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 94 vs 96 free clusters [ 151.281575][T10130] EXT4-fs (loop4): Remounting filesystem read-only [ 151.290503][T10130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2191'. [ 151.320177][T10134] loop4: detected capacity change from 0 to 128 [ 151.527384][T10149] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 151.602066][T10152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2200'. [ 151.614651][T10152] IPVS: Error joining to the multicast group [ 151.681674][T10168] loop4: detected capacity change from 0 to 256 [ 151.704739][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2215'. [ 151.722493][T10169] IPVS: Error joining to the multicast group [ 152.055823][T10190] lo speed is unknown, defaulting to 1000 [ 152.616730][T10206] loop4: detected capacity change from 0 to 1024 [ 152.786136][T10213] loop5: detected capacity change from 0 to 512 [ 152.939130][T10216] lo speed is unknown, defaulting to 1000 [ 153.063694][T10213] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 153.093871][T10213] EXT4-fs (loop5): 1 truncate cleaned up [ 153.120452][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 153.120468][ T29] audit: type=1326 audit(1754456176.934:11758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f468ce3d550 code=0x7ffc0000 [ 153.150353][ T29] audit: type=1326 audit(1754456176.934:11759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f468ce3e7eb code=0x7ffc0000 [ 153.174034][ T29] audit: type=1326 audit(1754456176.934:11760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f468ce3d84a code=0x7ffc0000 [ 153.214184][ T29] audit: type=1326 audit(1754456176.994:11761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 153.237804][ T29] audit: type=1326 audit(1754456176.994:11762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 153.261408][ T29] audit: type=1326 audit(1754456177.024:11763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 153.285474][ T29] audit: type=1326 audit(1754456177.024:11764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 153.309075][ T29] audit: type=1326 audit(1754456177.024:11765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 153.332769][ T29] audit: type=1326 audit(1754456177.034:11766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 153.356356][ T29] audit: type=1326 audit(1754456177.034:11767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10212 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 153.493707][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2228'. [ 153.502988][T10229] IPVS: Error joining to the multicast group [ 153.544284][T10233] siw: device registration error -23 [ 153.555108][T10233] loop6: detected capacity change from 0 to 1024 [ 153.571473][T10233] binfmt_misc: register: failed to install interpreter file ./file2 [ 153.666009][T10246] loop4: detected capacity change from 0 to 512 [ 153.682053][T10246] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 153.701988][T10246] EXT4-fs (loop4): 1 truncate cleaned up [ 153.746591][T10255] loop5: detected capacity change from 0 to 1024 [ 153.827874][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2240'. [ 153.837260][T10260] IPVS: Error joining to the multicast group [ 153.900441][T10266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10266 comm=syz.3.2242 [ 153.913133][T10266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10266 comm=syz.3.2242 [ 153.993528][T10269] siw: device registration error -23 [ 154.009622][T10269] binfmt_misc: register: failed to install interpreter file ./file2 [ 154.431282][T10283] lo speed is unknown, defaulting to 1000 [ 154.755994][T10300] loop4: detected capacity change from 0 to 256 [ 154.867969][T10304] lo speed is unknown, defaulting to 1000 [ 154.960842][T10307] lo speed is unknown, defaulting to 1000 [ 155.186018][T10316] siw: device registration error -23 [ 155.211365][T10316] loop5: detected capacity change from 0 to 1024 [ 155.227709][T10316] binfmt_misc: register: failed to install interpreter file ./file2 [ 155.360040][T10335] siw: device registration error -23 [ 155.381784][T10335] loop5: detected capacity change from 0 to 1024 [ 155.454487][T10335] binfmt_misc: register: failed to install interpreter file ./file2 [ 155.617880][T10355] loop4: detected capacity change from 0 to 128 [ 155.632975][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2285'. [ 155.642440][T10363] IPVS: Error joining to the multicast group [ 155.658605][T10355] lo speed is unknown, defaulting to 1000 [ 155.688729][T10369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10369 comm=syz.3.2288 [ 155.701391][T10369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10369 comm=syz.3.2288 [ 155.729498][T10373] loop5: detected capacity change from 0 to 1024 [ 155.736562][T10373] EXT4-fs: Ignoring removed orlov option [ 155.872807][T10382] loop5: detected capacity change from 0 to 256 [ 156.067898][T10406] lo speed is unknown, defaulting to 1000 [ 156.084677][T10408] lo speed is unknown, defaulting to 1000 [ 156.113884][T10406] lo speed is unknown, defaulting to 1000 [ 156.212719][T10415] loop4: detected capacity change from 0 to 512 [ 156.219780][T10415] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 156.238676][T10415] EXT4-fs (loop4): 1 truncate cleaned up [ 156.606873][T10439] lo speed is unknown, defaulting to 1000 [ 156.678504][T10439] lo speed is unknown, defaulting to 1000 [ 156.690659][T10445] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 156.757680][T10448] loop5: detected capacity change from 0 to 1024 [ 156.759636][T10450] loop9: detected capacity change from 0 to 7 [ 156.771370][T10452] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.779407][T10452] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.787339][T10452] loop9: unable to read partition table [ 156.793487][T10448] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 156.803572][T10450] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.811430][T10450] Buffer I/O error on dev loop9, logical block 0, async page read [ 156.819466][T10450] loop9: unable to read partition table [ 156.827597][T10450] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 156.827597][T10450] ) failed (rc=-5) [ 156.851652][T10448] EXT4-fs mount: 81 callbacks suppressed [ 156.851704][T10448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.913511][T10456] loop6: detected capacity change from 0 to 512 [ 156.920525][T10456] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 156.940740][T10448] lo speed is unknown, defaulting to 1000 [ 156.943192][T10456] EXT4-fs (loop6): 1 truncate cleaned up [ 156.954798][T10458] binfmt_misc: register: failed to install interpreter file ./file2 [ 156.983644][T10456] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.014015][T10456] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.021952][T10448] lo speed is unknown, defaulting to 1000 [ 157.035218][T10465] loop9: detected capacity change from 0 to 7 [ 157.050154][T10465] Buffer I/O error on dev loop9, logical block 0, async page read [ 157.058448][T10465] Buffer I/O error on dev loop9, logical block 0, async page read [ 157.066474][T10465] loop9: unable to read partition table [ 157.072432][T10465] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 157.072432][T10465] ) failed (rc=-5) [ 157.098155][ T4232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.134427][T10473] siw: device registration error -23 [ 157.147395][T10473] loop5: detected capacity change from 0 to 1024 [ 157.155808][T10473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.170036][T10473] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.190226][T10473] binfmt_misc: register: failed to install interpreter file ./file2 [ 157.226639][T10481] loop5: detected capacity change from 0 to 1024 [ 157.233629][T10481] EXT4-fs: Ignoring removed orlov option [ 157.242964][T10484] loop4: detected capacity change from 0 to 128 [ 157.258925][T10481] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.276803][T10485] siw: device registration error -23 [ 157.292075][T10484] lo speed is unknown, defaulting to 1000 [ 157.300218][ T4232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.328823][T10485] binfmt_misc: register: failed to install interpreter file ./file2 [ 157.375910][T10496] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 157.399472][T10498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10498 comm=syz.5.2340 [ 157.412026][T10498] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10498 comm=syz.5.2340 [ 157.535004][T10507] siw: device registration error -23 [ 157.546088][T10507] loop5: detected capacity change from 0 to 1024 [ 157.556000][T10507] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.570200][T10507] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.588075][T10507] binfmt_misc: register: failed to install interpreter file ./file2 [ 157.588876][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2347'. [ 157.605327][T10514] IPVS: Error joining to the multicast group [ 157.632976][T10518] loop9: detected capacity change from 0 to 7 [ 157.633556][T10516] siw: device registration error -23 [ 157.639342][T10518] Buffer I/O error on dev loop9, logical block 0, async page read [ 157.652509][T10518] Buffer I/O error on dev loop9, logical block 0, async page read [ 157.653364][T10516] loop5: detected capacity change from 0 to 1024 [ 157.660360][T10518] loop9: unable to read partition table [ 157.669201][T10516] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.672547][T10518] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 157.672547][T10518] ) failed (rc=-5) [ 157.687940][T10516] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.720671][T10516] binfmt_misc: register: failed to install interpreter file ./file2 [ 157.749087][T10521] loop6: detected capacity change from 0 to 512 [ 157.760581][T10521] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 157.773108][T10521] EXT4-fs (loop6): 1 truncate cleaned up [ 157.779340][T10521] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.792439][T10521] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.806282][T10526] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 157.830293][T10528] loop4: detected capacity change from 0 to 128 [ 157.840143][T10530] loop9: detected capacity change from 0 to 7 [ 157.858111][T10528] lo speed is unknown, defaulting to 1000 [ 157.872528][T10530] Buffer I/O error on dev loop9, logical block 0, async page read [ 157.921579][T10530] Buffer I/O error on dev loop9, logical block 0, async page read [ 157.929544][T10530] loop9: unable to read partition table [ 157.935550][T10530] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 157.935550][T10530] ) failed (rc=-5) [ 157.937627][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2359'. [ 157.958502][T10543] IPVS: Error joining to the multicast group [ 157.986897][T10545] loop5: detected capacity change from 0 to 512 [ 157.993960][T10545] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 158.006834][T10545] EXT4-fs (loop5): 1 truncate cleaned up [ 158.014194][T10545] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.027147][T10545] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.055474][T10550] binfmt_misc: register: failed to install interpreter file ./file2 [ 158.228225][T10566] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 158.581725][T10568] loop6: detected capacity change from 0 to 128 [ 158.726686][T10570] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2371'. [ 158.735895][T10570] IPVS: Error joining to the multicast group [ 158.754317][T10572] loop9: detected capacity change from 0 to 7 [ 158.760571][T10572] loop9: unable to read partition table [ 158.766356][T10572] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 158.766356][T10572] ) failed (rc=-5) [ 158.796479][T10574] loop6: detected capacity change from 0 to 1024 [ 158.803696][T10574] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 158.825028][T10574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.850794][T10578] siw: device registration error -23 [ 158.861185][T10578] loop5: detected capacity change from 0 to 1024 [ 158.873649][T10578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.888200][T10578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.959050][T10578] binfmt_misc: register: failed to install interpreter file ./file2 [ 159.010533][T10580] lo speed is unknown, defaulting to 1000 [ 159.059405][T10580] lo speed is unknown, defaulting to 1000 [ 159.101797][T10597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2383'. [ 159.115363][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 159.115378][ T29] audit: type=1326 audit(1754456182.934:12115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 159.119383][T10598] loop4: detected capacity change from 0 to 512 [ 159.121811][ T29] audit: type=1326 audit(1754456182.934:12116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 159.121839][ T29] audit: type=1326 audit(1754456182.934:12117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 159.149716][T10598] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.151732][ T29] audit: type=1326 audit(1754456182.934:12118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 159.232430][ T29] audit: type=1326 audit(1754456182.934:12119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 159.256339][ T29] audit: type=1326 audit(1754456182.934:12120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 159.279930][ T29] audit: type=1326 audit(1754456182.934:12121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10601 comm="syz.3.2385" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d43e8ebe9 code=0x0 [ 159.303233][ T29] audit: type=1326 audit(1754456182.934:12122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 159.326963][ T29] audit: type=1326 audit(1754456182.934:12123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 159.327104][T10597] IPVS: Error joining to the multicast group [ 159.350685][ T29] audit: type=1326 audit(1754456182.934:12124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10596 comm="syz.4.2384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 159.358370][T10598] EXT4-fs (loop4): 1 truncate cleaned up [ 159.387528][T10598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.404217][T10598] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.664436][ T7206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.771087][T10631] loop6: detected capacity change from 0 to 128 [ 159.781164][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2397'. [ 159.790166][T10633] IPVS: Error joining to the multicast group [ 159.821475][T10637] loop9: detected capacity change from 0 to 7 [ 159.828007][T10637] loop9: unable to read partition table [ 159.833749][T10637] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 159.833749][T10637] ) failed (rc=-5) [ 159.875763][T10641] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 159.908461][T10645] lo speed is unknown, defaulting to 1000 [ 159.989810][T10653] siw: device registration error -23 [ 160.000628][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2409'. [ 160.007777][T10653] binfmt_misc: register: failed to install interpreter file ./file2 [ 160.017649][T10655] IPVS: Error joining to the multicast group [ 160.066930][T10665] loop6: detected capacity change from 0 to 128 [ 160.198823][T10677] loop4: detected capacity change from 0 to 8192 [ 160.207008][T10677] syz.4.2418: attempt to access beyond end of device [ 160.207008][T10677] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 160.220928][T10677] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 160.228992][T10677] FAT-fs (loop4): Filesystem has been set read-only [ 160.230855][T10679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2419'. [ 160.245844][T10679] IPVS: Error joining to the multicast group [ 160.252653][T10677] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 160.261480][T10677] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 160.284453][T10681] loop6: detected capacity change from 0 to 1024 [ 160.291352][T10681] EXT4-fs: Ignoring removed orlov option [ 160.303648][T10681] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.336869][ T7206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.360335][T10687] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 160.394089][T10692] lo speed is unknown, defaulting to 1000 [ 160.397797][T10693] binfmt_misc: register: failed to install interpreter file ./file2 [ 160.445763][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2427'. [ 160.454866][T10697] IPVS: Error joining to the multicast group [ 160.480218][T10699] binfmt_misc: register: failed to install interpreter file ./file2 [ 160.540692][T10709] loop9: detected capacity change from 0 to 7 [ 160.548336][T10709] loop9: unable to read partition table [ 160.554257][T10709] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 160.554257][T10709] ) failed (rc=-5) [ 160.606585][T10718] binfmt_misc: register: failed to install interpreter file ./file2 [ 160.620165][T10720] lo speed is unknown, defaulting to 1000 [ 160.636467][T10722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10722 comm=syz.2.2439 [ 160.649218][T10722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10722 comm=syz.2.2439 [ 160.673313][T10724] siw: device registration error -23 [ 160.683057][T10724] loop6: detected capacity change from 0 to 1024 [ 160.691894][T10724] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.705050][T10724] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.719696][T10724] binfmt_misc: register: failed to install interpreter file ./file2 [ 160.780940][T10732] loop9: detected capacity change from 0 to 7 [ 160.788527][T10732] loop9: unable to read partition table [ 160.792961][T10733] lo speed is unknown, defaulting to 1000 [ 160.796033][T10732] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 160.796033][T10732] ) failed (rc=-5) [ 160.925783][T10743] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 160.954805][T10745] siw: device registration error -23 [ 161.025336][T10745] binfmt_misc: register: failed to install interpreter file ./file2 [ 161.125831][T10758] loop9: detected capacity change from 0 to 7 [ 161.140118][T10758] loop9: unable to read partition table [ 161.153834][T10758] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 161.153834][T10758] ) failed (rc=-5) [ 161.336751][T10771] siw: device registration error -23 [ 161.357680][T10771] loop5: detected capacity change from 0 to 1024 [ 161.373894][T10771] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.387205][T10771] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.419113][T10771] binfmt_misc: register: failed to install interpreter file ./file2 [ 161.495580][T10781] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 161.535726][T10783] siw: device registration error -23 [ 161.546207][T10783] loop4: detected capacity change from 0 to 1024 [ 161.554870][T10783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.570222][T10783] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.607449][T10783] binfmt_misc: register: failed to install interpreter file ./file2 [ 161.853584][T10812] siw: device registration error -23 [ 161.863712][T10812] loop4: detected capacity change from 0 to 1024 [ 161.872237][T10812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.878675][T10815] loop6: detected capacity change from 0 to 1024 [ 161.886925][T10812] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.892834][T10815] EXT4-fs (loop6): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 161.917720][T10815] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.934161][T10812] binfmt_misc: register: failed to install interpreter file ./file2 [ 161.934843][T10815] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 161.998869][T10824] loop9: detected capacity change from 0 to 7 [ 162.006232][T10824] buffer_io_error: 10 callbacks suppressed [ 162.006246][T10824] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.020283][T10824] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.028185][T10824] loop9: unable to read partition table [ 162.050206][T10824] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 162.050206][T10824] ) failed (rc=-5) [ 162.131057][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2486'. [ 162.140563][T10835] IPVS: Error joining to the multicast group [ 162.165770][T10839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=10839 comm=syz.4.2488 [ 162.178471][T10839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=10839 comm=syz.4.2488 [ 162.270556][T10851] siw: device registration error -23 [ 162.285451][T10851] binfmt_misc: register: failed to install interpreter file ./file2 [ 162.291281][T10853] loop4: detected capacity change from 0 to 512 [ 162.317551][T10853] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.330995][T10853] EXT4-fs (loop4): 1 truncate cleaned up [ 162.340341][T10853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.353557][T10853] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.367275][T10861] loop9: detected capacity change from 0 to 7 [ 162.373963][T10861] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.382430][T10861] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.390376][T10861] loop9: unable to read partition table [ 162.396456][T10861] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 162.396456][T10861] ) failed (rc=-5) [ 162.397744][ T1451] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 162.452653][T10867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2498'. [ 162.456126][ T7206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.461812][T10867] IPVS: Error joining to the multicast group [ 162.551275][T10883] siw: device registration error -23 [ 162.580205][T10886] loop9: detected capacity change from 0 to 7 [ 162.584481][T10887] loop5: detected capacity change from 0 to 128 [ 162.588141][T10886] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.600595][T10886] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.608522][T10886] loop9: unable to read partition table [ 162.614390][T10886] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 162.614390][T10886] ) failed (rc=-5) [ 162.664418][T10887] lo speed is unknown, defaulting to 1000 [ 162.683845][T10900] loop6: detected capacity change from 0 to 1024 [ 162.691014][T10900] EXT4-fs: Ignoring removed orlov option [ 162.702435][ T31] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 162.737800][T10900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.793858][ T7206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.813406][T10913] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 162.825190][T10917] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 162.862244][T10919] siw: device registration error -23 [ 162.866239][T10923] loop9: detected capacity change from 0 to 7 [ 162.876407][T10923] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.885816][T10923] Buffer I/O error on dev loop9, logical block 0, async page read [ 162.893872][T10923] loop9: unable to read partition table [ 162.899846][T10923] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 162.899846][T10923] ) failed (rc=-5) [ 162.902575][T10919] binfmt_misc: register: failed to install interpreter file ./file2 [ 162.942439][T10926] siw: device registration error -23 [ 162.955353][T10926] loop5: detected capacity change from 0 to 1024 [ 162.958031][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2525'. [ 162.965936][T10926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.970792][T10932] IPVS: Error joining to the multicast group [ 162.983897][T10926] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.011547][T10926] binfmt_misc: register: failed to install interpreter file ./file2 [ 163.036219][T10940] loop5: detected capacity change from 0 to 1024 [ 163.043336][T10940] EXT4-fs: Ignoring removed orlov option [ 163.050284][ T31] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 163.064921][T10940] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.100325][T10946] loop6: detected capacity change from 0 to 1024 [ 163.109280][T10946] EXT4-fs: Ignoring removed orlov option [ 163.139860][T10946] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.163080][ T4232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.184695][T10952] loop9: detected capacity change from 0 to 7 [ 163.190969][T10952] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.200471][T10952] Buffer I/O error on dev loop9, logical block 0, async page read [ 163.208409][T10952] loop9: unable to read partition table [ 163.215559][ T7206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.215689][T10952] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 163.215689][T10952] ) failed (rc=-5) [ 163.286564][T10958] loop6: detected capacity change from 0 to 128 [ 163.311436][T10958] lo speed is unknown, defaulting to 1000 [ 163.320172][T10962] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 163.359332][T10965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2537'. [ 163.368470][T10965] IPVS: Error joining to the multicast group [ 163.395464][T10972] loop4: detected capacity change from 0 to 512 [ 163.402293][T10972] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 163.414352][T10972] EXT4-fs (loop4): 1 truncate cleaned up [ 163.420477][T10972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.433730][T10972] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.446388][ T1451] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 163.473916][T10979] loop5: detected capacity change from 0 to 1024 [ 163.480936][T10979] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 163.495243][T10979] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.511002][T10979] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 163.522556][T10984] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 163.550296][T10986] loop6: detected capacity change from 0 to 1024 [ 163.557125][T10986] EXT4-fs: Ignoring removed orlov option [ 163.583998][T10986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.624870][ T7206] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.683072][ T4232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.708856][T10995] loop5: detected capacity change from 0 to 512 [ 163.716218][T10995] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 163.727849][T10995] EXT4-fs (loop5): 1 truncate cleaned up [ 163.733990][T10995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.746928][T10995] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.880916][T11009] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 163.968049][T11011] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 164.252092][T11018] siw: device registration error -23 [ 164.261502][T11018] loop4: detected capacity change from 0 to 1024 [ 164.269932][T11018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.283067][T11018] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.298058][T11018] binfmt_misc: register: failed to install interpreter file ./file2 [ 164.321768][T11021] siw: device registration error -23 [ 164.331853][T11021] loop4: detected capacity change from 0 to 1024 [ 164.340399][T11021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.353551][T11021] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.368925][T11021] binfmt_misc: register: failed to install interpreter file ./file2 [ 164.389357][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 164.389372][ T29] audit: type=1326 audit(1754456188.204:12408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11023 comm="syz.4.2558" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f58249debe9 code=0x0 [ 164.464861][T11025] loop4: detected capacity change from 0 to 8192 [ 164.474942][T11025] syz.4.2558: attempt to access beyond end of device [ 164.474942][T11025] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 164.488668][T11025] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 164.496536][T11025] FAT-fs (loop4): Filesystem has been set read-only [ 164.503612][T11025] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 164.511608][T11025] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 164.555195][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2561'. [ 164.565014][T11032] IPVS: Error joining to the multicast group [ 164.588555][T11037] loop6: detected capacity change from 0 to 128 [ 164.592810][T11038] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 164.620380][ T29] audit: type=1326 audit(1754456188.434:12409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11039 comm="syz.5.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 164.644241][ T29] audit: type=1326 audit(1754456188.434:12410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11039 comm="syz.5.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 164.644281][T11040] loop5: detected capacity change from 0 to 512 [ 164.667857][ T29] audit: type=1326 audit(1754456188.434:12411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11039 comm="syz.5.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 164.676031][T11040] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 164.697901][ T29] audit: type=1326 audit(1754456188.434:12412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11039 comm="syz.5.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 164.731347][ T29] audit: type=1326 audit(1754456188.434:12413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11039 comm="syz.5.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 164.754987][ T29] audit: type=1326 audit(1754456188.434:12414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11039 comm="syz.5.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 164.758515][T11040] EXT4-fs (loop5): 1 truncate cleaned up [ 164.778709][ T29] audit: type=1326 audit(1754456188.434:12415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11039 comm="syz.5.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 164.778740][ T29] audit: type=1326 audit(1754456188.434:12416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11039 comm="syz.5.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 164.784860][T11040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.808134][ T29] audit: type=1326 audit(1754456188.434:12417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11039 comm="syz.5.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f468ce3ebe9 code=0x7ffc0000 [ 164.844784][T11040] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.929468][T11047] binfmt_misc: register: failed to install interpreter file ./file2 [ 164.954197][T11051] loop9: detected capacity change from 0 to 7 [ 164.967502][T11051] loop9: unable to read partition table [ 164.974427][T11051] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 164.974427][T11051] ) failed (rc=-5) [ 165.100897][T11064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2575'. [ 165.122015][T11064] IPVS: Error joining to the multicast group [ 165.145925][T11066] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 165.168525][T11068] loop6: detected capacity change from 0 to 128 [ 165.336667][T11071] loop4: detected capacity change from 0 to 8192 [ 165.353668][T11071] syz.4.2578: attempt to access beyond end of device [ 165.353668][T11071] loop4: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 165.370094][T11071] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 165.378162][T11071] FAT-fs (loop4): Filesystem has been set read-only [ 165.390152][T11071] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 165.398487][T11071] FAT-fs (loop4): error, invalid access to FAT (entry 0x0000e1b1) [ 165.411899][T11077] siw: device registration error -23 [ 165.422178][T11077] loop6: detected capacity change from 0 to 1024 [ 165.431038][T11077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.445034][T11077] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.463324][T11077] binfmt_misc: register: failed to install interpreter file ./file2 [ 165.483787][T11085] loop5: detected capacity change from 0 to 1024 [ 165.490793][T11085] EXT4-fs: Ignoring removed orlov option [ 165.504538][T11085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.593416][T11098] loop6: detected capacity change from 0 to 128 [ 165.617193][T11098] lo speed is unknown, defaulting to 1000 [ 165.689174][ T4232] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.710107][T11094] lo speed is unknown, defaulting to 1000 [ 165.711820][T11103] loop5: detected capacity change from 0 to 128 [ 165.819294][T11110] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 165.831192][ T2842] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 165.883171][T11113] siw: device registration error -23 [ 165.911186][T11118] loop5: detected capacity change from 0 to 512 [ 165.920307][T11113] binfmt_misc: register: failed to install interpreter file ./file2 [ 165.940639][T11118] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 165.955047][T11118] EXT4-fs (loop5): 1 truncate cleaned up [ 165.961157][T11118] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.975416][T11118] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.979417][T11123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=11123 comm=syz.3.2597 [ 165.997001][T11123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=11123 comm=syz.3.2597 [ 166.122136][T11132] siw: device registration error -23 [ 166.140188][T11132] binfmt_misc: register: failed to install interpreter file ./file2 [ 166.258114][T11144] loop4: detected capacity change from 0 to 1024 [ 166.276156][T11144] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 166.293669][ T31] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 166.360298][T11150] loop6: detected capacity change from 0 to 128 [ 166.451397][T11151] lo speed is unknown, defaulting to 1000 [ 166.499899][T11153] loop6: detected capacity change from 0 to 128 [ 166.521245][T11153] lo speed is unknown, defaulting to 1000 [ 166.722718][T11156] binfmt_misc: register: failed to install interpreter file ./file2 [ 166.748499][T11160] loop5: detected capacity change from 0 to 1024 [ 166.755944][T11160] EXT4-fs: Ignoring removed orlov option [ 166.838543][T11172] binfmt_misc: register: failed to install interpreter file ./file2 [ 166.937823][T11182] loop5: detected capacity change from 0 to 8192 [ 166.955990][T11182] syz.5.2615: attempt to access beyond end of device [ 166.955990][T11182] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 166.978286][T11186] loop6: detected capacity change from 0 to 512 [ 166.985474][T11186] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 166.996804][T11186] EXT4-fs (loop6): 1 truncate cleaned up [ 167.003176][T11182] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 167.011022][T11182] FAT-fs (loop5): Filesystem has been set read-only [ 167.029551][T11182] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 167.039275][T11182] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 167.161273][T11204] siw: device registration error -23 [ 167.173701][T11204] loop4: detected capacity change from 0 to 1024 [ 167.199457][T11204] binfmt_misc: register: failed to install interpreter file ./file2 [ 167.338596][T11225] siw: device registration error -23 [ 167.348578][T11225] loop4: detected capacity change from 0 to 1024 [ 167.426151][T11236] siw: device registration error -23 [ 167.436698][T11236] loop4: detected capacity change from 0 to 1024 [ 167.467122][T11236] binfmt_misc: register: failed to install interpreter file ./file2 [ 167.560658][T11251] loop4: detected capacity change from 0 to 1024 [ 167.567514][T11251] EXT4-fs: Ignoring removed orlov option [ 167.711672][T11260] siw: device registration error -23 [ 167.723497][T11260] loop5: detected capacity change from 0 to 1024 [ 167.748512][T11263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=11263 comm=syz.4.2649 [ 167.761156][T11263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=11263 comm=syz.4.2649 [ 167.824781][T11267] binfmt_misc: register: failed to install interpreter file ./file2 [ 168.009251][T11291] loop5: detected capacity change from 0 to 512 [ 168.016583][T11291] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 168.030196][T11291] EXT4-fs (loop5): 1 truncate cleaned up [ 168.190597][T11301] siw: device registration error -23 [ 168.200984][T11301] loop4: detected capacity change from 0 to 1024 [ 168.216527][T11301] binfmt_misc: register: failed to install interpreter file ./file2 [ 168.271705][T11314] loop4: detected capacity change from 0 to 1024 [ 168.281172][T11313] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 168.291763][T11314] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 168.342386][T11314] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 168.619697][T11339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=11339 comm=syz.6.2681 [ 168.632316][T11339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=11339 comm=syz.6.2681 [ 168.656613][T11341] siw: device registration error -23 [ 168.671356][T11341] binfmt_misc: register: failed to install interpreter file ./file2 [ 168.705962][T11343] lo speed is unknown, defaulting to 1000 [ 168.869386][T11350] loop6: detected capacity change from 0 to 8192 [ 168.929787][T11354] loop5: detected capacity change from 0 to 128 [ 168.937435][T11350] syz.6.2685: attempt to access beyond end of device [ 168.937435][T11350] loop6: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 168.965827][T11350] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 168.973709][T11350] FAT-fs (loop6): Filesystem has been set read-only [ 168.988537][T11350] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 168.997931][T11350] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 169.102906][ T1451] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 169.167841][T11373] siw: device registration error -23 [ 169.179902][T11373] loop4: detected capacity change from 0 to 1024 [ 169.184632][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2695'. [ 169.198539][T11375] IPVS: Error joining to the multicast group [ 169.230500][T11373] binfmt_misc: register: failed to install interpreter file ./file2 [ 169.233173][T11381] loop5: detected capacity change from 0 to 128 [ 169.274234][T11381] lo speed is unknown, defaulting to 1000 [ 169.293835][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2699'. [ 169.321152][T11386] IPVS: Error joining to the multicast group [ 169.395183][T11383] lo speed is unknown, defaulting to 1000 [ 169.401028][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 169.401041][ T29] audit: type=1326 audit(1754456193.214:12757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.4.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 169.407802][T11397] loop4: detected capacity change from 0 to 512 [ 169.430894][ T29] audit: type=1326 audit(1754456193.214:12758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.4.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 169.430924][ T29] audit: type=1326 audit(1754456193.214:12759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.4.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 169.463891][T11397] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 169.484401][ T29] audit: type=1326 audit(1754456193.214:12760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.4.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 169.496750][T11397] EXT4-fs (loop4): 1 truncate cleaned up [ 169.517812][ T29] audit: type=1326 audit(1754456193.214:12761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.4.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 169.547281][ T29] audit: type=1326 audit(1754456193.214:12762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.4.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 169.570930][ T29] audit: type=1326 audit(1754456193.214:12763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.4.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 169.594665][ T29] audit: type=1326 audit(1754456193.214:12764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.4.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 169.618241][ T29] audit: type=1326 audit(1754456193.214:12765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.4.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 169.642009][ T29] audit: type=1326 audit(1754456193.214:12766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11396 comm="syz.4.2700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58249debe9 code=0x7ffc0000 [ 169.712597][T11407] loop6: detected capacity change from 0 to 128 [ 169.732412][T11383] chnl_net:caif_netlink_parms(): no params data found [ 169.774007][ T363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.784351][ T363] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.795443][T11383] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.802646][T11383] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.809830][T11383] bridge_slave_0: entered allmulticast mode [ 169.816369][T11383] bridge_slave_0: entered promiscuous mode [ 169.823330][T11383] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.830675][T11383] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.837981][T11383] bridge_slave_1: entered allmulticast mode [ 169.838299][ T1451] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 169.844491][T11383] bridge_slave_1: entered promiscuous mode [ 169.868588][ T363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.878926][ T363] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.908437][T11383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.919676][T11383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.951875][ T363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.951976][T11427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2709'. [ 169.962230][ T363] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.984559][T11383] team0: Port device team_slave_0 added [ 169.994054][T11383] team0: Port device team_slave_1 added [ 169.999870][T11427] loop5: detected capacity change from 0 to 512 [ 170.007291][T11427] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 170.024408][T11383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.031372][T11383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.038010][T11431] loop6: detected capacity change from 0 to 1024 [ 170.057334][T11383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.059716][T11383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.063867][T11427] EXT4-fs (loop5): 1 truncate cleaned up [ 170.074227][T11383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.074259][T11383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.076598][T11431] EXT4-fs: Ignoring removed orlov option [ 170.083287][ T363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.139350][ T363] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.194324][T11383] hsr_slave_0: entered promiscuous mode [ 170.205992][T11383] hsr_slave_1: entered promiscuous mode [ 170.212242][T11383] debugfs: 'hsr0' already exists in 'hsr' [ 170.218029][T11383] Cannot create hsr debugfs directory [ 170.280794][T11447] loop4: detected capacity change from 0 to 128 [ 170.372254][ T363] dvmrp0 (unregistering): left allmulticast mode [ 170.426934][ T363] bond0 (unregistering): left promiscuous mode [ 170.433223][ T363] bond_slave_0: left promiscuous mode [ 170.438659][ T363] bond_slave_1: left promiscuous mode [ 170.443623][T11460] loop4: detected capacity change from 0 to 512 [ 170.451408][T11460] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 170.461703][ T363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.464972][T11460] EXT4-fs (loop4): 1 truncate cleaned up [ 170.473420][ T1451] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 170.487731][ T363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.503424][ T363] bond0 (unregistering): Released all slaves [ 170.511613][T11451] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 170.534057][ T363] tipc: Left network mode [ 170.539502][ T363] macvlan1: left promiscuous mode [ 170.546704][ T363] hsr_slave_0: left promiscuous mode [ 170.553435][ T363] hsr_slave_1: left promiscuous mode [ 170.559520][ T363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.566983][ T363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.580522][T11465] ================================================================== [ 170.588609][T11465] BUG: KCSAN: data-race in selinux_inode_permission / selinux_inode_permission [ 170.597537][T11465] [ 170.599847][T11465] write to 0xffff888102003420 of 4 bytes by task 11466 on cpu 1: [ 170.607551][T11465] selinux_inode_permission+0x3ac/0x740 [ 170.613083][T11465] security_inode_permission+0x6d/0xb0 [ 170.618561][T11465] inode_permission+0x106/0x310 [ 170.623398][T11465] link_path_walk+0x162/0x900 [ 170.628078][T11465] path_openat+0x1de/0x2170 [ 170.632569][T11465] do_filp_open+0x109/0x230 [ 170.637070][T11465] io_openat2+0x272/0x390 [ 170.641405][T11465] io_openat+0x1b/0x30 [ 170.645471][T11465] __io_issue_sqe+0xfb/0x2e0 [ 170.650080][T11465] io_issue_sqe+0x53/0x970 [ 170.654505][T11465] io_wq_submit_work+0x3f7/0x5f0 [ 170.659461][T11465] io_worker_handle_work+0x44e/0x9b0 [ 170.664768][T11465] io_wq_worker+0x22e/0x870 [ 170.669274][T11465] ret_from_fork+0xda/0x150 [ 170.673855][T11465] ret_from_fork_asm+0x1a/0x30 [ 170.678610][T11465] [ 170.680918][T11465] read to 0xffff888102003420 of 4 bytes by task 11465 on cpu 0: [ 170.688539][T11465] selinux_inode_permission+0x334/0x740 [ 170.694095][T11465] security_inode_permission+0x6d/0xb0 [ 170.699562][T11465] inode_permission+0x106/0x310 [ 170.704417][T11465] link_path_walk+0x162/0x900 [ 170.709093][T11465] path_openat+0x1de/0x2170 [ 170.713585][T11465] do_filp_open+0x109/0x230 [ 170.718077][T11465] io_openat2+0x272/0x390 [ 170.722398][T11465] io_openat+0x1b/0x30 [ 170.726460][T11465] __io_issue_sqe+0xfb/0x2e0 [ 170.731048][T11465] io_issue_sqe+0x53/0x970 [ 170.735477][T11465] io_submit_sqes+0x664/0x1050 [ 170.740330][T11465] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 170.745885][T11465] __x64_sys_io_uring_enter+0x78/0x90 [ 170.751263][T11465] x64_sys_call+0x2de1/0x2ff0 [ 170.755930][T11465] do_syscall_64+0xd2/0x200 [ 170.760603][T11465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.766488][T11465] [ 170.768799][T11465] value changed: 0x00000000 -> 0x00000001 [ 170.774498][T11465] [ 170.776803][T11465] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 170.782949][T11465] CPU: 0 UID: 0 PID: 11465 Comm: syz.3.2721 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(voluntary) [ 170.795278][T11465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.805324][T11465] ================================================================== [ 170.815673][ T363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.823087][ T363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.835022][ T363] veth1_macvtap: left promiscuous mode [ 170.840549][ T363] veth0_macvtap: left promiscuous mode [ 170.846165][ T363] veth1_vlan: left promiscuous mode [ 170.851469][ T363] veth0_vlan: left promiscuous mode [ 170.968736][ T363] team0 (unregistering): Port device team_slave_1 removed [ 170.993774][ T363] team0 (unregistering): Port device team_slave_0 removed [ 171.040438][ T3385] lo speed is unknown, defaulting to 1000 [ 171.046253][ T3385] infiniband syz0: ib_query_port failed (-19) [ 171.536434][ T363] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.595751][ T363] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.654708][ T363] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.703541][ T363] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.773407][ T363] bridge_slave_1: left allmulticast mode [ 171.779207][ T363] bridge_slave_1: left promiscuous mode [ 171.784901][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.792378][ T363] bridge_slave_0: left allmulticast mode [ 171.798008][ T363] bridge_slave_0: left promiscuous mode [ 171.804038][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.812102][ T363] bridge_slave_1: left allmulticast mode [ 171.817871][ T363] bridge_slave_1: left promiscuous mode [ 171.823563][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.831067][ T363] bridge_slave_0: left allmulticast mode [ 171.836734][ T363] bridge_slave_0: left promiscuous mode [ 171.842505][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.903887][ T363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.913673][ T363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.922900][ T363] bond0 (unregistering): Released all slaves [ 172.034420][ T363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.044153][ T363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.053543][ T363] bond0 (unregistering): Released all slaves [ 172.061556][ T363] bond1 (unregistering): (slave bond2): Releasing backup interface [ 172.069692][ T363] bond2 (unregistering): left promiscuous mode [ 172.076153][ T363] bond1 (unregistering): Released all slaves [ 172.084164][ T363] bond2 (unregistering): Released all slaves [ 172.117874][ T363] hsr_slave_0: left promiscuous mode [ 172.123536][ T363] hsr_slave_1: left promiscuous mode [ 172.129086][ T363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.136605][ T363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.145387][ T363] hsr_slave_0: left promiscuous mode [ 172.150840][ T363] hsr_slave_1: left promiscuous mode [ 172.156557][ T363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.163994][ T363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.171625][ T363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.179080][ T363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.188557][ T363] veth1_macvtap: left promiscuous mode [ 172.194121][ T363] veth0_macvtap: left promiscuous mode [ 172.199607][ T363] veth1_vlan: left promiscuous mode [ 172.204939][ T363] veth0_vlan: left promiscuous mode [ 172.255406][ T363] team0 (unregistering): Port device team_slave_1 removed [ 172.265528][ T363] team0 (unregistering): Port device team_slave_0 removed [ 172.309417][ T363] team0 (unregistering): Port device team_slave_1 removed [ 172.318851][ T363] team0 (unregistering): Port device team_slave_0 removed [ 172.815335][ T363] IPVS: stop unused estimator thread 0...